This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.cer (raw, json) Hash identifier: jdR5Rpkk45Cc+Mpy7Fdca1SQQnK+bIGp9QEEbS1XdrI= Subject key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0272C3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 04 Nov 2025 03:38:24 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 134700 IP: 58.84.4.0/22 IP: 103.6.192.0/22 IP: 103.197.4.0/22 IP: 203.7.160.0/21 IP: 2001:df1:e080::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160451 (0x272c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 4 03:38:24 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:14:1f:ca:b8:a6:55:c2:a9:c4:a7:6a:79: 3e:a5:a6:e8:a2:f4:31:ac:77:09:df:0d:40:33:3a: 6d:48:97:5e:bd:bc:fd:34:5f:ff:8d:dc:0b:48:e7: 2e:70:4a:12:51:e6:94:fb:af:ef:db:3f:69:9a:5f: 9a:5e:4f:65:33:94:4a:39:1c:82:2a:00:4c:e1:66: 27:bf:17:2b:47:b9:f3:10:f5:63:86:cb:0d:fa:d1: b9:a6:df:14:5d:c8:14:b7:ca:ab:79:aa:41:d8:d7: 2e:77:f4:8f:6d:24:b1:04:9f:0d:f1:65:d3:58:8c: 8c:4b:e3:6d:74:e4:01:68:8f:fb:e6:6a:d2:0f:b3: f5:9b:2b:9f:c3:0f:ae:78:e2:0d:60:64:39:b3:6a: 11:2e:88:a1:d7:80:46:44:91:b2:9c:d4:74:a6:ac: 5c:cf:e9:00:ac:f3:79:8a:a2:2b:19:44:78:89:58: 09:d5:e3:cc:81:8a:5b:fd:97:63:60:b5:42:02:e0: c9:11:3e:33:c2:59:29:47:53:bd:41:4f:de:d3:3b: 77:d5:55:26:94:54:5c:eb:97:85:ed:d8:ca:57:dd: 5c:2d:e3:3a:03:79:7b:eb:9f:bc:22:b4:a1:ef:04: fa:80:5b:cd:5c:b0:a2:84:5b:49:a1:48:00:c9:d2: 01:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134700 sbgp-ipAddrBlock: critical IPv4: 58.84.4.0/22 103.6.192.0/22 103.197.4.0/22 203.7.160.0/21 IPv6: 2001:df1:e080::/48 Signature Algorithm: sha256WithRSAEncryption 4b:3e:9a:db:17:48:f9:95:7a:2c:0f:d2:ba:d6:7b:f7:4d:ac: 23:2f:05:c1:92:61:70:5e:ef:79:4c:a5:b9:41:59:ca:52:d4: a0:d7:59:30:98:e3:d4:d0:e8:fb:48:ac:b5:b3:85:c7:50:3a: c2:39:0e:f6:53:ea:5b:1f:d6:c0:de:77:ab:93:dd:d7:e5:0e: 0f:2b:9e:45:38:2c:59:bc:d2:69:d4:06:33:e1:77:d1:e1:5f: a8:de:53:ed:b1:fe:c6:16:4f:66:f6:de:d6:22:c2:c3:f4:03: 98:ff:e5:24:f1:76:42:70:9e:90:ad:d4:64:b4:3b:cc:16:66: e0:83:0c:25:98:6a:ba:90:df:40:85:22:ad:fc:2f:7f:28:3f: f3:2c:7c:58:6f:2e:af:ad:de:e2:84:a8:eb:7e:37:f0:2b:4c: 6f:d3:30:c4:18:c7:d9:bd:9d:bc:77:e3:de:c1:49:7d:40:0d: 37:0c:53:25:67:7c:15:70:3a:98:88:31:16:98:41:f2:fe:ed: 3f:a9:df:e7:2d:69:46:a5:6c:fc:7b:35:72:81:e4:31:86:31: 53:72:6a:11:b5:5e:32:2b:9c:45:f7:4e:ed:5e:6b:cc:bc:bf: fa:a4:26:d7:f6:08:27:dd:0b:48:61:9b:02:05:c4:97:60:c3: 9a:ef:ea:c1 -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgIDAnLDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNDAzMzgyNFoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0 QzZGMUNEMTNFNzNDMkYyMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7RxQfyrimVcKpxKdqeT6lpuii9DGsdwnfDUAzOm1Il169vP00X/+N3AtI5y5w ShJR5pT7r+/bP2maX5peT2UzlEo5HIIqAEzhZie/FytHufMQ9WOGyw360bmm3xRd yBS3yqt5qkHY1y539I9tJLEEnw3xZdNYjIxL42105AFoj/vmatIPs/WbK5/DD654 4g1gZDmzahEuiKHXgEZEkbKc1HSmrFzP6QCs83mKoisZRHiJWAnV48yBilv9l2Ng tUIC4MkRPjPCWSlHU71BT97TO3fVVSaUVFzrl4Xt2MpX3Vwt4zoDeXvrn7witKHv BPqAW81csKKEW0mhSADJ0gG5AgMBAAGjggMyMIIDLjAdBgNVHQ4EFgQU0Q5D4Fk9 7x241/RMbxzRPnPC8jAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTMyNURDLzQ2MTJENTFFNDMxNjExRUFCMjYyNzgxREM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzMjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZr OTd4MjQxX1JNYnh6UlBuUEM4akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg4sMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQCOlQEAwQCZwbA AwQCZ8UEAwQDywegMA8EAgACMAkDBwAgAQ3x4IAwDQYJKoZIhvcNAQELBQADggEB AEs+mtsXSPmVeiwP0rrWe/dNrCMvBcGSYXBe73lMpblBWcpS1KDXWTCY49TQ6PtI rLWzhcdQOsI5DvZT6lsf1sDed6uT3dflDg8rnkU4LFm80mnUBjPhd9HhX6jeU+2x /sYWT2b23tYiwsP0A5j/5STxdkJwnpCt1GS0O8wWZuCDDCWYarqQ30CFIq38L38o P/MsfFhvLq+t3uKEqOt+N/ArTG/TMMQYx9m9nbx3497BSX1ADTcMUyVnfBVwOpiI MRaYQfL+7T+p3+ctaUalbPx7NXKB5DGGMVNyahG1XjIrnEX3Tu1ea8y8v/qkJtf2 CCfdC0hhmwIFxJdgw5rv6sE= -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:46 2025 by rpki-client