This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer (raw, json) Hash identifier: qoh+Qw3AuSYrCWfPP6pdctootsIc7D0HY95AowwacBg= Subject key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0282EA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 01 Jan 2026 13:48:25 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 43.230.160.0/22 IP: 103.20.234.0/23 IP: 103.27.132.0/22 IP: 103.159.64.0/23 IP: 117.55.192.0/22 IP: 117.55.204.0/22 IP: 202.43.4.0/22 IP: 203.96.176.0/22 IP: 210.16.64.0/22 IP: 2406:cb40::/30 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 14:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164586 (0x282ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 1 13:48:25 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:90:ba:33:78:3e:f5:9c:38:f2:96:3f:5d:4e: b8:c0:89:e5:62:a7:cd:da:a9:69:40:88:19:54:46: 99:9a:d5:9e:4a:ef:29:e1:c4:91:30:56:6d:2a:11: 4f:4c:25:6a:6e:00:4d:8e:da:8a:8e:36:f4:f6:75: ab:98:e5:be:74:2e:93:65:12:df:12:c7:47:3c:3a: d5:2a:7b:93:4a:d3:44:4a:a3:e3:f6:57:a2:97:f7: 9e:30:a6:96:24:0b:2d:c3:0c:0b:a5:fa:95:c9:03: fe:78:84:03:6b:47:91:d9:69:d3:f8:b3:5e:3c:c7: f3:1c:b4:51:e7:a5:98:d2:3a:bd:88:75:41:30:2d: d1:01:0d:86:42:8f:69:ea:94:89:95:4e:41:ed:92: f8:bd:56:1c:0b:19:e2:0d:6a:3a:11:a8:2f:00:fa: 9d:84:f0:75:c2:06:6e:22:ab:a7:2c:46:82:3f:26: 07:29:fe:a9:27:90:91:d4:99:33:fd:32:1d:06:f6: ed:dc:ee:28:bb:f0:4a:82:12:c5:f6:de:c8:1a:d8: d4:69:c2:a2:db:09:bf:6b:3e:d1:47:67:4a:b6:05: 66:4a:37:af:33:91:33:a5:95:f7:71:27:ff:44:a5: 2f:8e:bd:f2:e0:c5:95:b8:a7:95:c2:0d:6b:4d:b5: 10:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.160.0/22 103.20.234.0/23 103.27.132.0/22 103.159.64.0/23 117.55.192.0/22 117.55.204.0/22 202.43.4.0/22 203.96.176.0/22 210.16.64.0/22 IPv6: 2406:cb40::/30 Signature Algorithm: sha256WithRSAEncryption 58:8e:7e:5d:02:43:52:d8:29:65:09:a0:00:df:e4:02:fd:9b: 19:c7:86:e1:4e:4c:af:50:4b:a8:8d:01:36:cc:97:7c:83:e8: 1b:5b:c9:ea:db:24:5e:d7:2d:e2:2d:c1:7c:78:90:93:4f:26: d9:86:04:2e:b7:6b:d8:b3:21:ff:89:86:a3:b8:95:72:9d:f3: ec:b0:58:45:4b:2c:49:fb:1d:9d:98:68:f5:0b:67:a4:f3:bd: e4:87:a7:43:0a:7e:b4:00:25:78:e9:59:a9:4d:40:fa:21:a7: a1:cf:8d:13:82:8a:91:0a:23:9c:16:14:1d:05:c0:2f:f8:5f: 6d:20:ff:fe:22:63:3e:01:cd:e7:6c:4d:d6:8c:38:90:ad:e4: 82:cd:d0:22:b2:59:4a:5a:a3:aa:74:ce:f0:f0:8f:c5:b6:da: bc:6d:80:52:e2:e9:ac:eb:a9:6d:de:9c:98:97:b1:e9:f8:3c: f9:41:a7:51:cd:db:10:b9:25:7d:27:88:02:02:a5:fb:4a:31: 37:93:fa:67:b4:25:02:3e:a1:81:e9:c1:c5:cb:c6:23:42:af: 7d:f8:5d:9e:c8:2d:7e:b6:1f:58:86:aa:07:c7:f3:66:ad:c6: 62:78:59:3e:1f:c5:a1:7a:2b:3e:66:8b:f9:91:01:9f:bf:de: bd:94:08:f1 -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgIDAoLqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMTEzNDgyNVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxQUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5 MjExOUU2NTgyMEM4RkQ1N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZkLozeD71nDjylj9dTrjAieVip83aqWlAiBlURpma1Z5K7ynhxJEwVm0qEU9M JWpuAE2O2oqONvT2dauY5b50LpNlEt8Sx0c8OtUqe5NK00RKo+P2V6KX954wppYk Cy3DDAul+pXJA/54hANrR5HZadP4s148x/MctFHnpZjSOr2IdUEwLdEBDYZCj2nq lImVTkHtkvi9VhwLGeINajoRqC8A+p2E8HXCBm4iq6csRoI/Jgcp/qknkJHUmTP9 Mh0G9u3c7ii78EqCEsX23sga2NRpwqLbCb9rPtFHZ0q2BWZKN68zkTOllfdxJ/9E pS+OvfLgxZW4p5XCDWtNtRBrAgMBAAGjggMyMIIDLjAdBgNVHQ4EFgQULBkXUyWl 82wLtY+SEZ5lggyP1XswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFDRDcyLzQ1NzZBNjcyMjYxMjExRUNCOTMxOTk0MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBQ0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlX bDgyd0x0WS1TRVo1bGdneVAxWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXgYIKwYBBQUHAQcBAf8ETzBN MDwEAgABMDYDBAIr5qADBAFnFOoDBAJnG4QDBAFnn0ADBAJ1N8ADBAJ1N8wDBALK KwQDBALLYLADBALSEEAwDQQCAAIwBwMFAiQGy0AwDQYJKoZIhvcNAQELBQADggEB AFiOfl0CQ1LYKWUJoADf5AL9mxnHhuFOTK9QS6iNATbMl3yD6BtbyerbJF7XLeIt wXx4kJNPJtmGBC63a9izIf+JhqO4lXKd8+ywWEVLLEn7HZ2YaPULZ6TzveSHp0MK frQAJXjpWalNQPohp6HPjROCipEKI5wWFB0FwC/4X20g//4iYz4BzedsTdaMOJCt 5ILN0CKyWUpao6p0zvDwj8W22rxtgFLi6azrqW3enJiXsen4PPlBp1HN2xC5JX0n iAICpftKMTeT+me0JQI+oYHpwcXLxiNCr334XZ7ILX62H1iGqgfH82atxmJ4WT4f xaF6Kz5mi/mRAZ+/3r2UCPE= -----END CERTIFICATE-----Generated at Thu Jan 1 15:57:32 2026 by rpki-client