This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer File: sp5FMRZ0XIdL8PC0ckWYKnHVJrU.cer (raw, json) Hash identifier: qSR60MHr34bm8gmQzM0iZRFc/9lSbK19dX0KcIm0QTU= Subject key identifier: B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028B98 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft caRepository: rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 02 Feb 2026 08:41:06 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: IP: 103.48.36.0/22 IP: 113.52.224.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Feb 2026 19:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166808 (0x28b98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Feb 2 08:41:06 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A911FE83, serialNumber=B29E453116745C874BF0F0B47245982A71D526B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:c1:03:9d:83:ff:4b:6f:34:f1:ad:6b:d5:aa: 8e:20:42:0b:b8:bc:30:f1:dd:be:f8:68:d4:57:7b: ea:f3:a6:04:a0:ab:bf:a3:af:1c:90:d1:e6:ff:76: d9:6c:19:b5:53:1e:40:a6:cd:d9:b1:98:ae:4c:16: 9e:fe:29:f2:ce:8f:a3:57:3b:4f:d2:58:45:71:9b: 65:46:1e:ea:16:7e:71:57:cc:a7:05:7c:02:bf:d3: 1f:ff:a3:b4:37:93:7a:2c:4f:f2:08:1d:64:01:60: 58:9c:e1:6e:bb:c4:72:49:bf:d6:cf:42:4a:b2:ca: d9:a4:05:3e:42:67:df:fe:ca:02:56:c8:9a:42:ab: 8a:15:7b:6f:27:70:e2:62:f2:36:ba:46:8e:77:85: cd:4e:4a:8b:e5:b7:6a:0b:d5:a8:c3:ba:11:8c:71: 18:11:ec:ce:07:e3:23:31:ad:7b:29:91:cf:d5:ea: 05:60:d5:65:c4:dd:a0:30:76:aa:8e:4e:81:5f:38: 86:f3:72:cb:b4:e1:f7:80:47:e9:6e:d5:65:fc:f1: ed:bb:a1:11:a0:30:4d:74:f9:8b:c6:a5:f1:b9:5a: 8c:e3:a0:4b:f7:72:f0:ba:1a:91:bd:72:53:d2:b4: 75:4a:61:de:8b:d8:6e:77:e4:e6:ae:80:b2:f4:66: 68:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9E:45:31:16:74:5C:87:4B:F0:F0:B4:72:45:98:2A:71:D5:26:B5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911FE83/E7EB26B0001211F1AFF40ACB406F56BC/sp5FMRZ0XIdL8PC0ckWYKnHVJrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.36.0/22 113.52.224.0/22 Signature Algorithm: sha256WithRSAEncryption 49:74:c7:cb:19:62:bf:8b:fb:35:d4:86:47:64:b3:d6:8e:d9: 74:32:ef:90:45:89:8e:a2:1a:9a:b6:3e:37:15:b6:99:64:e1: f5:ca:72:ff:36:0d:f0:26:0d:7c:9c:3b:32:ed:39:e1:c9:63: 43:ed:15:cc:5a:bb:a1:d9:f2:9d:39:e6:60:86:e2:60:86:19: b5:62:14:c3:82:00:1a:c2:df:71:84:ee:92:36:9a:58:eb:cb: c0:54:44:bf:83:9e:c9:5e:b4:5a:86:5e:d8:98:53:0d:46:d9: 2e:07:40:21:a4:ad:b1:15:b3:31:91:08:25:a6:f8:88:c0:46: d9:b9:b6:e6:94:0a:f7:35:ed:e5:fb:be:70:d0:b1:47:26:5e: 25:d2:30:8d:06:13:e3:db:3a:43:88:a7:83:48:72:f1:9a:b7: f0:5d:dd:0f:bf:1d:cc:d5:da:1b:17:b8:16:66:d7:c3:41:ce: f3:29:0a:2a:d9:ee:d2:aa:b5:d4:69:7f:ab:94:98:03:57:e1: cd:ec:06:fa:fc:07:88:84:53:e0:43:56:f2:fa:61:9b:e3:66: 16:e7:aa:cd:42:dc:cb:ae:e7:f3:0b:2f:51:6a:eb:5d:79:51: 0f:08:f2:a4:e8:0f:63:b8:b7:cb:06:b6:65:91:b4:83:37:46: 26:69:e3:dc -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIDAouYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDIwMjA4NDEwNloXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMUZFODMxMTAvBgNVBAUTKEIyOUU0NTMxMTY3NDVDODc0QkYwRjBC NDcyNDU5ODJBNzFENTI2QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD6wQOdg/9LbzTxrWvVqo4gQgu4vDDx3b74aNRXe+rzpgSgq7+jrxyQ0eb/dtls GbVTHkCmzdmxmK5MFp7+KfLOj6NXO0/SWEVxm2VGHuoWfnFXzKcFfAK/0x//o7Q3 k3osT/IIHWQBYFic4W67xHJJv9bPQkqyytmkBT5CZ9/+ygJWyJpCq4oVe28ncOJi 8ja6Ro53hc1OSovlt2oL1ajDuhGMcRgR7M4H4yMxrXspkc/V6gVg1WXE3aAwdqqO ToFfOIbzcsu04feAR+lu1WX88e27oRGgME10+YvGpfG5WozjoEv3cvC6GpG9clPS tHVKYd6L2G535OaugLL0ZmiVAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUsp5FMRZ0 XIdL8PC0ckWYKnHVJrUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFGRTgzL0U3RUIyNkIwMDAxMjExRjFBRkY0MEFDQjQwNkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExRkU4My9FN0VCMjZCMDAwMTIxMUYxQUZGNDBBQ0I0MDZGNTZCQy9zcDVGTVJa MFhJZEw4UEMwY2tXWUtuSFZKclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU MBIEAgABMAwDBAJnMCQDBAJxNOAwDQYJKoZIhvcNAQELBQADggEBAEl0x8sZYr+L +zXUhkdks9aO2XQy75BFiY6iGpq2PjcVtplk4fXKcv82DfAmDXycOzLtOeHJY0Pt Fcxau6HZ8p055mCG4mCGGbViFMOCABrC33GE7pI2mljry8BURL+DnsletFqGXtiY Uw1G2S4HQCGkrbEVszGRCCWm+IjARtm5tuaUCvc17eX7vnDQsUcmXiXSMI0GE+Pb OkOIp4NIcvGat/Bd3Q+/HczV2hsXuBZm18NBzvMpCirZ7tKqtdRpf6uUmANX4c3s Bvr8B4iEU+BDVvL6YZvjZhbnqs1C3Muu5/MLL1Fq6115UQ8I8qToD2O4t8sGtmWR tIM3RiZp49w= -----END CERTIFICATE-----Generated at Tue Feb 10 22:31:22 2026 by rpki-client