This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer File: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer (raw, json) Hash identifier: Ww0QPShpsC2qxBhC+QNHCyki3zkDYaa+QN/TuTCGzHY= Subject key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0283C2 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft caRepository: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 05 Jan 2026 13:01:49 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 134791 IP: 103.12.159.0/24 IP: 103.134.53.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164802 (0x283c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 5 13:01:49 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A914D05C, serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:55:5d:40:51:ef:45:f1:d2:39:00:41:79: 4f:6b:40:80:4a:07:b3:e1:9e:d4:38:22:e8:87:ac: 9f:d8:7d:2d:ba:d9:66:3c:49:14:db:d4:76:ed:c9: 23:41:12:d2:47:18:9a:d8:83:ac:b5:0e:cc:97:3c: f7:5a:cf:af:53:6f:89:77:90:0f:a4:7a:d3:48:74: 9f:51:d8:50:6d:5e:dd:78:23:04:ac:0f:4a:2f:9f: d5:b1:8b:28:a9:41:de:2f:bd:35:82:9c:57:e6:c9: d8:ad:94:61:5b:b6:27:b9:71:0b:7c:3f:f1:b7:92: 5a:f7:45:01:63:b8:47:69:b9:e8:80:1f:d1:30:08: ae:88:80:48:27:28:41:39:b1:d5:98:93:ee:9c:8f: 8a:21:1e:c7:5a:54:46:2a:95:6d:94:86:78:bf:47: a0:e2:29:47:91:28:e5:16:82:d0:9b:2c:48:17:94: 21:17:3f:2a:5b:16:68:ab:bf:3e:ac:27:da:1f:5f: bb:61:ed:ca:ea:cf:6b:bc:c3:81:1d:ec:3d:39:28: 0e:d4:13:38:3a:b1:c5:61:a3:1e:d9:9e:a1:62:05: bc:8b:c4:9c:3c:2f:e3:4d:12:30:50:c9:0d:6b:28: 67:99:8d:6e:79:cf:52:d1:cf:94:ba:0a:b9:ab:80: f1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134791 sbgp-ipAddrBlock: critical IPv4: 103.12.159.0/24 103.134.53.0/24 Signature Algorithm: sha256WithRSAEncryption d5:8a:28:cb:25:94:dc:69:a4:f0:17:40:01:68:65:1d:19:a0: 48:a2:4f:e4:4c:37:03:73:f2:29:a9:a3:12:f1:7d:e9:ab:7d: 7f:de:4e:08:db:b9:f6:e2:d9:43:b7:37:89:5b:11:e4:ee:85: 1c:ac:69:41:0f:60:db:fa:58:de:23:22:89:a8:9f:7a:f7:49: 0f:ea:41:03:c8:b9:f6:15:89:fc:43:1e:55:86:4c:fd:1e:5e: 79:be:4b:b1:0e:c9:2c:db:eb:45:46:6f:77:07:dd:91:2d:9c: 4d:0c:fb:90:6f:10:df:66:3e:04:5b:01:9e:92:76:7f:17:bd: 23:68:16:33:79:1f:c1:a0:f2:84:31:47:e5:66:93:b3:b8:ca: 1d:5d:9f:7f:6c:ec:91:6d:31:3d:d7:dd:d6:61:d9:6a:fe:26: a5:32:ba:ed:5a:97:de:b2:25:33:c6:e4:fd:b7:61:56:69:9d: 31:f7:3f:7e:d4:87:29:1b:8c:f0:1b:31:c1:9a:f0:23:b5:d3: b6:8e:41:f9:c5:a1:f7:4a:b7:ba:49:d6:62:ed:de:02:f8:73: 5a:f8:04:a1:5d:03:ce:08:c1:92:9a:be:f1:91:c0:14:00:63: 1f:b0:8f:cc:ea:04:75:87:d8:93:91:6b:e2:86:6f:37:6a:89: ff:88:ed:43 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAoPCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNTEzMDE0OVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNEQwNUMxMTAvBgNVBAUTKEM2OTM5OUIxMzJFMUFFNkIyRUEzMTE2 RTE0QjEwMDFDMDgxOUREQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSwFVdQFHvRfHSOQBBeU9rQIBKB7PhntQ4IuiHrJ/YfS262WY8SRTb1HbtySNB EtJHGJrYg6y1DsyXPPdaz69Tb4l3kA+ketNIdJ9R2FBtXt14IwSsD0ovn9Wxiyip Qd4vvTWCnFfmyditlGFbtie5cQt8P/G3klr3RQFjuEdpueiAH9EwCK6IgEgnKEE5 sdWYk+6cj4ohHsdaVEYqlW2Uhni/R6DiKUeRKOUWgtCbLEgXlCEXPypbFmirvz6s J9ofX7th7crqz2u8w4Ed7D05KA7UEzg6scVhox7ZnqFiBbyLxJw8L+NNEjBQyQ1r KGeZjW55z1LRz5S6CrmrgPFDAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUxpOZsTLh rmsuoxFuFLEAHAgZ3akwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTREMDVDL0RFQ0UwRjBBN0JENTExRUJCOTEyM0Q1MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0RDA1Qy9ERUNFMEYwQTdCRDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RM aHJtc3VveEZ1RkxFQUhBZ1ozYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg6HMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZwyfAwQAZ4Y1 MA0GCSqGSIb3DQEBCwUAA4IBAQDViijLJZTcaaTwF0ABaGUdGaBIok/kTDcDc/Ip qaMS8X3pq31/3k4I27n24tlDtzeJWxHk7oUcrGlBD2Db+ljeIyKJqJ9690kP6kED yLn2FYn8Qx5Vhkz9Hl55vkuxDsks2+tFRm93B92RLZxNDPuQbxDfZj4EWwGeknZ/ F70jaBYzeR/BoPKEMUflZpOzuModXZ9/bOyRbTE9193WYdlq/ialMrrtWpfesiUz xuT9t2FWaZ0x9z9+1IcpG4zwGzHBmvAjtdO2jkH5xaH3Sre6SdZi7d4C+HNa+ASh XQPOCMGSmr7xkcAUAGMfsI/M6gR1h9iTkWvihm83aon/iO1D -----END CERTIFICATE-----Generated at Sun Jan 25 06:00:42 2026 by rpki-client