This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer (raw, json) Hash identifier: 9ciE3UgfntkcRNYYb15iOVV6tPDmCoWso/NQYray5Ww= Subject key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028C40 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 02 Feb 2026 15:03:14 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 38621 -- 38622 AS: 55429 IP: 45.113.116.0/22 IP: 103.53.12.0/22 IP: 111.119.0.0/19 IP: 117.121.248.0/21 IP: 203.9.176.0/21 IP: 203.77.184.0/21 IP: 2402:6800::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Feb 2026 05:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166976 (0x28c40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Feb 2 15:03:14 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:82:45:11:66:7c:0e:19:e9:57:3a:b3:84:ff: 04:a3:fe:b1:98:aa:8c:a8:31:3a:4f:11:bb:fa:17: e2:0f:02:61:36:b5:ac:fc:b7:cd:5b:27:fd:98:75: cc:ac:eb:51:29:fd:f2:1c:76:da:f8:14:54:31:90: 5e:b8:31:44:34:a8:d9:fa:5f:dd:c4:2a:56:a7:bf: c5:96:1b:8d:dc:5f:09:55:8f:93:1b:1b:df:b0:f0: b5:63:a6:15:cb:ff:8c:c0:d4:39:e0:c7:88:12:6c: 6e:59:6b:5a:61:56:35:32:71:e6:9a:c7:21:78:0f: ee:e0:9b:ed:48:17:bd:ce:4e:d2:b7:b3:4f:f6:81: b8:f9:a2:15:53:77:e1:16:14:47:9c:3c:12:12:80: b3:97:08:93:f6:f3:ed:2f:da:71:f4:68:51:38:f6: b5:38:ba:c1:9e:89:90:ff:16:41:cf:cd:26:f6:d4: 78:ed:3e:60:9e:ac:59:f1:29:88:00:6c:da:5e:30: 94:71:c7:fa:22:45:83:5f:ed:5b:9e:38:84:b2:37: 65:e1:ef:77:63:a8:62:18:3a:52:e4:dc:f3:1e:a8: 85:de:3b:9b:67:ca:bc:05:17:14:89:48:68:03:b4: 61:bb:82:54:95:71:95:41:cf:30:23:fa:c4:fc:33: c6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38621-38622 55429 sbgp-ipAddrBlock: critical IPv4: 45.113.116.0/22 103.53.12.0/22 111.119.0.0/19 117.121.248.0/21 203.9.176.0/21 203.77.184.0/21 IPv6: 2402:6800::/32 Signature Algorithm: sha256WithRSAEncryption 79:20:bd:dc:c0:2b:c5:75:b1:6d:c0:d6:0d:e3:62:a3:74:a6: d3:df:09:94:af:d5:a4:73:a7:89:7b:31:20:ce:08:6f:55:67: 5e:69:33:a0:bf:96:30:75:6d:5f:3d:92:fc:0c:a5:12:cc:f2: 82:d3:31:37:90:02:11:16:4d:b7:3c:2f:7a:e6:a0:3e:58:c1: 4c:6f:d3:8b:bb:47:43:92:aa:8a:a6:6e:ce:0d:d9:c0:b4:c8: 63:ed:fa:63:54:63:84:cf:c6:af:a7:38:a2:f9:6f:7e:52:a3: 18:88:03:b0:f3:42:44:5c:26:24:8d:77:bd:db:ab:25:e8:00: 49:ec:ce:36:8f:9b:94:46:e6:da:ec:19:9a:bc:de:4b:69:4e: 31:37:e5:77:31:b9:9d:5b:f0:7e:72:4e:9d:f1:72:77:53:08: ca:6f:3e:66:c3:2a:83:c5:c9:ce:03:66:79:0b:44:dd:d2:a1: 2e:2b:59:e6:59:1b:7e:7e:9f:99:a9:58:05:8b:a8:68:4c:16: dc:92:05:f3:b7:df:07:c0:b9:4e:83:1e:a8:94:2b:fc:af:ee: 29:a7:09:01:4c:81:33:bf:80:a3:f8:91:5e:02:ad:b9:b0:0a: 36:94:2f:c4:81:af:cf:26:43:29:74:a2:79:57:32:08:79:70: 76:f8:54:f9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIDAoxAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDIwMjE1MDMxNFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5 NjI0QkY5MTM1MUNDQUQ4NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqgkURZnwOGelXOrOE/wSj/rGYqoyoMTpPEbv6F+IPAmE2taz8t81bJ/2Ydcys 61Ep/fIcdtr4FFQxkF64MUQ0qNn6X93EKlanv8WWG43cXwlVj5MbG9+w8LVjphXL /4zA1Dngx4gSbG5Za1phVjUyceaaxyF4D+7gm+1IF73OTtK3s0/2gbj5ohVTd+EW FEecPBISgLOXCJP28+0v2nH0aFE49rU4usGeiZD/FkHPzSb21HjtPmCerFnxKYgA bNpeMJRxx/oiRYNf7VueOISyN2Xh73djqGIYOlLk3PMeqIXeO5tnyrwFFxSJSGgD tGG7glSVcZVBzzAj+sT8M8bRAgMBAAGjggNIMIIDRDAdBgNVHQ4EFgQUk3MvP8MT Wbu/izeWJL+RNRzK2FcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY0MjY4L0M3OEVCQ0VBMjE5MzExRUM5MDBDNTY1M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGNDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhN VFdidV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJgYIKwYBBQUHAQgBAf8EFzAV oBMwETAKAgMAlt0CAwCW3gIDANiFMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAk AwQCLXF0AwQCZzUMAwQFb3cAAwQDdXn4AwQDywmwAwQDy024MA0EAgACMAcDBQAk AmgAMA0GCSqGSIb3DQEBCwUAA4IBAQB5IL3cwCvFdbFtwNYN42KjdKbT3wmUr9Wk c6eJezEgzghvVWdeaTOgv5YwdW1fPZL8DKUSzPKC0zE3kAIRFk23PC965qA+WMFM b9OLu0dDkqqKpm7ODdnAtMhj7fpjVGOEz8avpzii+W9+UqMYiAOw80JEXCYkjXe9 26sl6ABJ7M42j5uURuba7BmavN5LaU4xN+V3MbmdW/B+ck6d8XJ3UwjKbz5mwyqD xcnOA2Z5C0Td0qEuK1nmWRt+fp+ZqVgFi6hoTBbckgXzt98HwLlOgx6olCv8r+4p pwkBTIEzv4Cj+JFeAq25sAo2lC/Ega/PJkMpdKJ5VzIIeXB2+FT5 -----END CERTIFICATE-----Generated at Sat Feb 7 07:13:46 2026 by rpki-client