This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer File: -0cfhBMIntcBvatArmPHiPUmq28.cer (raw, json) Hash identifier: iWqqHQp3aDmOb+ynXfXjD3c8PSUfzuFxH9L+QmcipV4= Subject key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0278DA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft caRepository: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 20:39:25 +0000 Certificate not after: Sat 31 Oct 2026 00:00:00 +0000 Subordinate resources: AS: 10131 IP: 202.65.32.0/19 IP: 2407:5800::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162010 (0x278da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 27 20:39:25 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:de:af:40:c7:c5:9c:06:c8:8a:a9:d0:62:7f: 13:df:0d:e8:eb:21:dc:35:5f:54:4f:d1:bd:49:a3: f6:6a:e8:e4:f0:38:af:09:ec:2c:b3:96:bf:38:f0: ff:2a:9b:f9:76:84:9f:24:45:dd:51:ac:92:4e:c3: 28:22:9e:ec:b6:d5:55:03:4e:4a:e1:41:d1:c7:6f: a7:ad:03:87:17:41:b7:5e:bc:38:75:fc:4b:81:4b: 56:e3:c7:17:ce:bf:e1:e9:c7:2b:57:68:0a:05:4e: 32:a2:e2:da:fa:4b:98:73:d1:b2:ec:44:34:80:ad: 9e:fd:77:fd:97:a9:c9:0e:0a:c0:e4:fc:f7:05:ae: 6b:c3:6c:c6:5b:a6:26:94:d0:4c:f0:e3:ed:96:29: 94:56:18:b7:d0:9f:47:94:7e:18:17:2b:88:6d:21: 5b:5b:e9:5d:74:57:71:87:40:44:94:a7:e0:30:01: f4:b2:a4:00:a7:df:28:82:ef:a2:64:09:be:66:f4: 53:b5:6a:ab:a5:ff:e1:90:ac:b8:d9:ab:ac:c8:3e: 39:02:7e:f4:a9:18:88:78:94:39:ac:06:32:71:7b: cc:3a:34:1f:20:62:2a:44:7f:66:c3:50:a3:80:4e: b0:de:ed:00:e9:e0:62:29:18:f0:2c:70:57:33:0f: 3b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 10131 sbgp-ipAddrBlock: critical IPv4: 202.65.32.0/19 IPv6: 2407:5800::/32 Signature Algorithm: sha256WithRSAEncryption 7f:19:97:a5:e3:ab:c0:2d:10:01:88:f0:c6:e8:b7:77:f3:94: 33:32:bb:fa:b8:07:5d:79:d7:81:cb:a9:b8:e2:8f:92:9e:13: 1d:11:82:a6:96:53:7e:b6:52:9d:63:2d:e3:f8:22:8d:42:f7: f9:c3:7d:2c:d6:e6:0d:8a:d1:0f:0f:45:ab:32:31:09:79:55: 51:80:a3:ef:6c:47:af:e7:c9:1f:b0:f6:78:7b:9c:11:3b:ae: 96:c7:59:c1:34:a2:f6:c1:bf:b6:8f:64:60:a1:35:41:4e:a7: 87:1b:45:3f:d3:f7:a3:02:28:de:bc:32:2b:e7:61:77:b0:44: d8:fc:f3:35:22:84:c3:93:dd:3a:c6:f8:b7:f9:ed:37:82:75: 29:cd:47:6f:37:f9:50:9a:c8:e3:0a:09:db:57:b6:f5:a3:ce: b2:fa:02:9e:8b:28:c9:29:6e:7b:43:2b:de:be:62:c1:21:57: 78:f7:94:cf:d9:39:fa:c6:05:75:18:53:ba:2a:00:84:19:da: 56:59:6c:6a:7f:8a:ad:35:e7:b4:7c:44:d2:42:61:4b:dc:2f: 08:4b:2e:13:48:23:5d:b2:d7:1c:b8:dd:69:ad:54:6a:2e:51: 22:12:ef:20:61:76:6a:59:9e:c1:43:f9:16:fa:0e:89:68:e7: a3:d3:43:73 -----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgIDAnjaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNzIwMzkyNVoXDTI2MTAzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzAwREYxMTAvBgNVBAUTKEZCNDcxRjg0MTMwODlFRDcwMUJEQUI0 MEFFNjNDNzg4RjUyNkFCNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD13q9Ax8WcBsiKqdBifxPfDejrIdw1X1RP0b1Jo/Zq6OTwOK8J7Cyzlr848P8q m/l2hJ8kRd1RrJJOwyginuy21VUDTkrhQdHHb6etA4cXQbdevDh1/EuBS1bjxxfO v+HpxytXaAoFTjKi4tr6S5hz0bLsRDSArZ79d/2XqckOCsDk/PcFrmvDbMZbpiaU 0Ezw4+2WKZRWGLfQn0eUfhgXK4htIVtb6V10V3GHQESUp+AwAfSypACn3yiC76Jk Cb5m9FO1aqul/+GQrLjZq6zIPjkCfvSpGIh4lDmsBjJxe8w6NB8gYipEf2bDUKOA TrDe7QDp4GIpGPAscFczDztxAgMBAAGjggMdMIIDGTAdBgNVHQ4EFgQU+0cfhBMI ntcBvatArmPHiPUmq28wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTMwMERGLzI3Nzc4RjM4Q0JEMTExRjBBNzZGRkQyNkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzMDBERi8yNzc3OEYzOENCRDExMUYwQTc2RkZEMjZDNEY5QUUwMi8tMGNmaEJN SW50Y0J2YXRBcm1QSGlQVW1xMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICJ5MwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAXKQSAwDQQCAAIw BwMFACQHWAAwDQYJKoZIhvcNAQELBQADggEBAH8Zl6Xjq8AtEAGI8Mbot3fzlDMy u/q4B11514HLqbjij5KeEx0RgqaWU362Up1jLeP4Io1C9/nDfSzW5g2K0Q8PRasy MQl5VVGAo+9sR6/nyR+w9nh7nBE7rpbHWcE0ovbBv7aPZGChNUFOp4cbRT/T96MC KN68MivnYXewRNj88zUihMOT3TrG+Lf57TeCdSnNR283+VCayOMKCdtXtvWjzrL6 Ap6LKMkpbntDK96+YsEhV3j3lM/ZOfrGBXUYU7oqAIQZ2lZZbGp/iq0157R8RNJC YUvcLwhLLhNII12y1xy43WmtVGouUSIS7yBhdmpZnsFD+Rb6Dolo56PTQ3M= -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:53 2025 by rpki-client