This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer File: BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer (raw, json) Hash identifier: B2oeOW0jaawEulyL+NnGOVryg+VuMXJWvXACc1DGARk= Subject key identifier: 04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028BB2 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft caRepository: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 02 Feb 2026 12:30:27 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 43.226.16.0/22 IP: 103.45.64.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Feb 2026 07:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166834 (0x28bb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Feb 2 12:30:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A911CC61, serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1e:bc:a1:43:f3:ff:d1:9e:7c:98:8d:4b:c8: ea:f2:8f:ed:36:89:2d:6b:ed:0e:76:e8:0f:77:99: 07:ce:c8:02:f6:c6:83:d8:12:4a:4e:1c:47:c5:e5: 4f:f0:60:92:ce:bd:12:f1:e1:0e:c4:fb:25:75:61: 10:af:29:cb:c7:fa:4a:7d:78:f9:58:c0:d1:a1:9f: 17:46:fe:e1:e8:a7:56:8d:40:3a:c3:01:78:5b:6d: 0a:11:5a:b6:f9:51:ad:d5:aa:a6:28:24:4a:2b:e3: 90:fa:c8:38:9d:ab:d9:90:2e:31:ab:13:bd:3d:dc: f2:08:76:68:22:35:7c:48:7e:fa:d4:a3:87:6c:10: 12:8c:63:a9:a1:2f:3d:7d:f7:1d:f5:10:41:36:3e: e0:86:8b:47:0a:c4:28:a3:80:4c:3f:83:b1:8b:d3: e0:cf:6a:51:fe:90:af:c2:9b:74:b6:2b:d2:b2:8e: ac:dc:14:50:77:b1:04:09:02:b1:39:51:e9:34:45: 4a:67:a4:71:2b:3c:f1:5a:ae:cb:d6:bb:30:ce:b6: d5:98:7c:1a:ba:64:e8:c2:4c:45:90:6b:ab:62:1e: 0c:8e:89:5b:15:b9:3b:83:ea:57:48:96:76:f9:16: a2:ee:53:d5:f9:25:6b:42:0d:06:a4:86:ed:e3:1f: d7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.16.0/22 103.45.64.0/22 Signature Algorithm: sha256WithRSAEncryption 47:51:e8:6d:d6:2a:61:8a:a6:e1:72:d6:bf:35:4e:5f:31:88: 83:db:b7:aa:99:f0:b6:18:0b:9e:9d:04:18:0c:da:c6:da:be: ce:58:2c:c8:c6:27:10:75:ed:2d:ee:2f:3b:43:66:e1:41:14: a5:56:43:2a:8d:cb:b1:fd:e6:d7:dc:9b:15:e4:78:df:65:f6: 7b:1f:71:6f:c0:f4:01:9b:ef:4c:6f:56:48:89:c9:aa:c8:24: 57:1c:73:8e:20:e3:4b:96:b1:0c:d2:47:81:b8:57:1b:64:af: be:76:d4:06:8c:1e:fc:84:59:97:f1:45:61:cd:db:d0:e9:df: 13:cf:ac:26:eb:d9:c8:67:b3:d6:1a:17:a2:3f:1e:de:33:83: a7:42:e7:3c:29:f2:4c:e6:d1:ac:98:1d:ec:0f:95:97:27:da: e6:2b:31:a7:cb:c3:47:ad:73:63:fa:29:53:a1:07:96:30:b6: a0:61:15:05:00:a4:c8:17:4f:9c:23:32:bf:75:8d:aa:f3:83: c7:43:40:d2:f0:62:bd:23:af:66:bc:20:1f:a6:92:cb:fe:e8: c5:0c:bc:c5:26:33:8f:66:cf:1d:e4:13:44:40:a5:44:a6:32: 3c:7a:a8:d2:aa:73:4b:7b:a5:55:34:d4:ae:5a:7d:97:24:2a: cb:8b:a0:57 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIDAouyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDIwMjEyMzAyN1oXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMUNDNjExMTAvBgNVBAUTKDA0NzQ5MzdFNzlBOUQ2NzMzNTNFQUJE ODJDNEI4NDI0QjZDNjgzMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSHryhQ/P/0Z58mI1LyOryj+02iS1r7Q526A93mQfOyAL2xoPYEkpOHEfF5U/w YJLOvRLx4Q7E+yV1YRCvKcvH+kp9ePlYwNGhnxdG/uHop1aNQDrDAXhbbQoRWrb5 Ua3VqqYoJEor45D6yDidq9mQLjGrE7093PIIdmgiNXxIfvrUo4dsEBKMY6mhLz19 9x31EEE2PuCGi0cKxCijgEw/g7GL0+DPalH+kK/Cm3S2K9KyjqzcFFB3sQQJArE5 Uek0RUpnpHErPPFarsvWuzDOttWYfBq6ZOjCTEWQa6tiHgyOiVsVuTuD6ldIlnb5 FqLuU9X5JWtCDQakhu3jH9eDAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUBHSTfnmp 1nM1PqvYLEuEJLbGgw0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFDQzYxLzMzMUQxNDE4REEzRTExRjA4RkQxRTgzODhFRDM2NDFELzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExQ0M2MS8zMzFEMTQxOERBM0UxMUYwOEZEMUU4Mzg4RUQzNjQxRC9CSFNUZm5t cDFuTTFQcXZZTEV1RUpMYkdndzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU MBIEAgABMAwDBAIr4hADBAJnLUAwDQYJKoZIhvcNAQELBQADggEBAEdR6G3WKmGK puFy1r81Tl8xiIPbt6qZ8LYYC56dBBgM2sbavs5YLMjGJxB17S3uLztDZuFBFKVW QyqNy7H95tfcmxXkeN9l9nsfcW/A9AGb70xvVkiJyarIJFccc44g40uWsQzSR4G4 Vxtkr7521AaMHvyEWZfxRWHN29Dp3xPPrCbr2chns9YaF6I/Ht4zg6dC5zwp8kzm 0ayYHewPlZcn2uYrMafLw0etc2P6KVOhB5YwtqBhFQUApMgXT5wjMr91jarzg8dD QNLwYr0jr2a8IB+mksv+6MUMvMUmM49mzx3kE0RApUSmMjx6qNKqc0t7pVU01K5a fZckKsuLoFc= -----END CERTIFICATE-----Generated at Tue Feb 10 10:36:50 2026 by rpki-client