This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer File: YV7YTETmV_cJXgISr-oFLFQqDZE.cer (raw, json) Hash identifier: 1YwEW6x8wApa/uS1kTNzJ0lP6Imlefn+P1f1NZ95j7Y= Subject key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028461 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft caRepository: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 07 Jan 2026 13:09:59 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 23903 AS: 24319 AS: 45757 AS: 55409 AS: 55770 AS: 63949 AS: 133103 IP: 27.116.32.0/22 IP: 43.249.212.0/22 IP: 43.254.120.0/22 IP: 45.118.132.0/22 IP: 59.151.128.0/18 IP: 60.254.128.0/18 IP: 103.3.60.0/22 IP: 103.29.68.0/22 IP: 103.41.68.0/22 IP: 103.238.148.0/22 IP: 103.243.12.0/22 IP: 114.141.72.0/21 IP: 118.214.0.0 -- 118.215.191.255 IP: 122.252.32.0/19 IP: 122.252.128.0/20 IP: 124.158.24.0/22 IP: 125.56.128.0/17 IP: 125.252.192.0/18 IP: 202.9.70.0/23 IP: 202.74.62.0/23 IP: 2001:df4:9000::/48 IP: 2400:8900::/29 IP: 2404:4e00::/32 IP: 2405:9600::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 12:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164961 (0x28461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 7 13:09:59 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:62:cf:66:75:ee:01:90:0f:7d:22:af:c0:38: ff:9e:6b:60:c3:4d:92:27:20:39:be:d7:f1:74:63: d8:fc:5a:c6:1c:15:eb:7d:f8:36:9a:83:e0:ec:23: bc:42:c5:6d:1d:cb:f8:57:d9:d7:06:fa:f9:97:e7: 72:5f:20:29:40:1a:34:2d:ea:d5:69:43:81:2c:f5: 10:15:45:92:b9:d7:b4:b5:3a:0f:6e:69:73:0c:8b: 58:05:39:b4:f2:db:41:b5:df:81:27:53:05:4f:04: 5d:56:13:7a:96:29:8d:66:37:c8:10:dd:f2:7c:4a: 0e:12:79:ed:cd:d5:6a:13:1a:3d:6b:82:ab:fc:2b: f2:6c:17:59:27:b1:6d:d4:72:90:af:49:c9:9b:69: 95:01:e5:34:dc:ec:be:38:96:50:74:77:12:7a:91: 05:ce:e3:b3:c6:12:23:f4:3d:3e:05:af:c6:48:b3: b0:76:f1:5b:86:77:a6:21:7e:e2:38:ab:d9:33:59: 5c:ab:87:ea:a0:0d:db:f8:2d:c8:52:33:ca:f4:15: d3:19:eb:16:c6:8b:86:bf:ed:3e:89:d7:5f:da:53: 3c:66:0c:f9:c5:ac:1a:a8:13:9e:0a:8e:63:f0:5a: 6e:d9:24:a3:59:96:9f:04:9c:67:f1:04:ae:5a:d2: 05:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 23903 24319 45757 55409 55770 63949 133103 sbgp-ipAddrBlock: critical IPv4: 27.116.32.0/22 43.249.212.0/22 43.254.120.0/22 45.118.132.0/22 59.151.128.0/18 60.254.128.0/18 103.3.60.0/22 103.29.68.0/22 103.41.68.0/22 103.238.148.0/22 103.243.12.0/22 114.141.72.0/21 118.214.0.0-118.215.191.255 122.252.32.0/19 122.252.128.0/20 124.158.24.0/22 125.56.128.0/17 125.252.192.0/18 202.9.70.0/23 202.74.62.0/23 IPv6: 2001:df4:9000::/48 2400:8900::/29 2404:4e00::/32 2405:9600::/32 Signature Algorithm: sha256WithRSAEncryption 99:d4:d2:f7:69:9a:c6:84:d1:c1:8b:4e:6a:85:18:0e:b5:b6: 6c:d1:da:6f:f9:a7:ba:e7:d3:f1:95:c3:ee:e2:eb:a8:3d:ae: fa:57:c8:83:7f:e6:27:b6:fe:e2:e0:86:f5:b7:50:99:c7:55: 79:a5:30:54:a9:ad:df:be:dc:51:47:ca:69:b7:74:fb:82:9b: 05:2b:94:dc:71:4a:ee:b6:31:fe:08:8a:f7:32:5e:b5:78:3f: 82:4e:1e:7f:88:9a:4a:37:e0:23:ad:bb:ce:a5:73:25:10:49: 95:77:e0:40:6d:a6:78:b4:ce:53:98:ba:d6:a9:3e:75:e8:c8: b2:68:00:8f:d4:ad:47:1e:32:66:7c:63:6b:9f:c3:f9:bf:93: e0:98:85:22:58:ee:84:da:df:d0:2a:21:22:b1:90:33:7a:62: 74:e4:63:04:59:f7:a6:35:d7:88:d7:30:da:48:7d:03:2a:c8: fd:3f:9e:43:35:48:eb:43:72:bf:bf:fd:3c:43:0c:c6:eb:94: 3e:5e:fc:2c:c4:19:f8:8d:3d:f2:9f:ff:63:27:8f:da:4c:25: ae:48:22:e7:ed:44:b6:58:92:9e:de:cf:98:ac:d8:72:62:b6: 45:d0:7e:2e:a0:55:a6:4a:34:24:62:25:53:b0:0a:d9:11:9e: 52:8e:2b:4a -----BEGIN CERTIFICATE----- MIIG2TCCBcGgAwIBAgIDAoRhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNzEzMDk1OVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNUQwM0ExMTAvBgNVBAUTKDYxNUVEODRDNDRFNjU3RjcwOTVFMDIx MkFGRUEwNTJDNTQyQTBEOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQYs9mde4BkA99Iq/AOP+ea2DDTZInIDm+1/F0Y9j8WsYcFet9+Daag+DsI7xC xW0dy/hX2dcG+vmX53JfIClAGjQt6tVpQ4Es9RAVRZK517S1Og9uaXMMi1gFObTy 20G134EnUwVPBF1WE3qWKY1mN8gQ3fJ8Sg4See3N1WoTGj1rgqv8K/JsF1knsW3U cpCvScmbaZUB5TTc7L44llB0dxJ6kQXO47PGEiP0PT4Fr8ZIs7B28VuGd6YhfuI4 q9kzWVyrh+qgDdv4LchSM8r0FdMZ6xbGi4a/7T6J11/aUzxmDPnFrBqoE54KjmPw Wm7ZJKNZlp8EnGfxBK5a0gV3AgMBAAGjggPOMIIDyjAdBgNVHQ4EFgQUYV7YTETm V/cJXgISr+oFLFQqDZEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVEMDNBLzFCNjQ3NzEwOTI0NjExRTc5QUFFQkUxMEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1RDAzQS8xQjY0NzcxMDkyNDYxMUU3OUFBRUJFMTBDNEY5QUUwMi9ZVjdZVEVU bVZfY0pYZ0lTci1vRkxGUXFEWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQgBAf8EJzAl oCMwIQICXV8CAl7/AgMAsr0CAwDYcQIDANnaAgMA+c0CAwIH7zCBwQYIKwYBBQUH AQcBAf8EgbEwga4wgYUEAgABMH8DBAIbdCADBAIr+dQDBAIr/ngDBAItdoQDBAY7 l4ADBAY8/oADBAJnAzwDBAJnHUQDBAJnKUQDBAJn7pQDBAJn8wwDBANyjUgwCwMD AXbWAwQGdteAAwQFevwgAwQEevyAAwQCfJ4YAwQHfTiAAwQGffzAAwQByglGAwQB yko+MCQEAgACMB4DBwAgAQ30kAADBQMkAIkAAwUAJAROAAMFACQFlgAwDQYJKoZI hvcNAQELBQADggEBAJnU0vdpmsaE0cGLTmqFGA61tmzR2m/5p7rn0/GVw+7i66g9 rvpXyIN/5ie2/uLghvW3UJnHVXmlMFSprd++3FFHymm3dPuCmwUrlNxxSu62Mf4I ivcyXrV4P4JOHn+Imko34COtu86lcyUQSZV34EBtpni0zlOYutapPnXoyLJoAI/U rUceMmZ8Y2ufw/m/k+CYhSJY7oTa39AqISKxkDN6YnTkYwRZ96Y114jXMNpIfQMq yP0/nkM1SOtDcr+//TxDDMbrlD5e/CzEGfiNPfKf/2Mnj9pMJa5IIuftRLZYkp7e z5is2HJitkXQfi6gVaZKNCRiJVOwCtkRnlKOK0o= -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:19 2026 by rpki-client