This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer File: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer (raw, json) Hash identifier: BOplr/sT5b2e/MKunT1z9HrC/4y37pgV5kNQEoeNm5s= Subject key identifier: DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02845F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft caRepository: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 07 Jan 2026 13:07:05 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 116.251.204.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 04:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164959 (0x2845f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 7 13:07:05 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9158568, serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:65:fe:d1:59:99:40:32:cc:f9:e0:82:aa:d9: 6d:3e:2a:6c:fa:ca:2e:f5:8a:85:0c:8e:69:c4:a7: 27:5e:19:a3:a7:36:65:e2:d5:5e:2c:b0:dc:78:b5: 93:de:74:ac:17:d9:4e:b1:62:fa:e0:03:17:72:71: 1d:86:94:bd:4f:f5:40:a0:1a:78:df:02:98:95:59: c8:a8:d4:55:51:23:79:ab:86:91:6a:8f:3b:01:d8: fa:91:b6:51:9d:24:1c:a6:70:3f:21:d1:89:19:22: cf:bf:9d:84:cf:d6:a4:86:47:4f:b9:f6:de:03:9b: 8b:03:77:e5:0a:4a:d4:67:a5:e5:06:ab:4f:75:da: f6:12:bf:d2:21:5a:71:12:10:63:57:bd:7c:90:00: 05:2a:de:8a:3b:15:8e:82:f5:17:36:06:e9:c2:4d: 31:04:c4:3f:75:53:68:e7:3b:44:e5:c5:4d:7f:23: 7b:b5:1e:f8:59:ee:85:cc:1c:35:d4:8d:54:dd:59: 87:ae:ec:3b:12:4c:8c:3d:c7:52:5d:98:c4:0e:43: 06:e0:ad:62:c1:5d:09:18:e5:00:90:81:04:4c:cb: eb:a5:eb:2f:83:60:c0:67:1a:43:49:aa:4e:19:4f: 0f:5e:06:a9:54:e1:40:ca:df:75:65:f6:8f:37:c5: 25:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.251.204.0/22 Signature Algorithm: sha256WithRSAEncryption 65:80:ad:8a:c0:73:a6:43:45:b6:6d:90:de:22:60:fa:68:5e: b0:ba:79:35:03:56:43:49:1f:30:2c:45:31:8f:c4:81:7a:a7: 57:b4:ed:17:4a:7c:10:6a:fc:92:1f:b0:bf:9e:18:dc:31:ce: b4:dd:95:97:96:8d:10:bb:32:2d:f9:9f:3e:03:6c:53:63:a2: b5:18:c7:e9:0c:10:64:07:9c:f9:81:ed:72:62:80:c7:ba:25: c5:fe:c6:44:c1:06:25:ef:af:fe:0e:90:97:5a:59:a8:7c:4a: 7c:5c:d9:fd:95:75:f5:04:fe:19:c9:2f:a5:b3:95:4c:32:67: c4:2e:06:ec:68:0e:f3:f1:73:94:f6:27:64:04:6e:64:86:a5: 42:5e:87:65:82:d0:12:35:b8:92:eb:c4:86:0b:2b:06:7a:f9: b2:00:80:62:18:39:11:fb:c0:c1:03:a1:5c:63:7b:aa:73:29: f4:37:0f:f1:f5:19:20:28:ce:42:a2:c9:01:5f:d6:bf:00:b6: 94:fe:a3:cc:da:7a:53:a2:a0:99:ad:22:fb:a6:94:01:9c:f1: 70:2e:82:2b:00:71:57:dd:76:c3:cb:5b:79:f0:78:ea:3e:9d: b5:73:4d:97:20:40:ff:4f:a6:b5:66:a9:32:bf:a9:f5:cb:a4: 72:9d:8c:12 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAoRfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNzEzMDcwNVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxNTg1NjgxMTAvBgNVBAUTKERGMjUzNDg0RENFNTJDNDEzN0NCRDFD OEVENDREOUNCMjU1N0Y0M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNZf7RWZlAMsz54IKq2W0+Kmz6yi71ioUMjmnEpydeGaOnNmXi1V4ssNx4tZPe dKwX2U6xYvrgAxdycR2GlL1P9UCgGnjfApiVWcio1FVRI3mrhpFqjzsB2PqRtlGd JBymcD8h0YkZIs+/nYTP1qSGR0+59t4Dm4sDd+UKStRnpeUGq0912vYSv9IhWnES EGNXvXyQAAUq3oo7FY6C9Rc2BunCTTEExD91U2jnO0TlxU1/I3u1HvhZ7oXMHDXU jVTdWYeu7DsSTIw9x1JdmMQOQwbgrWLBXQkY5QCQgQRMy+ul6y+DYMBnGkNJqk4Z Tw9eBqlU4UDK33Vl9o83xSVPAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU3yU0hNzl LEE3y9HI7UTZyyVX9D8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU4NTY4L0QzMTMwNjc2MTg1NzExRUE5ODYzNDE1RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1ODU2OC9EMzEzMDY3NjE4NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56 bExFRTN5OUhJN1VUWnl5Vlg5RDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAJ0+8wwDQYJKoZIhvcNAQELBQADggEBAGWArYrAc6ZDRbZtkN4i YPpoXrC6eTUDVkNJHzAsRTGPxIF6p1e07RdKfBBq/JIfsL+eGNwxzrTdlZeWjRC7 Mi35nz4DbFNjorUYx+kMEGQHnPmB7XJigMe6JcX+xkTBBiXvr/4OkJdaWah8Snxc 2f2VdfUE/hnJL6WzlUwyZ8QuBuxoDvPxc5T2J2QEbmSGpUJeh2WC0BI1uJLrxIYL KwZ6+bIAgGIYORH7wMEDoVxje6pzKfQ3D/H1GSAozkKiyQFf1r8AtpT+o8zaelOi oJmtIvumlAGc8XAugisAcVfddsPLW3nweOo+nbVzTZcgQP9PprVmqTK/qfXLpHKd jBI= -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:58 2026 by rpki-client