This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer File: PWRH1yl0gylOzsuFOl5QCTXRuNc.cer (raw, json) Hash identifier: zp1345XK0uWf3Wjpq6EMPGrPhFd6LLKG1VvPGOHOMsA= Subject key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0289AB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft caRepository: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 29 Jan 2026 13:19:04 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 103.177.248.0/23 IP: 2400:3e20::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Feb 2026 07:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166315 (0x289ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 29 13:19:04 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:0c:4b:d7:a9:4b:43:ef:82:40:0d:d3:7d: 94:ac:36:59:d8:ab:4e:44:1d:1d:18:30:90:6d:de: 95:f8:bf:8f:d3:45:8a:75:7d:b1:95:87:93:9f:da: 1a:2f:07:97:7e:0c:dc:ca:34:02:d3:c2:97:a7:67: 5f:1f:82:60:93:10:88:e1:10:1e:21:04:87:2d:85: 4e:da:17:a7:d5:34:31:d3:ad:32:49:c2:1f:3d:4d: 95:83:c8:f6:e4:6b:92:1b:f8:43:6e:dc:0a:e8:80: fc:94:af:20:9d:60:62:8a:5b:3f:ce:f1:55:a6:bc: 25:bd:69:ad:27:2b:a7:e5:ad:82:3c:eb:1d:88:0a: cf:59:83:26:84:46:df:5f:8a:7f:84:38:cb:11:74: 8d:6e:76:de:fa:02:4d:d7:4f:4a:4e:21:04:1c:be: a3:9a:34:0a:fc:aa:31:c9:68:53:d2:9c:43:1a:2b: aa:9e:d5:22:e9:aa:93:72:58:db:a7:d9:7b:f6:2f: 71:e8:9e:1e:4d:ac:ca:c7:68:95:ab:67:7a:e3:5d: d4:41:c5:89:aa:9d:53:d1:35:c3:92:3a:23:59:36: 87:25:1c:7e:94:3d:79:d6:1f:c4:f5:0e:ca:f9:06: ab:79:a8:37:4c:f9:23:16:b0:44:02:38:5e:2b:be: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.248.0/23 IPv6: 2400:3e20::/32 Signature Algorithm: sha256WithRSAEncryption 35:63:15:0a:ff:c1:00:80:f6:51:be:49:f7:7d:1a:2d:9c:98: f9:d3:ec:6f:79:62:57:23:3d:c4:e1:ce:a5:9a:86:93:af:99: 10:ae:6f:ed:2d:23:1e:40:bd:2b:c8:82:58:c6:c0:41:6f:75: 4b:68:98:e9:43:a3:b3:9d:2a:23:46:f9:66:5b:37:65:8e:9f: c4:66:cf:18:8d:2b:90:03:fb:09:8f:61:97:12:ce:08:12:fb: 6c:b8:34:b5:c8:42:50:32:4e:a9:17:df:13:a3:42:46:67:cd: 4a:54:c2:25:da:9e:fa:f8:a2:5a:46:ed:4b:ad:d8:3c:84:8d: f9:ee:36:7a:9f:60:c3:5e:c5:6c:4b:db:cc:7f:49:d3:eb:67: d6:e9:3a:41:8f:6c:21:c2:5f:2a:dc:74:7f:d9:d4:e2:59:f5: e4:d6:3f:ef:e1:9b:c1:e1:ab:6a:10:a6:6d:93:1a:b3:20:90: 3e:4d:df:11:9c:5a:cf:4f:2f:65:ca:fe:e2:b7:9c:e1:79:8b: 06:14:8f:b9:d4:2e:4e:6a:36:c8:46:a7:c7:ba:3b:62:31:9b: 50:84:fc:eb:43:88:f6:a0:38:6f:d7:58:53:26:f5:c0:b2:1d: 52:7c:ef:e6:b2:f7:3c:fd:cb:b1:87:ad:67:a2:ff:bf:ba:31: c4:12:0a:a5 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIDAomrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyOTEzMTkwNFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxNzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4 NTNBNUU1MDA5MzVEMUI4RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv3wxL16lLQ++CQA3TfZSsNlnYq05EHR0YMJBt3pX4v4/TRYp1fbGVh5Of2hov B5d+DNzKNALTwpenZ18fgmCTEIjhEB4hBIcthU7aF6fVNDHTrTJJwh89TZWDyPbk a5Ib+ENu3ArogPyUryCdYGKKWz/O8VWmvCW9aa0nK6flrYI86x2ICs9ZgyaERt9f in+EOMsRdI1udt76Ak3XT0pOIQQcvqOaNAr8qjHJaFPSnEMaK6qe1SLpqpNyWNun 2Xv2L3Honh5NrMrHaJWrZ3rjXdRBxYmqnVPRNcOSOiNZNoclHH6UPXnWH8T1Dsr5 Bqt5qDdM+SMWsEQCOF4rvl4NAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUPWRH1yl0 gylOzsuFOl5QCTXRuNcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTcwRTExL0QwNjBDOUIyNUJENjExRUNBRDgzMzY1MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXls MGd5bE96c3VGT2w1UUNUWFJ1TmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBAFnsfgwDQQCAAIwBwMFACQAPiAwDQYJKoZIhvcNAQELBQADggEB ADVjFQr/wQCA9lG+Sfd9Gi2cmPnT7G95YlcjPcThzqWahpOvmRCub+0tIx5AvSvI gljGwEFvdUtomOlDo7OdKiNG+WZbN2WOn8RmzxiNK5AD+wmPYZcSzggS+2y4NLXI QlAyTqkX3xOjQkZnzUpUwiXanvr4olpG7Uut2DyEjfnuNnqfYMNexWxL28x/SdPr Z9bpOkGPbCHCXyrcdH/Z1OJZ9eTWP+/hm8Hhq2oQpm2TGrMgkD5N3xGcWs9PL2XK /uK3nOF5iwYUj7nULk5qNshGp8e6O2Ixm1CE/OtDiPagOG/XWFMm9cCyHVJ87+ay 9zz9y7GHrWei/7+6McQSCqU= -----END CERTIFICATE-----Generated at Tue Feb 10 09:05:50 2026 by rpki-client