This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer File: xQRWVXeumfYZHJeDPdvdYk7CTpI.cer (raw, json) Hash identifier: B4o2hQD2+2kaVcRCVzaTcV5lI8oYSd5TM1D3raWxBW8= Subject key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02867D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft caRepository: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 15 Jan 2026 13:16:31 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 103.160.100.0/23 IP: 2406:e840::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165501 (0x2867d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 15 13:16:31 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:64:2f:58:ea:73:55:b8:c4:c5:5b:33:0d: fb:a4:d1:10:79:b9:99:66:b1:ed:ea:28:32:49:e7: 4f:08:dd:a4:27:64:28:8d:f7:cc:f1:f7:bc:47:37: d8:6c:47:43:db:6d:b4:74:04:ba:e9:d7:00:78:00: d9:80:96:61:0f:eb:fd:0e:c9:09:ef:00:3d:f9:f4: 52:e8:f1:d5:7f:dc:b4:1e:f1:c5:5b:c2:45:21:b7: a4:14:78:eb:34:51:5d:d7:f4:14:df:95:de:02:fd: 6e:6b:98:94:b3:e6:93:9b:66:a6:37:cd:49:48:10: e4:8c:bd:60:6b:d9:a0:a1:15:62:6c:b6:71:01:12: 72:3e:01:58:60:89:1b:df:4e:e6:e2:4b:9a:42:4b: 64:8a:b3:5a:27:bc:fc:0e:15:82:49:cd:1d:88:38: 42:b8:ea:74:81:29:a3:bd:b5:b8:0e:cc:63:c6:a7: 49:a2:01:7c:ce:c1:06:c1:c4:95:62:42:42:db:a3: 6a:e2:9f:f4:7a:44:d0:e0:68:4e:af:ef:14:87:3d: 0c:d2:7c:94:d7:ba:b5:e5:52:00:50:e7:e0:42:2f: 27:3c:a0:70:50:e5:27:fb:4f:47:21:cb:f9:2a:2b: 03:62:4d:ed:08:90:f0:13:2b:86:c9:e9:28:6e:0a: 94:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.100.0/23 IPv6: 2406:e840::/32 Signature Algorithm: sha256WithRSAEncryption 60:36:2b:74:79:cc:c2:5d:b9:39:0e:3a:b1:20:fa:79:1f:c9: 74:49:5b:55:f7:04:56:0a:58:53:87:ed:d7:51:09:58:4f:a2: 9a:a1:8b:f0:d6:87:7c:9e:30:54:be:99:7b:6a:ea:46:6b:4c: 31:72:e6:77:e3:40:db:f7:ef:ec:c4:c8:ce:cc:67:32:bd:6d: 7f:60:e6:6f:61:2f:b1:f0:be:ce:18:65:6a:1f:19:6d:80:b2: 1a:50:49:71:1b:74:bf:52:ab:fa:67:5a:ca:68:54:b7:6c:a7: 3d:e1:88:b4:6a:a6:9a:35:c0:7c:c3:b4:77:c5:34:2b:fc:e5: 0e:f9:fa:9e:1e:a3:53:84:24:be:55:bc:81:3a:16:39:fe:df: 95:21:cf:b3:87:7a:53:80:5a:10:cb:9c:ee:2c:c3:07:2d:63: 91:7e:2d:e3:f1:24:f0:8f:c0:35:ce:62:8e:d3:43:31:c0:71: ff:7e:0c:7b:29:f2:67:06:d4:f2:dd:82:e5:a2:f8:62:14:df: 65:87:5e:34:72:b2:c5:c4:4c:11:af:be:13:6f:42:e6:8d:a5: d2:e4:a9:e3:af:aa:f3:4d:32:ad:bb:ca:b0:05:76:94:57:77: 87:01:81:bf:8a:aa:e8:f5:eb:4c:7a:7b:ee:45:a3:be:0f:e9: eb:1c:f5:d9 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIDAoZ9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExNTEzMTYzMVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxNkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4 MzNEREJERDYyNEVDMjRFOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPX2QvWOpzVbjExVszDfuk0RB5uZlmse3qKDJJ508I3aQnZCiN98zx97xHN9hs R0PbbbR0BLrp1wB4ANmAlmEP6/0OyQnvAD359FLo8dV/3LQe8cVbwkUht6QUeOs0 UV3X9BTfld4C/W5rmJSz5pObZqY3zUlIEOSMvWBr2aChFWJstnEBEnI+AVhgiRvf TubiS5pCS2SKs1onvPwOFYJJzR2IOEK46nSBKaO9tbgOzGPGp0miAXzOwQbBxJVi QkLbo2rin/R6RNDgaE6v7xSHPQzSfJTXurXlUgBQ5+BCLyc8oHBQ5Sf7T0chy/kq KwNiTe0IkPATK4bJ6ShuCpTPAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUxQRWVXeu mfYZHJeDPdvdYk7CTpIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZEMTI4LzkwREU5QzY2M0VBMzExRUI4QUNCOTAxM0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2RDEyOC85MERFOUM2NjNFQTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhl dW1mWVpISmVEUGR2ZFlrN0NUcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBAFnoGQwDQQCAAIwBwMFACQG6EAwDQYJKoZIhvcNAQELBQADggEB AGA2K3R5zMJduTkOOrEg+nkfyXRJW1X3BFYKWFOH7ddRCVhPopqhi/DWh3yeMFS+ mXtq6kZrTDFy5nfjQNv37+zEyM7MZzK9bX9g5m9hL7Hwvs4YZWofGW2AshpQSXEb dL9Sq/pnWspoVLdspz3hiLRqppo1wHzDtHfFNCv85Q75+p4eo1OEJL5VvIE6Fjn+ 35Uhz7OHelOAWhDLnO4swwctY5F+LePxJPCPwDXOYo7TQzHAcf9+DHsp8mcG1PLd guWi+GIU32WHXjRyssXETBGvvhNvQuaNpdLkqeOvqvNNMq27yrAFdpRXd4cBgb+K quj160x6e+5Fo74P6esc9dk= -----END CERTIFICATE-----Generated at Sun Jan 25 01:13:34 2026 by rpki-client