This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer (raw, json) Hash identifier: 6DI8u+3NZJfg5opfdE9E2Ze8T27X8Qjq82eOBlDaAUY= Subject key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028190 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 13:41:10 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 9498 AS: 10239 AS: 23870 AS: 24560 AS: 45514 AS: 45609 IP: 27.123.64.0/18 IP: 58.84.56.0/23 IP: 59.144.0.0/15 IP: 61.95.128.0/17 IP: 61.246.0.0/16 IP: 61.247.224.0/19 IP: 101.2.0.0/17 IP: 103.7.108.0/22 IP: 103.16.104.0/22 IP: 103.56.85.0/24 IP: 103.110.38.0/24 IP: 103.116.28.0/22 IP: 103.210.40.0/22 IP: 103.239.233.0/24 IP: 103.251.28.0/22 IP: 122.160.0.0 -- 122.187.255.255 IP: 125.16.0.0/13 IP: 150.129.140.0/22 IP: 171.48.0.0/12 IP: 171.76.0.0/14 IP: 180.178.0.0/19 IP: 180.211.80.0/22 IP: 182.64.0.0/12 IP: 182.95.0.0/16 IP: 202.56.192.0/18 IP: 202.71.16.0/21 IP: 203.101.0.0/17 IP: 203.132.128.0/19 IP: 203.145.128.0/18 IP: 2404:a800::/32 IP: 2407:b900::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164240 (0x28190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 29 13:41:10 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d2:21:47:ac:2c:95:e8:a1:d2:f2:5a:6e:86: 80:f2:28:c7:d5:3b:16:f5:1e:d5:97:0e:0a:cb:ee: 0a:1d:c3:4a:b0:37:7f:ed:7f:a6:5b:b8:22:26:fe: d5:5e:de:93:11:46:d0:4e:b9:c2:51:4d:e2:4e:62: 08:85:78:ef:77:b6:70:dc:a6:7d:77:21:7e:52:db: 3f:4f:45:83:4a:c6:43:12:2e:e6:3d:92:1e:eb:89: 49:d4:ad:07:62:e4:44:f3:81:63:57:53:46:68:5c: 70:c9:fe:1d:77:30:41:aa:5e:a5:e4:02:99:07:7f: 3b:d0:ab:63:ea:b2:1b:4d:be:8f:a9:04:49:88:49: fc:76:e8:4d:bf:73:9d:57:82:a8:79:2c:b5:70:4f: 49:7a:ff:4f:f9:e1:a3:ed:29:0e:59:88:c1:86:ad: 3f:d2:0d:43:29:f2:f5:55:05:74:dd:57:94:41:68: 44:0d:08:db:00:6e:46:4b:21:3c:9d:eb:6c:73:0e: 57:a4:da:e6:bc:bd:3f:57:3d:99:da:c6:03:ff:6b: 41:0d:f6:06:69:39:f2:cc:21:bc:2e:2c:c6:5f:f5: d1:f8:f4:22:b2:25:17:ad:e7:76:a1:ea:10:21:59: 7a:42:9b:bd:ed:91:bc:63:fd:a4:a4:14:d1:31:89: 03:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9498 10239 23870 24560 45514 45609 sbgp-ipAddrBlock: critical IPv4: 27.123.64.0/18 58.84.56.0/23 59.144.0.0/15 61.95.128.0/17 61.246.0.0/16 61.247.224.0/19 101.2.0.0/17 103.7.108.0/22 103.16.104.0/22 103.56.85.0/24 103.110.38.0/24 103.116.28.0/22 103.210.40.0/22 103.239.233.0/24 103.251.28.0/22 122.160.0.0-122.187.255.255 125.16.0.0/13 150.129.140.0/22 171.48.0.0/12 171.76.0.0/14 180.178.0.0/19 180.211.80.0/22 182.64.0.0/12 182.95.0.0/16 202.56.192.0/18 202.71.16.0/21 203.101.0.0/17 203.132.128.0/19 203.145.128.0/18 IPv6: 2404:a800::/32 2407:b900::/32 Signature Algorithm: sha256WithRSAEncryption 28:53:60:bd:a3:7a:e8:8b:c4:c7:b1:37:94:0a:e6:a1:54:d3: ad:0e:f2:f2:f2:93:55:ff:b3:6b:4b:11:31:74:dd:e6:0b:08: 47:a7:05:26:5a:ef:fa:f8:a7:7d:10:ff:7c:38:21:0a:4f:d4: 1b:6c:eb:cd:d6:c2:a6:3a:84:c1:c6:f2:96:26:db:81:15:fc: 58:79:62:ae:68:e6:2e:74:09:c4:d9:fa:cd:c1:42:2b:3e:97: a8:8b:c6:a2:b1:62:97:1f:54:1a:cb:c4:80:36:19:03:27:78: 02:fe:f9:2f:a6:45:51:dd:7f:2f:e8:84:f2:73:13:b5:13:f3: b2:40:ab:a2:3f:46:d3:8e:d2:02:da:59:78:da:99:d3:77:1a: a3:02:e6:5e:9d:aa:49:18:53:97:a2:28:96:b4:c8:ff:60:ae: 25:4d:66:d0:78:04:c5:de:af:c1:f7:63:03:fb:07:9f:31:82: f0:9a:64:58:32:c1:33:07:86:5b:9e:f4:f5:44:5b:92:64:20: 22:21:59:36:e7:30:e4:a8:45:da:7a:d6:03:ae:0a:c1:7b:89: f9:4b:e5:ff:c9:42:aa:a2:72:8f:86:dc:a7:67:24:a6:19:d6: a2:22:60:c3:26:be:c1:56:71:26:30:57:89:dc:a9:4e:95:1b: fc:76:74:50 -----BEGIN CERTIFICATE----- MIIG8TCCBdmgAwIBAgIDAoGQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyOTEzNDExMFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxOTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUz Qzg4QUQxNERBODlBMTg2MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc0iFHrCyV6KHS8lpuhoDyKMfVOxb1HtWXDgrL7godw0qwN3/tf6ZbuCIm/tVe 3pMRRtBOucJRTeJOYgiFeO93tnDcpn13IX5S2z9PRYNKxkMSLuY9kh7riUnUrQdi 5ETzgWNXU0ZoXHDJ/h13MEGqXqXkApkHfzvQq2PqshtNvo+pBEmISfx26E2/c51X gqh5LLVwT0l6/0/54aPtKQ5ZiMGGrT/SDUMp8vVVBXTdV5RBaEQNCNsAbkZLITyd 62xzDlek2ua8vT9XPZnaxgP/a0EN9gZpOfLMIbwuLMZf9dH49CKyJRet53ah6hAh WXpCm73tkbxj/aSkFNExiQNTAgMBAAGjggPmMIID4jAdBgNVHQ4EFgQUs5hmqZ0c 2fTn6PU8iK0U2omhhiUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk2NEIzL0U2NTg1MTEyMUQ4NDExRTJBMUJBMzBEQjA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5NjRCMy9FNjU4NTExMjFEODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVow YzJmVG42UFU4aUswVTJvbWhoaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQgBAf8EIDAe oBwwGgICJRoCAif/AgJdPgICX/ACAwCxygIDALIpMIHgBggrBgEFBQcBBwEB/wSB 0DCBzTCBtAQCAAEwga0DBAYbe0ADBAE6VDgDAwE7kAMEBz1fgAMDAD32AwQFPffg AwQHZQIAAwQCZwdsAwQCZxBoAwQAZzhVAwQAZ24mAwQCZ3QcAwQCZ9IoAwQAZ+/p AwQCZ/scMAoDAwV6oAMDAnq4AwMDfRADBAKWgYwDAwSrMAMDAqtMAwQFtLIAAwQC tNNQAwMEtkADAwC2XwMEBso4wAMEA8pHEAMEB8tlAAMEBcuEgAMEBsuRgDAUBAIA AjAOAwUAJASoAAMFACQHuQAwDQYJKoZIhvcNAQELBQADggEBAChTYL2jeuiLxMex N5QK5qFU060O8vLyk1X/s2tLETF03eYLCEenBSZa7/r4p30Q/3w4IQpP1Bts683W wqY6hMHG8pYm24EV/Fh5Yq5o5i50CcTZ+s3BQis+l6iLxqKxYpcfVBrLxIA2GQMn eAL++S+mRVHdfy/ohPJzE7UT87JAq6I/RtOO0gLaWXjamdN3GqMC5l6dqkkYU5ei KJa0yP9griVNZtB4BMXer8H3YwP7B58xgvCaZFgywTMHhlue9PVEW5JkICIhWTbn MOSoRdp61gOuCsF7iflL5f/JQqqico+G3KdnJKYZ1qIiYMMmvsFWcSYwV4ncqU6V G/x2dFA= -----END CERTIFICATE-----Generated at Wed Jan 28 18:42:04 2026 by rpki-client