This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDVvu5e9r313vWlCFaK8d-ZL9U0.cer File: JDVvu5e9r313vWlCFaK8d-ZL9U0.cer (raw, json) Hash identifier: LJV60NY/MbgHLN2DDjMR1MY3FrFyNLEr7K/flbpbh40= Subject key identifier: 24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028B9C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 02 Feb 2026 08:50:36 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 103.228.196.0/22 IP: 220.158.248.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Feb 2026 19:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166812 (0x28b9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Feb 2 08:50:36 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A91EA9F0, serialNumber=24356FBB97BDAF7D77BD694215A2BC77E64BF54D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:80:d4:d6:b9:be:b4:b1:1a:96:2d:ef:df:c2: 72:2c:a0:7a:91:63:07:6e:80:ae:4e:76:f0:da:85: c5:ba:d8:bc:ee:49:49:af:19:ff:67:50:da:11:89: 69:50:e6:44:a9:46:5b:04:cc:9f:88:a7:47:72:6e: b8:18:9f:2b:9f:a5:dc:64:c1:45:61:5e:f3:cc:3b: 62:8e:c9:07:48:e7:e9:49:31:04:07:13:1c:a2:ef: 85:d4:23:03:da:26:2e:f1:5f:31:df:3b:93:43:b1: bf:db:e5:1b:b4:24:9f:2a:ee:49:38:e7:8f:92:98: da:29:23:e4:bc:51:f5:c4:e4:fe:33:48:4a:07:01: 69:54:8e:67:9f:00:a7:fd:b5:a3:81:df:f6:bd:d7: c1:25:3a:15:53:c0:e4:7b:c0:51:f1:21:be:8c:66: da:4c:88:af:0c:6c:e6:14:c7:e9:20:28:2a:41:17: e0:0c:65:b1:1d:c4:24:fd:29:81:63:52:60:7a:db: 58:a3:44:fb:cd:24:dc:e8:28:12:ce:0f:74:ef:7e: 82:84:3f:a0:f8:ef:5e:3d:40:af:14:d2:bf:6a:47: e5:3a:81:87:ca:f2:bc:7e:da:ec:72:fe:a8:b0:3c: 2b:22:c6:e8:96:91:22:db:44:87:ef:96:ce:86:aa: 39:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:35:6F:BB:97:BD:AF:7D:77:BD:69:42:15:A2:BC:77:E6:4B:F5:4D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA9F0/3B661B64001411F1AF1CE2CE406F56BC/JDVvu5e9r313vWlCFaK8d-ZL9U0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.228.196.0/22 220.158.248.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:ed:43:f0:ad:bd:72:15:31:fd:e8:c4:63:2a:d0:dc:98:82: 06:45:c4:19:c1:43:24:2f:a1:6d:ab:7a:c7:62:e5:37:bd:f1: e0:49:37:87:e7:90:1f:cf:e8:90:55:7f:d6:26:34:4c:65:29: 99:e0:55:87:7c:9d:fa:ce:15:35:b2:db:dd:4c:78:68:7b:06: bd:ec:7c:72:1e:70:53:3b:d1:06:a0:e3:4d:2d:0f:0b:b0:09: 26:01:84:81:84:c2:d4:19:49:5c:ae:a1:b1:99:30:ca:60:6b: 9f:85:18:b1:5f:2e:1d:d1:75:85:f7:cc:cb:42:b7:ca:b4:da: 52:26:21:39:06:90:e8:1d:be:32:3d:90:75:fe:b3:23:78:4f: 98:e8:b6:40:d0:b2:e2:f5:e8:21:01:85:ef:cd:fc:a5:04:e7: 5e:f8:bf:a5:f7:83:e5:ef:d4:de:43:ee:1f:95:cb:57:2a:71: 83:2d:81:ef:e8:39:c4:a0:c8:53:9f:29:90:34:32:83:db:6e: 50:1a:92:af:4f:58:7e:62:b3:9a:a6:08:f0:c5:e8:8a:e5:2c: b9:ef:d9:14:bb:8f:7f:9e:cb:57:19:e1:73:3c:dc:99:45:cd: c4:b3:f3:74:41:45:0f:c3:cd:e0:0e:aa:b2:8e:e1:bd:a9:89: c9:fb:c6:fe -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIDAoucMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDIwMjA4NTAzNloXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRUE5RjAxMTAvBgNVBAUTKDI0MzU2RkJCOTdCREFGN0Q3N0JENjk0 MjE1QTJCQzc3RTY0QkY1NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCMgNTWub60sRqWLe/fwnIsoHqRYwdugK5OdvDahcW62LzuSUmvGf9nUNoRiWlQ 5kSpRlsEzJ+Ip0dybrgYnyufpdxkwUVhXvPMO2KOyQdI5+lJMQQHExyi74XUIwPa Ji7xXzHfO5NDsb/b5Ru0JJ8q7kk454+SmNopI+S8UfXE5P4zSEoHAWlUjmefAKf9 taOB3/a918ElOhVTwOR7wFHxIb6MZtpMiK8MbOYUx+kgKCpBF+AMZbEdxCT9KYFj UmB621ijRPvNJNzoKBLOD3TvfoKEP6D47149QK8U0r9qR+U6gYfK8rx+2uxy/qiw PCsixuiWkSLbRIfvls6GqjnXAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUJDVvu5e9 r313vWlCFaK8d+ZL9U0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVBOUYwLzNCNjYxQjY0MDAxNDExRjFBRjFDRTJDRTQwNkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFQTlGMC8zQjY2MUI2NDAwMTQxMUYxQUYxQ0UyQ0U0MDZGNTZCQy9KRFZ2dTVl OXIzMTN2V2xDRmFLOGQtWkw5VTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU MBIEAgABMAwDBAJn5MQDBALcnvgwDQYJKoZIhvcNAQELBQADggEBAA3tQ/CtvXIV Mf3oxGMq0NyYggZFxBnBQyQvoW2resdi5Te98eBJN4fnkB/P6JBVf9YmNExlKZng VYd8nfrOFTWy291MeGh7Br3sfHIecFM70Qag400tDwuwCSYBhIGEwtQZSVyuobGZ MMpga5+FGLFfLh3RdYX3zMtCt8q02lImITkGkOgdvjI9kHX+syN4T5jotkDQsuL1 6CEBhe/N/KUE5174v6X3g+Xv1N5D7h+Vy1cqcYMtge/oOcSgyFOfKZA0MoPbblAa kq9PWH5is5qmCPDF6IrlLLnv2RS7j3+ey1cZ4XM83JlFzcSz83RBRQ/DzeAOqrKO 4b2picn7xv4= -----END CERTIFICATE-----Generated at Tue Feb 10 22:31:21 2026 by rpki-client