This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer File: A21zSqYwJkoY7FZN1qtBZGHGpGo.cer (raw, json) Hash identifier: AUMIsPIX7JdGd6fAOiuhcYAYKMH369hWey9ddeXztKc= Subject key identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028526 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 10 Jan 2026 05:28:38 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 137882 AS: 137897 AS: 153517 IP: 103.116.72.0/22 IP: 2401:e820::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 12:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165158 (0x28526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 10 05:28:38 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A91A78C2, serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:51:45:2f:d8:06:be:f1:05:9b:5e:11:4b: bf:5c:6b:91:6f:cb:19:8b:11:26:80:ad:d0:a6:65: 26:1a:b0:fa:f9:71:26:e9:d2:07:39:21:7d:0a:c5: 75:ac:9a:f4:d0:1c:c0:56:f3:b6:37:23:f9:16:e3: de:ea:9e:21:e2:c6:62:4f:be:0a:c6:d9:53:05:95: 49:44:97:3f:c6:96:f6:d6:b4:68:73:03:cd:cd:da: 38:2a:6b:b8:ed:e8:de:c4:a1:53:62:d9:9a:f0:04: d8:1b:b3:2f:0c:9a:ec:88:ef:64:22:ff:62:4d:d2: 1e:dc:0a:cd:87:48:20:b2:2a:86:bf:6d:1d:c4:7a: 98:68:41:a3:4f:3c:1e:bf:15:90:75:35:e4:8c:6c: d9:18:6c:e0:50:68:d7:c2:44:d5:25:be:22:b1:f7: 0f:a8:81:f0:a4:bb:26:2c:bd:4d:88:14:27:81:c7: 29:33:f7:6b:3c:d1:4d:19:27:ec:bd:de:11:de:bd: 6c:a5:3c:62:7c:e4:58:e6:f6:82:01:2f:98:1b:df: f9:f6:68:bb:3d:04:45:1c:b1:d9:ad:cb:f4:28:d3: a6:7b:8d:50:a8:bb:21:d4:60:48:a9:e4:ab:d9:ce: 4b:ff:7d:36:ec:3c:61:97:ba:f6:4f:b2:44:a2:05: 0d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137882 137897 153517 sbgp-ipAddrBlock: critical IPv4: 103.116.72.0/22 IPv6: 2401:e820::/32 Signature Algorithm: sha256WithRSAEncryption 86:62:c9:b6:78:41:f9:5c:e3:c7:2a:06:68:b4:16:1b:40:c7: 67:fe:b6:ec:85:c3:2c:71:39:3b:06:71:b4:80:55:06:3e:ac: 6c:03:df:7c:39:08:33:75:45:91:7a:b9:46:f8:ff:08:c6:c5: dc:ba:8f:c0:f4:cd:8e:57:83:90:d1:6f:71:18:09:f8:12:c7: 65:3d:f3:1c:b8:2a:92:54:27:0b:c3:9a:47:cc:8d:8f:b3:19: 42:e4:fd:d1:92:e7:bf:5b:6b:dc:67:b9:0e:eb:7b:de:b9:5d: da:a5:16:bc:45:d9:9b:88:36:50:b5:05:fb:da:b9:af:da:f9: b1:17:8b:14:cb:7b:d0:ad:0d:a4:6e:ba:c7:b4:49:36:b6:b0: 5c:9c:86:3b:cc:58:c1:f0:0b:a3:18:04:41:e7:62:02:49:37: 76:3c:b6:23:02:fa:f7:82:7f:e4:71:f3:7e:fa:b6:9a:b1:1a: ba:cc:99:ee:f2:57:67:ef:e3:0a:10:9c:68:d9:36:42:1f:75: 37:6d:62:2a:04:46:9a:59:7f:2a:8d:13:94:74:e2:15:35:99: 08:99:5f:49:cb:57:b8:a7:8e:03:9d:66:75:be:f8:a4:98:06: de:5e:51:66:e9:3b:a5:b9:7f:31:ad:30:a0:2d:84:26:f2:6a: 4c:5e:27:ef -----BEGIN CERTIFICATE----- MIIGMzCCBRugAwIBAgIDAoUmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExMDA1MjgzOFoXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxQTc4QzIxMTAvBgNVBAUTKDAzNkQ3MzRBQTYzMDI2NEExOEVDNTY0 REQ2QUI0MTY0NjFDNkE0NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUvVFFL9gGvvEFm14RS79ca5FvyxmLESaArdCmZSYasPr5cSbp0gc5IX0KxXWs mvTQHMBW87Y3I/kW497qniHixmJPvgrG2VMFlUlElz/GlvbWtGhzA83N2jgqa7jt 6N7EoVNi2ZrwBNgbsy8MmuyI72Qi/2JN0h7cCs2HSCCyKoa/bR3EephoQaNPPB6/ FZB1NeSMbNkYbOBQaNfCRNUlviKx9w+ogfCkuyYsvU2IFCeBxykz92s80U0ZJ+y9 3hHevWylPGJ85Fjm9oIBL5gb3/n2aLs9BEUcsdmty/Qo06Z7jVCouyHUYEip5KvZ zkv/fTbsPGGXuvZPskSiBQ0pAgMBAAGjggMoMIIDJDAdBgNVHQ4EFgQUA21zSqYw JkoY7FZN1qtBZGHGpGowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE3OEMyLzM1NDQ2Mzc2RURFNTExRjBCMDFCOTIzQzc2NkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBNzhDMi8zNTQ0NjM3NkVERTUxMUYwQjAxQjkyM0M3NjZGNTZCQy9BMjF6U3FZ d0prb1k3RlpOMXF0QlpHSEdwR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAhqaAgMCGqkCAwJXrTAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME Amd0SDANBAIAAjAHAwUAJAHoIDANBgkqhkiG9w0BAQsFAAOCAQEAhmLJtnhB+Vzj xyoGaLQWG0DHZ/627IXDLHE5OwZxtIBVBj6sbAPffDkIM3VFkXq5Rvj/CMbF3LqP wPTNjleDkNFvcRgJ+BLHZT3zHLgqklQnC8OaR8yNj7MZQuT90ZLnv1tr3Ge5Dut7 3rld2qUWvEXZm4g2ULUF+9q5r9r5sReLFMt70K0NpG66x7RJNrawXJyGO8xYwfAL oxgEQediAkk3djy2IwL694J/5HHzfvq2mrEausyZ7vJXZ+/jChCcaNk2Qh91N21i KgRGmll/Ko0TlHTiFTWZCJlfSctXuKeOA51mdb74pJgG3l5RZuk7pbl/Ma0woC2E JvJqTF4n7w== -----END CERTIFICATE-----Generated at Wed Jan 21 15:05:02 2026 by rpki-client