This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer File: kS3Nd84XYnPZShzEJZKtBclnamI.cer (raw, json) Hash identifier: R2RjlqG5txGxDyZBs3erPLpBXjfcBggLpvQpxbqIdfM= Subject key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028248 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 31 Dec 2025 14:11:38 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: IP: 103.175.192.0/23 IP: 2001:df7:fb80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 20:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164424 (0x28248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 31 14:11:38 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A91CA6E6, serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:19:fa:3f:84:f6:e6:a9:18:dc:b0:5e:58:bd: 00:6f:b1:a7:ae:96:36:fd:37:27:e6:dd:e4:8e:72: 3a:d2:69:4a:50:fa:f8:70:54:3a:8d:6b:2e:b9:0a: 7a:8a:8b:1d:38:a2:35:2b:5a:7e:b9:cc:71:3d:7a: 1c:e4:6a:62:8e:10:c1:77:81:04:d0:74:c7:32:ac: 6e:06:b6:73:d8:ec:e1:3c:08:1f:01:8c:4e:e0:0d: be:c3:52:45:2b:f3:5e:e0:d7:a5:7a:e7:9b:1f:23: b9:77:19:6b:56:37:b2:e4:0a:6b:73:22:2c:5e:5c: ac:b1:2d:44:b3:82:c7:44:55:73:01:05:88:ba:b7: fb:53:4d:36:27:4f:df:3a:f1:f0:a0:b0:63:fe:92: 92:4d:03:81:df:ba:bb:19:8a:75:11:88:a8:61:65: db:7f:19:0c:06:80:48:8f:e1:fc:5a:0d:39:1a:92: 1a:f1:f5:61:ea:87:1c:83:63:e6:d0:fe:ac:d1:92: 80:95:55:0f:bb:0e:d6:3b:b1:46:00:25:22:6f:a9: 34:74:e1:90:f5:a7:5b:a4:40:bd:b9:a2:58:d5:ba: 76:60:1f:ff:08:50:b1:b7:b6:2e:cc:37:04:9a:1e: bc:64:f6:c0:6d:fa:97:e2:d5:5a:5c:51:d2:b1:91: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.192.0/23 IPv6: 2001:df7:fb80::/48 Signature Algorithm: sha256WithRSAEncryption 1b:c2:d6:33:1c:65:27:3f:8c:56:3f:5a:0d:90:00:f1:46:8c: d4:2f:e9:0a:4d:61:d2:69:9d:63:6a:3e:16:8c:43:6b:48:61: 61:16:a7:e2:79:de:5d:1e:5f:d7:58:56:6b:4e:ed:fd:5d:78: c3:6f:ef:6c:2e:c9:e6:f0:1d:b0:9c:eb:8b:7e:ca:4f:0d:d2: 1d:0f:a0:f0:18:97:82:c6:de:08:05:cd:45:92:c9:84:7e:73: e9:ce:c8:90:35:d9:a9:b8:10:d5:0d:93:81:d5:7d:27:9f:40: 3a:62:ca:42:9a:d2:e8:e7:c0:3b:1e:29:a5:b1:6f:8d:74:08: b7:71:41:88:0f:d2:38:cd:c5:e5:71:44:f3:ff:d7:59:61:3c: 2a:d2:df:1b:18:eb:b4:d9:19:1d:13:28:70:48:aa:39:4f:f3: e1:40:6b:fa:90:89:de:05:15:16:de:4d:e2:99:e7:8c:c7:a0: 01:a1:0c:f6:78:b6:96:5a:de:ff:cb:66:5d:c6:22:f3:ad:d9: 13:0f:69:eb:32:8c:78:b6:a5:a6:87:78:cc:bd:03:8d:35:3a: 63:df:ba:7e:2d:80:00:de:82:70:d2:c9:98:17:8d:e2:f0:89: 54:d5:3f:c1:2f:9c:2a:5c:12:01:f1:96:24:67:27:0d:7f:96: e5:1b:06:05 -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIDAoJIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMTE0MTEzOFoXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQ0E2RTYxMTAvBgNVBAUTKDkxMkRDRDc3Q0UxNzYyNzNEOTRBMUND NDI1OTJBRDA1Qzk2NzZBNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLGfo/hPbmqRjcsF5YvQBvsaeuljb9Nyfm3eSOcjrSaUpQ+vhwVDqNay65CnqK ix04ojUrWn65zHE9ehzkamKOEMF3gQTQdMcyrG4GtnPY7OE8CB8BjE7gDb7DUkUr 817g16V655sfI7l3GWtWN7LkCmtzIixeXKyxLUSzgsdEVXMBBYi6t/tTTTYnT986 8fCgsGP+kpJNA4HfursZinURiKhhZdt/GQwGgEiP4fxaDTkakhrx9WHqhxyDY+bQ /qzRkoCVVQ+7DtY7sUYAJSJvqTR04ZD1p1ukQL25oljVunZgH/8IULG3ti7MNwSa Hrxk9sBt+pfi1VpcUdKxkRFfAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUkS3Nd84X YnPZShzEJZKtBclnamIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNBNkU2LzNCODNBRkUwRjBEMDExRUQ4MDUwNzY2QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDQTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0 WFluUFpTaHpFSlpLdEJjbG5hbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf MAwEAgABMAYDBAFnr8AwDwQCAAIwCQMHACABDff7gDANBgkqhkiG9w0BAQsFAAOC AQEAG8LWMxxlJz+MVj9aDZAA8UaM1C/pCk1h0mmdY2o+FoxDa0hhYRan4nneXR5f 11hWa07t/V14w2/vbC7J5vAdsJzri37KTw3SHQ+g8BiXgsbeCAXNRZLJhH5z6c7I kDXZqbgQ1Q2TgdV9J59AOmLKQprS6OfAOx4ppbFvjXQIt3FBiA/SOM3F5XFE8//X WWE8KtLfGxjrtNkZHRMocEiqOU/z4UBr+pCJ3gUVFt5N4pnnjMegAaEM9ni2llre /8tmXcYi863ZEw9p6zKMeLalpod4zL0DjTU6Y9+6fi2AAN6CcNLJmBeN4vCJVNU/ wS+cKlwSAfGWJGcnDX+W5RsGBQ== -----END CERTIFICATE-----Generated at Mon Jan 12 23:45:55 2026 by rpki-client