This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer (raw, json) Hash identifier: FNFc4eSigaIK75cCOmrUYqRPiEJEI+jRu8Nu38JPpWo= Subject key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0281B5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 30 Dec 2025 04:37:21 +0000 Certificate not after: Wed 30 Sep 2026 00:00:00 +0000 Subordinate resources: AS: 136452 AS: 151468 IP: 103.112.96.0/22 IP: 103.141.224.0/23 IP: 103.229.54.0/23 IP: 116.204.232.0/22 IP: 2401:1020::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164277 (0x281b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 30 04:37:21 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:46:1a:c6:fa:b5:b6:0d:62:40:aa:bf:59:5d: b7:94:32:59:95:0f:0b:f6:42:be:16:ba:eb:e0:2a: ba:5e:ea:45:4e:5a:1d:3b:8a:e5:89:3d:d2:6f:73: d8:32:c8:66:5f:6e:f4:f7:fb:a1:a2:ca:ba:db:de: ab:0f:e2:a7:06:bb:7f:e3:f8:d1:fe:06:9a:00:05: d2:fe:54:8a:54:11:ba:3e:a3:ea:2c:15:bf:5e:6c: a6:3d:67:bc:64:70:08:09:ea:32:38:78:34:33:42: 09:ed:91:a2:ec:f5:4e:79:02:a0:09:e6:3c:7f:69: f4:07:c5:f8:c0:63:96:64:13:8d:a4:a8:a6:20:2f: 73:97:6a:33:ad:f8:67:59:c5:02:96:17:04:a4:3a: ea:c8:29:0d:14:fd:7e:a6:7f:d1:3b:14:44:3b:93: 7a:fd:59:49:d7:0e:f0:b0:0b:06:2d:75:cf:4a:26: 9e:bd:09:bf:89:73:6a:6e:33:b3:81:6c:40:13:eb: f5:44:20:86:eb:a1:47:28:91:15:f9:3e:47:c4:16: a2:2e:95:16:d8:b3:c1:c2:9f:66:b7:fd:e9:ef:94: f6:70:3c:4e:11:a9:a7:7c:bc:95:e6:84:d7:0a:b6: 79:ea:22:6a:0b:e9:38:17:0e:59:b7:ca:35:03:a0: 7b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136452 151468 sbgp-ipAddrBlock: critical IPv4: 103.112.96.0/22 103.141.224.0/23 103.229.54.0/23 116.204.232.0/22 IPv6: 2401:1020::/32 Signature Algorithm: sha256WithRSAEncryption c1:bf:00:7e:74:96:73:50:12:6b:94:47:ba:74:52:63:27:9d: 5a:ec:f9:74:f5:a1:dd:bb:2a:cb:89:3e:9e:4a:dd:76:76:60: 92:e3:d9:d8:f7:f6:cf:82:0d:94:d8:51:ec:51:02:61:4c:90: 69:07:6f:b4:93:a3:13:4b:70:d7:db:ba:65:50:5a:a3:e8:41: 3d:f1:d6:99:e2:77:e5:ae:07:f8:02:a5:00:1e:9d:59:da:8d: 1e:03:f9:a9:0d:21:41:47:e4:e3:11:43:c8:22:25:7d:a1:a5: 8b:82:7d:37:2a:a0:30:80:40:f1:5e:fb:d2:c0:58:7e:d0:a4: d0:81:22:bf:2a:a4:50:98:1c:81:dc:85:53:43:4a:26:5b:bf: 0a:5d:a7:ae:38:22:6d:92:c9:4a:0e:c1:2d:d7:cb:07:4d:df: f0:ce:42:73:c2:73:3b:1e:58:57:bd:8a:76:da:37:23:47:c6: 1c:96:29:37:b0:83:75:4a:87:df:17:38:f1:ab:01:2e:5b:af: 1a:03:96:94:96:cd:46:84:65:ce:64:62:d6:57:d0:95:ee:04: a5:f4:08:bc:43:52:11:5d:80:fc:0f:9d:00:6a:99:7e:0a:93: c5:c1:dc:a4:0c:f1:d6:18:e4:48:84:99:ff:19:ae:55:ea:81: 3a:b0:82:99 -----BEGIN CERTIFICATE----- MIIGQDCCBSigAwIBAgIDAoG1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMDA0MzcyMVoXDTI2MDkzMDAwMDAwMFowRjERMA8G A1UEAwwIQTkxQTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRC NjY3RDM5MzQ3RDREQUE4OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD8RhrG+rW2DWJAqr9ZXbeUMlmVDwv2Qr4WuuvgKrpe6kVOWh07iuWJPdJvc9gy yGZfbvT3+6Giyrrb3qsP4qcGu3/j+NH+BpoABdL+VIpUEbo+o+osFb9ebKY9Z7xk cAgJ6jI4eDQzQgntkaLs9U55AqAJ5jx/afQHxfjAY5ZkE42kqKYgL3OXajOt+GdZ xQKWFwSkOurIKQ0U/X6mf9E7FEQ7k3r9WUnXDvCwCwYtdc9KJp69Cb+Jc2puM7OB bEAT6/VEIIbroUcokRX5PkfEFqIulRbYs8HCn2a3/envlPZwPE4Rqad8vJXmhNcK tnnqImoL6TgXDlm3yjUDoHsVAgMBAAGjggM1MIIDMTAdBgNVHQ4EFgQUMSb07wXj rnWgkUS2Z9OTR9TaqJAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE3Qjk0L0NDNzQxQkI2Mzc3MDExRUU4REM4QkIzNEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBN0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dY anJuV2drVVMyWjlPVFI5VGFxSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAhUEAgMCT6wwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAJncGAD BAFnjeADBAFn5TYDBAJ0zOgwDQQCAAIwBwMFACQBECAwDQYJKoZIhvcNAQELBQAD ggEBAMG/AH50lnNQEmuUR7p0UmMnnVrs+XT1od27KsuJPp5K3XZ2YJLj2dj39s+C DZTYUexRAmFMkGkHb7SToxNLcNfbumVQWqPoQT3x1pnid+WuB/gCpQAenVnajR4D +akNIUFH5OMRQ8giJX2hpYuCfTcqoDCAQPFe+9LAWH7QpNCBIr8qpFCYHIHchVND SiZbvwpdp644Im2SyUoOwS3XywdN3/DOQnPCczseWFe9inbaNyNHxhyWKTewg3VK h98XOPGrAS5brxoDlpSWzUaEZc5kYtZX0JXuBKX0CLxDUhFdgPwPnQBqmX4Kk8XB 3KQM8dYY5EiEmf8ZrlXqgTqwgpk= -----END CERTIFICATE-----Generated at Wed Jan 21 00:19:25 2026 by rpki-client