This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer (raw, json) Hash identifier: 8H9nbAJ5few652YPkDj5YaM9GTUWIsOHDTxeP5A6frQ= Subject key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0281F3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 30 Dec 2025 14:17:45 +0000 Certificate not after: Thu 30 Apr 2026 00:00:00 +0000 Subordinate resources: AS: 17821 AS: 45192 AS: 131107 AS: 135533 -- 135541 IP: 61.45.248.0/21 IP: 202.125.96.0/23 IP: 203.30.127.0/24 IP: 2001:df0:a::/48 IP: 2001:df2:ee00::/47 IP: 2401:4601::/32 IP: 2406:6400::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Feb 2026 09:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164339 (0x281f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 30 14:17:45 2025 GMT Not After : Apr 30 00:00:00 2026 GMT Subject: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:8b:95:e8:d7:ac:7c:fd:8f:0e:bc:7e:15: e0:40:42:6f:fc:fb:ad:68:bf:b3:93:18:22:c0:4e: 75:1e:51:3e:a1:17:17:98:ef:00:8a:e3:9b:11:93: f5:a7:40:99:70:fb:b6:91:3f:ca:23:3f:3c:00:1c: 24:14:37:63:17:05:b2:d8:6f:2d:e5:50:63:ac:08: d7:db:60:5e:ed:ef:28:cc:c3:b5:f7:6c:6e:52:49: 02:75:1e:c8:37:18:02:00:5d:3c:34:f8:61:c6:f1: 9f:54:ab:30:29:db:0c:61:fd:e7:c9:e3:f0:35:fc: 95:fb:87:79:34:8e:88:e2:63:c4:4e:43:72:de:03: a8:e0:d7:b2:8f:d8:4f:2b:82:73:8b:b6:a8:96:59: 83:73:34:73:3d:8b:b3:a6:25:be:fc:66:ab:ab:8d: 84:8a:ab:e4:5a:ef:e5:45:99:e2:37:aa:c0:4b:56: 5d:97:fe:2b:01:60:22:49:68:40:67:43:74:99:1f: 8b:fe:f2:91:be:57:f5:a2:8b:91:ce:4a:44:08:18: 95:39:eb:85:9a:32:f3:14:ea:a7:b5:bd:3b:a1:b6: 63:5f:9b:64:76:14:61:cc:97:8f:16:2f:22:67:a3: 5a:47:78:cb:d5:ac:fa:9e:ae:7a:63:f6:ee:a7:42: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 17821 45192 131107 135533-135541 sbgp-ipAddrBlock: critical IPv4: 61.45.248.0/21 202.125.96.0/23 203.30.127.0/24 IPv6: 2001:df0:a::/48 2001:df2:ee00::/47 2401:4601::/32 2406:6400::/32 Signature Algorithm: sha256WithRSAEncryption ba:4c:bd:7f:94:d2:8a:6e:c0:1d:eb:4d:f7:dc:05:4e:3d:3a: 80:7c:f7:ab:60:1c:80:44:2b:18:6e:96:05:a5:30:1a:c9:28: 23:59:f6:93:0f:eb:9e:00:fb:a8:36:92:e6:d8:40:e5:e1:8d: 7a:a6:e4:b5:7c:10:6d:ac:87:1a:73:3f:1e:6f:d0:4a:24:fa: 18:2f:24:02:a1:60:35:a4:cc:77:c7:44:16:5b:3f:3b:14:92: 63:eb:1b:3a:bc:98:c9:2d:7d:34:8c:6f:2b:81:b8:30:69:4b: b7:1c:3f:2b:fb:c7:75:58:22:2e:ab:02:f0:bd:31:9f:14:88: 3e:e7:09:cb:c2:c8:c0:9b:ce:9a:31:d3:de:fd:f8:f2:a2:0d: 52:9a:73:26:99:1e:f3:e0:38:5c:0d:65:a9:db:7d:87:0e:29: b5:23:62:44:13:70:4b:1d:55:8b:b1:05:06:48:37:fc:ac:1e: 87:ec:94:25:ed:2d:56:03:bb:bd:b1:24:46:0b:39:d7:e0:a1: 06:e4:2f:68:54:3d:2b:26:4a:75:94:d8:63:ee:24:da:23:1d: fa:16:f9:bf:d8:d5:32:08:07:c6:f7:6c:00:63:10:08:d5:3f: 90:61:e8:6a:41:2f:6d:9c:cd:59:6f:74:71:81:07:ae:df:3b: 02:c0:cf:6e -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIDAoHzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMDE0MTc0NVoXDTI2MDQzMDAwMDAwMFowRjERMA8G A1UEAwwIQTkxRTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFB NzMyMUE5RDE2OTYwQkUyNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo3YuV6NesfP2PDrx+FeBAQm/8+61ov7OTGCLATnUeUT6hFxeY7wCK45sRk/Wn QJlw+7aRP8ojPzwAHCQUN2MXBbLYby3lUGOsCNfbYF7t7yjMw7X3bG5SSQJ1Hsg3 GAIAXTw0+GHG8Z9UqzAp2wxh/efJ4/A1/JX7h3k0jojiY8ROQ3LeA6jg17KP2E8r gnOLtqiWWYNzNHM9i7OmJb78ZqurjYSKq+Ra7+VFmeI3qsBLVl2X/isBYCJJaEBn Q3SZH4v+8pG+V/Wii5HOSkQIGJU564WaMvMU6qe1vTuhtmNfm2R2FGHMl48WLyJn o1pHeMvVrPqernpj9u6nQuTDAgMBAAGjggNYMIIDVDAdBgNVHQ4EFgQUbTjFtM9L rT2YSHGnMhqdFpYL4mgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUxNzBCLzk3QUY2REYwMUQ2RDExRTJBMTJEOUVBRTA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05 THJUMllTSEduTWhxZEZwWUw0bWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQgBAf8EIDAe oBwwGgICRZ0CAwCwiAIDAgAjMAoCAwIRbQIDAhF1MFMGCCsGAQUFBwEHAQH/BEQw QjAYBAIAATASAwQDPS34AwQByn1gAwQAyx5/MCYEAgACMCADBwAgAQ3wAAoDBwEg AQ3y7gADBQAkAUYBAwUAJAZkADANBgkqhkiG9w0BAQsFAAOCAQEAuky9f5TSim7A HetN99wFTj06gHz3q2AcgEQrGG6WBaUwGskoI1n2kw/rngD7qDaS5thA5eGNeqbk tXwQbayHGnM/Hm/QSiT6GC8kAqFgNaTMd8dEFls/OxSSY+sbOryYyS19NIxvK4G4 MGlLtxw/K/vHdVgiLqsC8L0xnxSIPucJy8LIwJvOmjHT3v348qINUppzJpke8+A4 XA1lqdt9hw4ptSNiRBNwSx1Vi7EFBkg3/Kweh+yUJe0tVgO7vbEkRgs51+ChBuQv aFQ9KyZKdZTYY+4k2iMd+hb5v9jVMggHxvdsAGMQCNU/kGHoakEvbZzNWW90cYEH rt87AsDPbg== -----END CERTIFICATE-----Generated at Sat Jan 31 11:54:11 2026 by rpki-client