This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9DuaJTOj1bPawcKsT-YFp39QR8.cer File: w9DuaJTOj1bPawcKsT-YFp39QR8.cer (raw, json) Hash identifier: UGMYfgiO+VkZi3vn7hXteg54xNL7CvmflJXEx+gF0Z8= Subject key identifier: C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0289E1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft caRepository: rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 30 Jan 2026 06:01:27 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 36.255.236.0/22 IP: 103.19.116.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Feb 2026 19:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166369 (0x289e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 30 06:01:27 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A912380D, serialNumber=C3D0EE6894CE8F56CF6B070AB13F98169DFD411F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:29:8e:15:46:95:b3:a3:ac:a0:7c:f4:5b:d3: 62:1f:39:f2:9b:4a:fe:bb:86:99:8d:e5:7c:da:ab: 5b:60:74:22:5c:e0:85:cd:56:54:89:8a:74:10:05: 9b:3e:e3:6c:98:98:5b:eb:96:e9:63:7d:29:7d:96: 58:2c:eb:84:33:9a:d9:41:65:d4:6c:28:b4:08:1b: ed:af:e7:e7:41:24:52:6f:e2:73:94:0e:8d:f9:24: 1e:d7:a5:ec:40:7d:0b:30:4c:74:ea:a2:f3:64:b2: 07:95:83:d3:6d:0d:4e:de:dc:4c:24:28:1a:da:83: f7:e0:0d:ab:86:f0:25:68:fd:88:bb:f4:5f:10:4e: c0:9b:e1:70:2c:ed:70:d5:da:06:7e:8f:eb:e2:01: 9c:bc:73:78:0e:23:69:b0:26:32:76:d3:17:1d:3d: 3c:0f:21:85:61:da:07:8b:5c:38:09:06:02:13:db: 75:7e:92:35:4a:b7:81:a0:5f:73:57:3f:71:ab:b1: 45:2e:89:c3:4d:92:26:69:bb:6b:93:aa:66:c8:d7: 78:5e:a1:86:9d:db:5c:32:b2:f0:5b:24:f2:fb:c1: ec:31:83:00:83:39:7f:01:35:3e:35:b8:87:23:24: be:5d:e4:f3:f8:5c:fc:b8:f3:2a:cd:d6:97:9c:0a: 9f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D0:EE:68:94:CE:8F:56:CF:6B:07:0A:B1:3F:98:16:9D:FD:41:1F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912380D/1B06C44CFDA111F098D746AC5F6F56BC/w9DuaJTOj1bPawcKsT-YFp39QR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.236.0/22 103.19.116.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:3b:60:fd:88:1e:6d:e3:52:08:a7:37:d3:d1:b9:b2:bf:89: a9:05:c9:04:f2:13:5f:cf:35:b2:85:5b:89:db:d3:84:eb:7d: 6d:17:5e:2b:9c:b5:6e:1e:a3:7b:4b:a2:de:f2:a2:e8:46:1b: 1e:74:47:35:10:7c:99:53:af:78:82:e2:57:ff:08:81:2e:20: 62:bb:48:a5:ea:60:82:28:28:f4:00:d1:1e:16:d5:97:2f:f3: 3e:e2:d4:7a:32:ee:19:1b:6e:59:f6:49:d0:ae:ff:c8:04:d8: eb:be:8f:d2:dd:81:e7:c9:5d:7f:fb:87:60:80:d6:27:44:52: dc:b0:cc:cd:15:f5:a7:fe:4b:66:ce:8b:ae:c3:20:53:ae:26: 92:bb:72:78:ac:b2:37:7b:73:56:dc:80:3b:18:83:08:06:86: 51:bc:78:1b:3e:e4:46:3e:e7:d1:78:d4:a3:90:cf:42:3d:27: 5c:ec:9d:16:b7:74:7f:6d:52:a6:8f:f5:cd:9c:fd:4b:75:c0: 8a:2d:fe:85:af:3c:5e:05:82:78:03:a6:77:ee:bc:51:ef:15: f2:c2:23:5f:e4:b7:a7:5e:a0:28:35:fd:c4:0b:99:cb:62:da: 23:95:3d:de:8c:38:f6:53:3f:b5:0c:88:7c:3c:59:a4:8e:25: e0:20:01:e3 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIDAonhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEzMDA2MDEyN1oXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMjM4MEQxMTAvBgNVBAUTKEMzRDBFRTY4OTRDRThGNTZDRjZCMDcw QUIxM0Y5ODE2OURGRDQxMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMKY4VRpWzo6ygfPRb02IfOfKbSv67hpmN5Xzaq1tgdCJc4IXNVlSJinQQBZs+ 42yYmFvrluljfSl9llgs64QzmtlBZdRsKLQIG+2v5+dBJFJv4nOUDo35JB7XpexA fQswTHTqovNksgeVg9NtDU7e3EwkKBrag/fgDauG8CVo/Yi79F8QTsCb4XAs7XDV 2gZ+j+viAZy8c3gOI2mwJjJ20xcdPTwPIYVh2geLXDgJBgIT23V+kjVKt4GgX3NX P3GrsUUuicNNkiZpu2uTqmbI13heoYad21wysvBbJPL7wewxgwCDOX8BNT41uIcj JL5d5PP4XPy48yrN1pecCp+zAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUw9DuaJTO j1bPawcKsT+YFp39QR8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTIzODBELzFCMDZDNDRDRkRBMTExRjA5OEQ3NDZBQzVGNkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyMzgwRC8xQjA2QzQ0Q0ZEQTExMUYwOThENzQ2QUM1RjZGNTZCQy93OUR1YUpU T2oxYlBhd2NLc1QtWUZwMzlRUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU MBIEAgABMAwDBAIk/+wDBAJnE3QwDQYJKoZIhvcNAQELBQADggEBADs7YP2IHm3j UginN9PRubK/iakFyQTyE1/PNbKFW4nb04TrfW0XXiuctW4eo3tLot7youhGGx50 RzUQfJlTr3iC4lf/CIEuIGK7SKXqYIIoKPQA0R4W1Zcv8z7i1Hoy7hkbbln2SdCu /8gE2Ou+j9LdgefJXX/7h2CA1idEUtywzM0V9af+S2bOi67DIFOuJpK7cnissjd7 c1bcgDsYgwgGhlG8eBs+5EY+59F41KOQz0I9J1zsnRa3dH9tUqaP9c2c/Ut1wIot /oWvPF4FgngDpnfuvFHvFfLCI1/kt6deoCg1/cQLmcti2iOVPd6MOPZTP7UMiHw8 WaSOJeAgAeM= -----END CERTIFICATE-----Generated at Tue Feb 10 22:31:57 2026 by rpki-client