This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer File: bhQyTH_rm8iZLUocPkWehqPxjuE.cer (raw, json) Hash identifier: jHGx1d5kwm0thMHEcpsK/HXQ+SO2dfhbXlQaXkCGn2w= Subject key identifier: 6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028BA0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 02 Feb 2026 09:02:55 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 45.125.240.0/22 IP: 103.253.216.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Feb 2026 19:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166816 (0x28ba0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Feb 2 09:02:55 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91CDC08, serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b2:0d:60:66:66:23:bb:d4:36:ea:80:d3:35: ef:fe:5a:01:72:8d:9b:a1:95:0b:27:88:73:b1:de: 54:b6:49:86:da:e7:04:a5:54:61:92:90:e7:3d:fc: 0c:98:83:68:07:a4:ba:0e:2f:86:be:4e:0b:e6:7c: da:db:c5:1a:9d:38:e2:d3:68:82:60:e2:b8:40:d3: 92:d8:11:7b:23:31:02:3c:b3:98:48:df:c1:e9:12: 77:3b:52:3c:67:e4:2e:94:c0:c2:8d:6b:58:38:ef: 85:79:29:db:c7:9c:93:a2:7a:81:c0:b3:d4:05:ee: dc:ee:89:90:c7:3e:48:76:87:c8:57:69:2a:b4:ce: 1f:c6:0f:4a:a8:74:af:e0:7d:b0:ff:09:e0:3a:fa: f1:dd:2c:03:bf:ea:f3:ef:19:ed:3d:e7:36:e3:09: fd:f7:07:ea:6a:6d:da:9d:22:71:d3:2d:5c:8b:38: 0a:09:0d:0c:1e:c7:0c:91:ba:9e:4b:45:55:72:cb: 3c:eb:ad:e1:21:17:e1:b3:be:b3:9c:79:8a:6f:51: b0:b4:74:e0:30:24:9b:01:74:4b:9b:f3:b4:e6:74: f8:be:52:ec:80:c6:71:21:48:33:45:bd:3a:4f:14: bb:e6:f1:ec:54:5f:31:a3:79:fe:6a:9b:bc:09:df: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.125.240.0/22 103.253.216.0/22 Signature Algorithm: sha256WithRSAEncryption 36:2b:55:8a:8d:75:6b:75:32:90:39:dd:3c:fe:10:2c:2a:b8: 8f:bb:84:d0:1d:d0:c7:29:9a:dd:7b:da:35:94:78:8f:e4:86: 88:97:38:4d:73:eb:01:af:a3:6b:fb:d3:73:67:61:eb:99:43: 4e:3d:d5:22:51:53:97:d5:06:68:2e:5d:c3:b3:19:7e:3c:9d: 48:f6:fc:be:54:ae:14:6e:ab:21:95:f3:45:c2:1b:f3:09:96: f2:22:d8:4c:52:c8:49:27:d8:23:d5:7a:f7:4d:1c:ba:02:1a: 05:c9:15:e3:ad:1c:6e:92:04:7d:e9:03:71:86:ed:45:e2:80: ff:f1:53:d3:df:6e:44:65:bc:c8:df:17:fe:f7:ac:5d:7f:90: 51:8a:af:28:73:23:10:66:ab:f9:b8:13:5a:71:29:d9:90:7c: 96:f3:3b:3f:ac:28:f8:ca:8d:7f:f0:00:f0:9c:e5:d3:93:2c: 79:5a:d8:b5:af:73:e4:b2:f6:12:63:f1:6d:3f:40:e0:6c:12: 1d:81:c7:97:af:de:85:23:e1:3c:f1:37:ac:18:86:3e:f7:00: 26:62:8d:b0:12:0b:43:35:79:2a:7f:6d:90:b4:d4:ea:a2:e0: 63:c2:77:08:0f:cd:3f:82:29:2b:47:88:a2:7a:69:14:30:0d: f9:8d:92:66 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIDAougMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDIwMjA5MDI1NVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxQ0RDMDgxMTAvBgNVBAUTKDZFMTQzMjRDN0ZFQjlCQzg5OTJENEEx QzNFNDU5RTg2QTNGMThFRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUsg1gZmYju9Q26oDTNe/+WgFyjZuhlQsniHOx3lS2SYba5wSlVGGSkOc9/AyY g2gHpLoOL4a+TgvmfNrbxRqdOOLTaIJg4rhA05LYEXsjMQI8s5hI38HpEnc7Ujxn 5C6UwMKNa1g474V5KdvHnJOieoHAs9QF7tzuiZDHPkh2h8hXaSq0zh/GD0qodK/g fbD/CeA6+vHdLAO/6vPvGe095zbjCf33B+pqbdqdInHTLVyLOAoJDQwexwyRup5L RVVyyzzrreEhF+GzvrOceYpvUbC0dOAwJJsBdEub87TmdPi+UuyAxnEhSDNFvTpP FLvm8exUXzGjef5qm7wJ34rdAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUbhQyTH/r m8iZLUocPkWehqPxjuEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNEQzA4L0YzRTY1N0ZDMDAxNTExRjE5NUQ1OEFENDQwNkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDREMwOC9GM0U2NTdGQzAwMTUxMUYxOTVENThBRDQ0MDZGNTZCQy9iaFF5VEhf cm04aVpMVW9jUGtXZWhxUHhqdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU MBIEAgABMAwDBAItffADBAJn/dgwDQYJKoZIhvcNAQELBQADggEBADYrVYqNdWt1 MpA53Tz+ECwquI+7hNAd0Mcpmt172jWUeI/khoiXOE1z6wGvo2v703NnYeuZQ049 1SJRU5fVBmguXcOzGX48nUj2/L5UrhRuqyGV80XCG/MJlvIi2ExSyEkn2CPVevdN HLoCGgXJFeOtHG6SBH3pA3GG7UXigP/xU9PfbkRlvMjfF/73rF1/kFGKryhzIxBm q/m4E1pxKdmQfJbzOz+sKPjKjX/wAPCc5dOTLHla2LWvc+Sy9hJj8W0/QOBsEh2B x5ev3oUj4TzxN6wYhj73ACZijbASC0M1eSp/bZC01Oqi4GPCdwgPzT+CKStHiKJ6 aRQwDfmNkmY= -----END CERTIFICATE-----Generated at Tue Feb 10 22:42:10 2026 by rpki-client