This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer File: WHRSDaeB94Db1xDULIQcE6etF1c.cer (raw, json) Hash identifier: TSJX+9nSf1PajOSgyNJi20mTneS2n2jrUchgwmLKWpM= Subject key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0284BE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft caRepository: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 08 Jan 2026 13:59:37 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 138402 IP: 103.88.188.0/22 IP: 103.104.172.0/22 IP: 103.116.20.0/22 IP: 103.124.192.0/22 IP: 116.204.236.0/22 IP: 2403:e340::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Feb 2026 16:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165054 (0x284be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 8 13:59:37 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4d:b9:45:9c:82:60:9d:c6:68:0e:f8:8b:2e: 80:af:99:fa:b1:93:06:63:bb:6b:ae:01:a2:44:02: 1f:73:f8:83:68:2d:63:15:14:c0:63:ba:0c:e2:1c: 56:f6:4c:ad:32:78:f1:fa:62:6d:5c:31:df:41:2a: 62:25:7c:ef:b4:9b:fe:70:2e:c7:24:57:b6:0d:68: 0c:35:25:90:18:33:b7:5e:30:c4:e4:f7:bb:4e:02: 0c:b5:42:b3:3a:29:c4:42:ba:2c:a7:fe:43:37:b8: 44:a7:e0:14:44:81:ba:66:1b:92:e8:e2:52:67:95: 2c:3d:fc:c8:72:75:e0:50:63:69:74:d7:2d:39:59: 4e:66:67:c2:73:f9:a4:7e:64:8b:47:6d:50:05:c3: 8a:d5:dd:52:39:82:e9:c9:60:08:39:88:e6:45:86: ed:a0:69:79:77:05:2e:ae:d5:c1:ef:98:08:d9:7e: 5f:f1:57:bf:a3:5e:11:9b:f8:ee:f7:8c:96:bf:b3: de:ff:dc:76:42:32:b1:30:bc:5e:fb:5a:9d:ec:bd: 62:f3:cb:38:3e:09:2f:1b:a6:45:3c:98:d7:91:31: 70:d3:b1:6d:56:ff:e2:4b:85:09:b8:05:e8:e2:52: 44:38:89:3c:3c:d3:85:0d:02:41:5d:74:25:e2:fa: 39:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138402 sbgp-ipAddrBlock: critical IPv4: 103.88.188.0/22 103.104.172.0/22 103.116.20.0/22 103.124.192.0/22 116.204.236.0/22 IPv6: 2403:e340::/32 Signature Algorithm: sha256WithRSAEncryption 44:e3:2a:ff:2d:1d:74:04:a5:82:8c:b9:59:0c:1f:9d:0d:50: 6e:2c:69:ee:ee:b0:e9:53:46:09:c0:d3:d1:84:fb:4b:11:6f: 40:d4:cb:82:0a:2f:92:c8:50:09:6b:2c:dd:d9:3a:ab:c4:3f: 19:ec:9b:6c:20:86:60:1b:c2:21:11:c2:22:68:c1:06:31:3a: 3e:1f:95:d6:1c:a0:51:32:01:c9:98:14:80:0e:a8:f2:38:be: e6:28:b3:01:fc:e7:d7:2a:df:54:a8:95:47:57:0c:15:9f:0c: 0d:1e:44:c7:71:f4:50:db:89:33:a1:48:c9:c0:e2:1f:95:11: 34:62:04:d5:6b:16:cd:d4:41:3e:ba:42:b2:88:7f:5c:b1:a4: 76:5e:8c:4a:2a:77:b8:5a:ad:af:2e:71:34:fd:2e:6c:93:b8: 88:37:0e:65:5b:0b:1d:fd:95:8b:d6:0e:94:14:8b:7e:30:6d: aa:d9:a2:a0:b5:4e:c2:56:83:3e:f1:f6:f0:6d:1a:f6:9c:fb: 57:9d:28:e8:bb:5f:cc:bb:6b:e6:53:fe:3d:d5:4d:9c:5c:9a: 85:2b:c0:dd:05:74:0f:8b:f0:bb:c2:f2:08:ca:40:8c:e9:14: 56:6d:8a:43:16:7d:5e:79:d2:b0:3f:1f:8e:63:8a:8e:f7:ec: ba:33:77:eb -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIDAoS+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwODEzNTkzN1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxQUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBE NDJDODQxQzEzQTdBRDE3NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOTblFnIJgncZoDviLLoCvmfqxkwZju2uuAaJEAh9z+INoLWMVFMBjugziHFb2 TK0yePH6Ym1cMd9BKmIlfO+0m/5wLsckV7YNaAw1JZAYM7deMMTk97tOAgy1QrM6 KcRCuiyn/kM3uESn4BREgbpmG5Lo4lJnlSw9/MhydeBQY2l01y05WU5mZ8Jz+aR+ ZItHbVAFw4rV3VI5gunJYAg5iOZFhu2gaXl3BS6u1cHvmAjZfl/xV7+jXhGb+O73 jJa/s97/3HZCMrEwvF77Wp3svWLzyzg+CS8bpkU8mNeRMXDTsW1W/+JLhQm4Beji UkQ4iTw804UNAkFddCXi+jnTAgMBAAGjggM2MIIDMjAdBgNVHQ4EFgQUWHRSDaeB 94Db1xDULIQcE6etF1cwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFGMkNELzRGQ0JBQzAwRDQ0QzExRUQ4NjI3MTU4MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBRjJDRC80RkNCQUMwMEQ0NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFl Qjk0RGIxeERVTElRY0U2ZXRGMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhyiMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCZ1i8AwQCZ2is AwQCZ3QUAwQCZ3zAAwQCdMzsMA0EAgACMAcDBQAkA+NAMA0GCSqGSIb3DQEBCwUA A4IBAQBE4yr/LR10BKWCjLlZDB+dDVBuLGnu7rDpU0YJwNPRhPtLEW9A1MuCCi+S yFAJayzd2TqrxD8Z7JtsIIZgG8IhEcIiaMEGMTo+H5XWHKBRMgHJmBSADqjyOL7m KLMB/OfXKt9UqJVHVwwVnwwNHkTHcfRQ24kzoUjJwOIflRE0YgTVaxbN1EE+ukKy iH9csaR2XoxKKne4Wq2vLnE0/S5sk7iINw5lWwsd/ZWL1g6UFIt+MG2q2aKgtU7C VoM+8fbwbRr2nPtXnSjou1/Mu2vmU/491U2cXJqFK8DdBXQPi/C7wvIIykCM6RRW bYpDFn1eedKwPx+OY4qO9+y6M3fr -----END CERTIFICATE-----Generated at Fri Jan 30 17:32:41 2026 by rpki-client