This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer File: he6QOP_DVBq9-33Z7TPyquNy54w.cer (raw, json) Hash identifier: sLIDnqbbK6LnVxnjHtAEf8xI7PanRmAQUckzIQai1UI= Subject key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028D31 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 04 Feb 2026 14:34:34 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 7551 AS: 136163 IP: 103.82.108.0/22 IP: 111.125.176.0/20 IP: 119.63.208.0/22 IP: 223.25.224.0/22 IP: 2400:8340::/32 IP: 2407:1980::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Feb 2026 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167217 (0x28d31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Feb 4 14:34:34 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:90:a3:ed:2e:7d:b4:4b:2f:68:b8:6f:4c: 63:75:22:72:df:1d:26:3b:21:76:49:4c:c0:33:2b: d2:bd:e8:e3:bf:04:12:2c:ad:d2:63:e3:35:ec:ee: f5:ea:b6:5d:f6:db:5e:d4:f9:22:09:2a:78:a8:7d: 7c:7a:b5:92:3c:2d:24:30:81:0a:7b:86:28:7b:20: 53:dd:6a:c1:0c:76:30:a2:88:86:2f:2e:83:19:fd: c3:fb:a2:d7:04:e2:63:00:6e:71:be:84:07:c1:96: 20:29:5d:24:e0:92:4b:15:1c:91:2f:04:47:ae:80: d2:58:00:e4:9b:77:8f:e0:e3:86:8f:e2:da:5b:f9: 3c:ac:dc:83:2c:fc:77:cf:51:cf:e1:1e:c3:3c:57: 95:18:6e:68:0d:13:66:a5:4c:bb:d1:4e:c7:d0:cc: 24:f4:4a:a1:f7:67:a6:80:20:3b:b4:41:f7:c2:b5: d5:03:29:0d:dc:4a:41:4d:20:71:4d:33:fa:f8:51: 5b:98:ce:96:12:ce:e3:19:b6:9e:21:bc:09:0b:0b: 91:c5:59:84:28:59:1d:d8:a7:50:d4:38:65:74:29: 72:81:3f:7a:e8:4c:cf:40:b9:91:3e:24:d6:54:7c: 77:5d:48:09:3b:f9:20:05:21:13:96:36:70:32:30: 0d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 7551 136163 sbgp-ipAddrBlock: critical IPv4: 103.82.108.0/22 111.125.176.0/20 119.63.208.0/22 223.25.224.0/22 IPv6: 2400:8340::/32 2407:1980::/32 Signature Algorithm: sha256WithRSAEncryption 00:19:76:d4:a8:82:0f:dc:66:22:f5:d2:b7:5c:90:96:68:10: 1e:ee:83:b1:10:56:23:ed:6b:34:85:02:9f:5c:89:35:56:bf: a2:2c:40:7a:08:18:f4:b5:8a:1e:3b:cd:4d:0d:c4:ee:5f:d1: 9b:5f:54:68:ac:31:2d:dd:c4:08:49:cd:ba:07:41:5a:b9:64: e5:ee:bd:f1:f9:e6:f3:a9:0d:cf:82:ea:36:cf:2d:64:93:d8: 09:45:d6:83:b5:a2:a0:77:2c:c0:63:01:74:a7:ab:04:cb:af: 79:23:ae:57:10:80:43:0c:e5:f1:b8:32:8c:ef:82:72:45:c9: 68:c6:2d:97:ef:3b:d9:1e:69:e8:eb:eb:ab:ed:38:28:c6:8b: 9a:22:e3:49:ff:00:32:bf:c6:19:cf:1b:78:9f:8d:b8:06:f9: 5e:8d:66:7d:77:f9:1d:30:a8:5f:5c:81:61:34:20:cb:26:6d: 39:7a:ba:14:e8:1a:21:36:2d:fc:bc:40:9b:5a:2d:e7:ca:cf: 88:77:7b:0f:ea:6c:b4:f8:2f:cb:58:22:07:0c:42:6c:f2:37: c3:25:a4:49:1b:56:b5:11:9b:c5:68:cb:c1:c8:a0:4e:ee:75: a8:c9:60:a5:56:71:bd:ba:19:f9:1d:62:4a:ab:62:36:be:45: 68:c0:ad:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIDAo0xMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDIwNDE0MzQzNFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRkY1RTQxMTAvBgNVBAUTKDg1RUU5MDM4RkZDMzU0MUFCREZCN0RE OUVEMzNGMkFBRTM3MkU3OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNUZCj7S59tEsvaLhvTGN1InLfHSY7IXZJTMAzK9K96OO/BBIsrdJj4zXs7vXq tl32217U+SIJKniofXx6tZI8LSQwgQp7hih7IFPdasEMdjCiiIYvLoMZ/cP7otcE 4mMAbnG+hAfBliApXSTgkksVHJEvBEeugNJYAOSbd4/g44aP4tpb+Tys3IMs/HfP Uc/hHsM8V5UYbmgNE2alTLvRTsfQzCT0SqH3Z6aAIDu0QffCtdUDKQ3cSkFNIHFN M/r4UVuYzpYSzuMZtp4hvAkLC5HFWYQoWR3Yp1DUOGV0KXKBP3roTM9AuZE+JNZU fHddSAk7+SAFIROWNnAyMA1zAgMBAAGjggM7MIIDNzAdBgNVHQ4EFgQUhe6QOP/D VBq9+33Z7TPyquNy54wwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZGNUU0L0VEMDc5REZFRTM4NDExRUJBODU5M0I2NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGRjVFNC9FRDA3OURGRUUzODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1Bf RFZCcTktMzNaN1RQeXF1Tnk1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICHX8CAwIT4zBHBggrBgEFBQcBBwEB/wQ4MDYwHgQCAAEwGAMEAmdSbAME BG99sAMEAnc/0AMEAt8Z4DAUBAIAAjAOAwUAJACDQAMFACQHGYAwDQYJKoZIhvcN AQELBQADggEBAAAZdtSogg/cZiL10rdckJZoEB7ug7EQViPtazSFAp9ciTVWv6Is QHoIGPS1ih47zU0NxO5f0ZtfVGisMS3dxAhJzboHQVq5ZOXuvfH55vOpDc+C6jbP LWST2AlF1oO1oqB3LMBjAXSnqwTLr3kjrlcQgEMM5fG4MozvgnJFyWjGLZfvO9ke aejr66vtOCjGi5oi40n/ADK/xhnPG3ifjbgG+V6NZn13+R0wqF9cgWE0IMsmbTl6 uhToGiE2Lfy8QJtaLefKz4h3ew/qbLT4L8tYIgcMQmzyN8MlpEkbVrURm8Voy8HI oE7udajJYKVWcb26GfkdYkqrYja+RWjArdE= -----END CERTIFICATE-----Generated at Thu Feb 5 17:30:13 2026 by rpki-client