This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer File: o_JydS7F2eEp5N_KCAuI05t5SUQ.cer (raw, json) Hash identifier: ildtlf5zymuVgbDuz4cY6pVFvd+DnI6GiAm9ZcFLYFI= Subject key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028430 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 06 Jan 2026 23:11:21 +0000 Certificate not after: Wed 30 Sep 2026 00:00:00 +0000 Subordinate resources: AS: 133199 AS: 133861 IP: 43.225.44.0/22 IP: 43.240.28.0/22 IP: 43.242.32.0/22 IP: 45.119.96.0/22 IP: 103.44.28.0/22 IP: 103.59.144.0/22 IP: 103.142.190.0/23 IP: 103.249.108.0/22 IP: 103.254.148.0/22 IP: 2404:da80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Feb 2026 05:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164912 (0x28430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 6 23:11:21 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:d5:4a:84:45:9e:ad:87:a3:1b:b4:eb:b2: db:56:34:74:4a:c1:e9:6d:1f:cd:62:0f:31:a3:e0: a2:70:ae:35:47:bc:76:0c:32:d3:dd:54:0b:5a:d5: ca:d0:db:9e:16:d0:e5:29:d0:70:39:ec:ff:9c:35: 8c:2b:53:8f:f6:b7:b2:25:ad:3c:ca:df:ce:17:7e: c8:d1:fe:98:b9:f5:49:80:65:00:4a:f4:e7:db:43: ee:d3:d9:8a:55:db:9a:72:61:88:63:71:7e:cc:db: aa:64:f1:8c:6d:30:b2:b5:05:56:e2:71:c1:81:06: 3b:20:bf:ad:9b:56:86:e3:c2:35:e8:f8:d4:22:f5: 4d:55:47:08:52:80:8b:67:6a:a3:50:fd:08:25:bd: 82:2b:d4:60:10:f4:2c:65:01:c4:28:41:72:58:a6: db:7b:d4:95:35:22:aa:0b:4d:25:01:e0:d5:77:15: 82:23:6e:fe:7d:09:c5:76:4d:81:42:15:27:54:49: cc:80:ad:ca:09:46:a3:f0:c4:c5:1b:cd:92:71:2c: d8:cd:81:30:30:88:06:84:9a:df:d9:b7:d8:02:bd: cb:8a:11:2b:87:73:52:43:84:e2:a1:a0:b7:00:97: 5f:00:26:a6:27:f8:d2:b7:98:1f:24:64:6d:e9:9d: 4f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133199 133861 sbgp-ipAddrBlock: critical IPv4: 43.225.44.0/22 43.240.28.0/22 43.242.32.0/22 45.119.96.0/22 103.44.28.0/22 103.59.144.0/22 103.142.190.0/23 103.249.108.0/22 103.254.148.0/22 IPv6: 2404:da80::/32 Signature Algorithm: sha256WithRSAEncryption a5:be:61:03:32:a4:00:13:af:b7:14:09:2e:35:2d:2f:1b:7d: 4a:99:89:64:d4:48:73:49:1f:fb:30:86:42:62:84:41:e5:76: 65:4a:20:60:2c:e1:eb:e9:e6:00:90:5a:ff:11:4b:05:e0:c5: ee:70:28:40:29:6e:f7:a2:f9:a3:39:96:3d:82:08:16:a8:9b: 89:3c:53:0d:76:0f:48:3f:b7:3c:42:2d:78:66:8f:b8:de:da: c5:33:cd:23:d2:4a:2a:44:ff:d8:19:4b:1a:ca:54:c5:a1:76: 61:44:67:32:fc:fb:c1:0b:5d:d7:c3:eb:f6:46:f3:68:cc:35: 80:f9:13:55:bf:7e:42:c8:e6:75:29:77:ba:18:a4:9f:18:db: 3c:65:1d:1c:30:c9:17:ec:11:4f:cb:80:6b:82:24:6c:5f:3d: c0:ce:c1:dc:a6:b7:65:00:3c:57:62:66:e7:c5:7e:a3:af:f6: c8:40:49:2c:6b:dd:99:3f:9c:14:c3:d6:ea:f9:68:cc:58:6d: 9a:15:de:df:7d:49:30:c3:93:08:83:a2:a1:0b:3c:3b:9b:42: 34:eb:ce:be:cb:87:6f:23:bd:80:52:e3:7b:62:3c:64:11:d2: 44:d7:e6:dc:0b:f6:da:34:83:90:40:72:68:39:dc:61:75:cf: 6c:07:01:6d -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIDAoQwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwNjIzMTEyMVoXDTI2MDkzMDAwMDAwMFowRjERMA8G A1UEAwwIQTkxRTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZD QTA4MEI4OEQzOUI3OTQ5NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9NtVKhEWerYejG7TrsttWNHRKweltH81iDzGj4KJwrjVHvHYMMtPdVAta1crQ 254W0OUp0HA57P+cNYwrU4/2t7IlrTzK384XfsjR/pi59UmAZQBK9OfbQ+7T2YpV 25pyYYhjcX7M26pk8YxtMLK1BVbiccGBBjsgv62bVobjwjXo+NQi9U1VRwhSgItn aqNQ/QglvYIr1GAQ9CxlAcQoQXJYptt71JU1IqoLTSUB4NV3FYIjbv59CcV2TYFC FSdUScyArcoJRqPwxMUbzZJxLNjNgTAwiAaEmt/Zt9gCvcuKESuHc1JDhOKhoLcA l18AJqYn+NK3mB8kZG3pnU8/AgMBAAGjggNTMIIDTzAdBgNVHQ4EFgQUo/JydS7F 2eEp5N/KCAuI05t5SUQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU1MDRFLzU5MDk0OTkwOTYwODExRUNBMDRBMDA4NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFNTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3 RjJlRXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAghPAgMCCuUwXgYIKwYBBQUHAQcBAf8ETzBNMDwEAgABMDYDBAIr4SwD BAIr8BwDBAIr8iADBAItd2ADBAJnLBwDBAJnO5ADBAFnjr4DBAJn+WwDBAJn/pQw DQQCAAIwBwMFACQE2oAwDQYJKoZIhvcNAQELBQADggEBAKW+YQMypAATr7cUCS41 LS8bfUqZiWTUSHNJH/swhkJihEHldmVKIGAs4evp5gCQWv8RSwXgxe5wKEApbvei +aM5lj2CCBaom4k8Uw12D0g/tzxCLXhmj7je2sUzzSPSSipE/9gZSxrKVMWhdmFE ZzL8+8ELXdfD6/ZG82jMNYD5E1W/fkLI5nUpd7oYpJ8Y2zxlHRwwyRfsEU/LgGuC JGxfPcDOwdymt2UAPFdiZufFfqOv9shASSxr3Zk/nBTD1ur5aMxYbZoV3t99STDD kwiDoqELPDubQjTrzr7Lh28jvYBS43tiPGQR0kTX5twL9to0g5BAcmg53GF1z2wH AW0= -----END CERTIFICATE-----Generated at Wed Feb 4 08:30:00 2026 by rpki-client