This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer File: 64EbFIiyDxJmTmSKgmJKMFBonyU.cer (raw, json) Hash identifier: MD+IPfTEl3vP3oxb4IjUNzpA/zZtuDZavEOER91caTY= Subject key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02849C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft caRepository: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 08 Jan 2026 12:50:19 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 136156 IP: 103.82.8.0/22 IP: 202.52.40.0/24 IP: 202.125.108.0/24 IP: 203.4.187.0/24 IP: 203.17.65.0/24 IP: 2402:d3c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Jan 2026 01:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165020 (0x2849c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 8 12:50:19 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:49:f6:f8:60:cd:c6:91:3f:5d:80:e2:28: ab:1d:3f:b4:5d:78:c9:f6:07:94:cd:71:45:87:ed: 49:7b:af:f1:1c:a5:da:a3:ee:a1:60:6c:04:f5:8a: 4c:09:01:a4:0f:a2:e9:8b:32:fa:c8:9d:59:36:67: 3d:26:34:fb:fe:3f:4f:8d:73:ae:e2:b0:18:de:30: 88:42:a2:46:93:f0:19:38:54:ac:dc:1a:a9:c8:24: 44:9c:36:16:fa:31:36:69:f0:88:b0:c9:11:94:5c: 7f:5b:9f:ae:dc:7e:e7:d6:e0:9d:4d:af:e1:68:2b: e9:85:80:d8:c2:4a:10:9d:10:1b:2e:28:ef:a0:c6: 96:2b:34:84:a0:14:b4:18:83:4b:bf:cd:12:6a:a7: 7f:e6:3d:23:00:1a:32:48:56:e8:58:59:51:95:fa: c6:4d:a6:c2:28:ba:a4:bd:c0:19:c9:c2:d7:94:1b: f1:c1:ad:c4:ce:ea:5b:be:9b:f9:eb:6a:cc:e8:50: 1c:80:01:a5:e6:46:3c:dc:39:5b:a0:b8:b0:18:7e: 63:1c:00:76:3c:4d:24:0c:02:cc:ae:35:19:12:98: 91:d5:5b:39:eb:62:11:3e:2c:b2:14:70:8a:7a:60: 55:ae:2d:77:16:e6:32:ba:40:40:b8:4b:23:ad:2c: 30:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136156 sbgp-ipAddrBlock: critical IPv4: 103.82.8.0/22 202.52.40.0/24 202.125.108.0/24 203.4.187.0/24 203.17.65.0/24 IPv6: 2402:d3c0::/32 Signature Algorithm: sha256WithRSAEncryption 4e:0d:0f:07:42:53:8b:ec:2e:89:98:b1:34:f3:c0:1c:8d:24: 80:35:fe:1b:d1:6e:e2:e0:a7:58:c1:b8:74:db:8e:c9:10:c5: c1:0c:d8:0d:f3:a9:e1:3c:6a:d6:93:7d:5c:e8:8b:b8:58:28: 2b:15:f5:49:46:5e:32:0d:8f:b2:94:30:22:b4:cb:7c:52:ab: 73:22:70:ad:be:3d:43:d0:a5:fb:40:fa:6b:ef:a3:da:ed:9b: 1d:d3:45:4e:fc:26:b8:ef:b7:48:2c:06:1e:18:d2:6d:41:52: 0b:61:e7:4b:b8:e9:05:52:18:81:b7:4d:9d:33:0a:82:42:06: 45:af:7f:1d:b7:b6:23:bb:f5:fa:b4:07:36:28:10:96:69:0d: 19:e4:f9:b2:32:ba:68:eb:0f:1c:9e:9f:2d:3b:47:64:b9:f8: de:f7:ca:91:a7:0f:d3:bc:11:d1:35:7c:ff:78:0b:7b:f1:23: 2a:e1:32:4d:b7:5f:ef:be:2e:d8:28:3f:cd:a2:2a:8d:1f:ae: 5c:78:d1:ba:ed:2f:e0:1c:d4:73:5b:ef:7a:24:97:f8:d9:2d: e5:8e:8f:20:56:20:7b:15:63:df:34:1c:c5:94:43:e4:b0:38: 6f:eb:e8:ea:1b:66:eb:46:cb:af:77:83:82:16:b0:2d:05:39: cb:aa:98:50 -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIDAoScMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwODEyNTAxOVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxM0QzMEExMTAvBgNVBAUTKEVCODExQjE0ODhCMjBGMTI2NjRFNjQ4 QTgyNjI0QTMwNTA2ODlGMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7L0n2+GDNxpE/XYDiKKsdP7RdeMn2B5TNcUWH7Ul7r/Ecpdqj7qFgbAT1ikwJ AaQPoumLMvrInVk2Zz0mNPv+P0+Nc67isBjeMIhCokaT8Bk4VKzcGqnIJEScNhb6 MTZp8IiwyRGUXH9bn67cfufW4J1Nr+FoK+mFgNjCShCdEBsuKO+gxpYrNISgFLQY g0u/zRJqp3/mPSMAGjJIVuhYWVGV+sZNpsIouqS9wBnJwteUG/HBrcTO6lu+m/nr aszoUByAAaXmRjzcOVuguLAYfmMcAHY8TSQMAsyuNRkSmJHVWznrYhE+LLIUcIp6 YFWuLXcW5jK6QEC4SyOtLDBHAgMBAAGjggM2MIIDMjAdBgNVHQ4EFgQU64EbFIiy DxJmTmSKgmJKMFBonyUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNEMzBBL0I4NTQyNEY4RDQ5ODExRTlCOTQ3NDczOEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzRDMwQS9CODU0MjRGOEQ0OTgxMUU5Qjk0NzQ3MzhDNEY5QUUwMi82NEViRklp eUR4Sm1UbVNLZ21KS01GQm9ueVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhPcMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCZ1IIAwQAyjQo AwQAyn1sAwQAywS7AwQAyxFBMA0EAgACMAcDBQAkAtPAMA0GCSqGSIb3DQEBCwUA A4IBAQBODQ8HQlOL7C6JmLE088AcjSSANf4b0W7i4KdYwbh0247JEMXBDNgN86nh PGrWk31c6Iu4WCgrFfVJRl4yDY+ylDAitMt8UqtzInCtvj1D0KX7QPpr76Pa7Zsd 00VO/Ca477dILAYeGNJtQVILYedLuOkFUhiBt02dMwqCQgZFr38dt7Yju/X6tAc2 KBCWaQ0Z5PmyMrpo6w8cnp8tO0dkufje98qRpw/TvBHRNXz/eAt78SMq4TJNt1/v vi7YKD/NoiqNH65ceNG67S/gHNRzW+96JJf42S3ljo8gViB7FWPfNBzFlEPksDhv 6+jqG2brRsuvd4OCFrAtBTnLqphQ -----END CERTIFICATE-----Generated at Tue Jan 13 03:43:34 2026 by rpki-client