This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer File: iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer (raw, json) Hash identifier: 3cxSf4V3PjHQhZ3uHybxwFyNPgVEr9iQauC1LCDgPls= Subject key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028721 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft caRepository: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 19 Jan 2026 02:57:13 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 9444 IP: 120.88.192.0/18 IP: 202.4.192.0/19 IP: 223.130.32.0/19 IP: 2405:b200::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 19:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165665 (0x28721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 19 02:57:13 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c5:28:ce:1d:44:cc:f0:02:91:ec:54:1c:cd: 17:f2:75:b2:e7:98:f1:af:07:ac:a4:6f:5b:08:07: ac:cf:ff:51:02:25:16:39:ca:0a:41:e7:41:40:f1: fd:22:d6:b3:18:6d:ba:a8:be:a1:ec:10:f4:75:3c: 6e:f9:11:13:f6:34:aa:49:b5:7c:22:d9:78:42:6f: 23:67:48:1e:b8:75:74:bc:04:ae:73:54:55:08:07: 68:c9:09:27:6b:4c:d8:3e:45:00:d9:b7:2a:c8:ec: 16:c2:9e:33:dc:6b:95:bf:ea:cc:b1:99:86:f8:34: 00:b1:b9:36:42:d7:0d:3b:35:fc:5f:d1:b8:52:d9: 2d:3d:f2:0b:98:1b:a9:ea:a5:15:eb:58:09:50:2a: 16:47:fd:45:60:73:7f:56:e0:3d:f5:aa:24:49:64: 2c:5e:11:f7:62:3b:ed:4d:08:2f:de:1c:59:06:a6: 12:e3:6b:01:fa:53:ce:4a:bd:4d:3e:93:e5:fc:86: c0:2d:cd:98:b8:69:3e:c5:a6:ed:bb:f0:39:f1:9b: 02:0d:1f:b8:b1:40:b9:31:58:51:bc:35:23:e6:e5: 93:75:0c:7c:c0:49:e9:20:f7:4d:63:be:2d:66:f0: 0d:96:41:6a:5f:e6:cd:bc:f5:bd:25:a2:aa:2f:fc: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9444 sbgp-ipAddrBlock: critical IPv4: 120.88.192.0/18 202.4.192.0/19 223.130.32.0/19 IPv6: 2405:b200::/32 Signature Algorithm: sha256WithRSAEncryption a8:47:39:02:65:cf:0d:e1:95:95:2c:8a:1f:42:c3:f2:48:10: f7:a1:a0:43:52:18:d5:31:63:92:bf:2e:44:81:e5:99:20:96: 36:c6:20:e3:4e:2d:a2:4d:f0:5c:b4:9b:dd:da:ba:43:48:11: 4c:93:10:d4:3c:6f:f8:c3:13:68:a6:fd:44:66:12:8c:c8:22: 06:a2:95:7f:af:22:f1:40:be:39:45:20:74:35:86:84:c7:c4: d3:31:cc:f6:1e:95:30:6a:63:bb:9d:83:b1:85:3d:6b:31:5d: e0:29:4d:d6:e8:bc:a9:84:93:f1:e4:c6:78:24:68:c3:24:ac: 3b:af:81:4f:10:f0:8b:e2:18:fd:d9:ef:70:5c:1a:7b:df:cb: 24:26:ed:5f:3b:1d:e8:bf:55:b2:ca:f6:b6:07:2b:56:f4:37: dc:1b:8e:ef:b2:bf:b1:25:f3:b5:1d:e1:54:6e:dc:0e:e4:fe: e2:08:40:e7:59:48:9d:e2:86:a1:ec:a3:a8:bf:0a:49:71:e0: c3:93:cd:67:cf:68:38:30:b7:a3:25:5b:f5:d3:0d:4b:08:b7: be:48:75:9a:03:a7:41:49:de:db:45:8f:54:03:6b:1c:d3:65: 14:42:21:9e:49:f6:11:14:db:da:e9:4d:94:27:07:f0:9e:b7: b3:c4:f9:7b -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIDAochMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExOTAyNTcxM1oXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxOTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2 NTI2OEM2MkU4NkU1NEQ0NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBxSjOHUTM8AKR7FQczRfydbLnmPGvB6ykb1sIB6zP/1ECJRY5ygpB50FA8f0i 1rMYbbqovqHsEPR1PG75ERP2NKpJtXwi2XhCbyNnSB64dXS8BK5zVFUIB2jJCSdr TNg+RQDZtyrI7BbCnjPca5W/6syxmYb4NACxuTZC1w07Nfxf0bhS2S098guYG6nq pRXrWAlQKhZH/UVgc39W4D31qiRJZCxeEfdiO+1NCC/eHFkGphLjawH6U85KvU0+ k+X8hsAtzZi4aT7Fpu278DnxmwINH7ixQLkxWFG8NSPm5ZN1DHzASekg901jvi1m 8A2WQWpf5s289b0loqov/AWBAgMBAAGjggMpMIIDJTAdBgNVHQ4EFgQUiQsd7+iN WRlrzHtlJoxi6G5U1G0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk1RjdCL0ExMzFCMzk0QkIzOTExRUVBNjU1NDE3RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5NUY3Qi9BMTMxQjM5NEJCMzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1p TldSbHJ6SHRsSm94aTZHNVUxRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICJOQwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAZ4WMADBAXKBMAD BAXfgiAwDQQCAAIwBwMFACQFsgAwDQYJKoZIhvcNAQELBQADggEBAKhHOQJlzw3h lZUsih9Cw/JIEPehoENSGNUxY5K/LkSB5ZkgljbGIONOLaJN8Fy0m93aukNIEUyT ENQ8b/jDE2im/URmEozIIgailX+vIvFAvjlFIHQ1hoTHxNMxzPYelTBqY7udg7GF PWsxXeApTdbovKmEk/HkxngkaMMkrDuvgU8Q8IviGP3Z73BcGnvfyyQm7V87Hei/ VbLK9rYHK1b0N9wbju+yv7El87Ud4VRu3A7k/uIIQOdZSJ3ihqHso6i/Cklx4MOT zWfPaDgwt6MlW/XTDUsIt75IdZoDp0FJ3ttFj1QDaxzTZRRCIZ5J9hEU29rpTZQn B/Cet7PE+Xs= -----END CERTIFICATE-----Generated at Mon Jan 26 21:11:55 2026 by rpki-client