This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer File: 2K83cS1WsbaT720D40bADPPwST4.cer (raw, json) Hash identifier: cfgMAPB/LCw5+8x9blyOaXpD9rTQElDVT9uODU8WysI= Subject key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A4E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 23:33:10 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 134739 AS: 139704 AS: 149855 IP: 103.139.100.0/23 IP: 103.200.132.0/22 IP: 121.54.164.0/22 IP: 2403:8e80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162382 (0x27a4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 23:33:10 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:de:4c:4b:e6:3c:d1:2e:38:9e:44:0f:46: 17:19:32:3f:68:b2:29:67:fc:22:31:13:b0:92:4d: 17:ec:77:8e:0c:32:d0:be:44:fd:1d:95:67:4e:ac: 65:87:4f:e1:2a:36:ab:9a:01:67:3d:32:45:14:78: cb:a7:27:22:57:d9:2b:f6:58:d0:ea:ee:1b:bd:b1: 7e:8e:15:ee:cd:fc:0d:76:53:a9:0b:3c:54:16:98: cd:61:51:d0:fb:77:c4:20:5c:2a:30:b2:60:eb:c0: f8:bb:e0:cc:91:e5:d2:b4:df:62:70:69:23:34:87: 67:2b:00:4d:57:1c:51:95:b2:72:ae:4a:3d:04:cb: 7e:f2:b6:0a:23:da:c6:b0:29:2c:f1:b2:db:80:3b: a8:f3:6b:04:18:5c:a9:5f:45:69:58:f0:f7:48:7a: dd:e0:c9:e0:e1:76:60:66:f1:fb:c6:9c:22:84:f6: d6:b7:d5:29:42:b2:d7:13:9f:36:39:a6:c6:d2:b0: 20:c4:c0:33:92:78:f7:dc:59:3f:17:9a:be:75:a6: 7d:2c:8f:58:db:44:a2:81:b5:8a:86:80:a8:d5:67: 19:c7:b0:47:b6:20:e0:03:df:20:84:53:0b:1d:a6: 41:4a:58:a9:3c:eb:e3:b5:8e:69:c0:c8:8d:0c:c4: 52:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134739 139704 149855 sbgp-ipAddrBlock: critical IPv4: 103.139.100.0/23 103.200.132.0/22 121.54.164.0/22 IPv6: 2403:8e80::/32 Signature Algorithm: sha256WithRSAEncryption 55:ea:ae:bc:fe:ee:ca:61:b3:c0:2e:27:ed:cf:2a:d7:b8:2e: b8:f2:03:9b:90:70:e2:2e:4d:67:cf:0f:2e:79:08:da:e8:26: 58:05:83:07:2a:b5:40:7f:bb:1f:09:e2:d8:89:76:26:8a:96: 24:5f:52:d3:f0:1c:97:09:c3:10:54:b1:01:20:33:a9:a3:ea: 65:87:0a:da:38:96:45:1c:07:7d:45:44:b0:ba:44:83:92:29: fb:9c:67:ae:1d:44:da:d2:9a:85:56:28:e2:cb:6e:28:f2:bb: 32:ca:20:55:56:24:6d:da:8c:2b:c2:48:d3:1a:79:f3:68:2b: d5:16:5b:05:9a:75:b8:95:bb:fa:30:c4:5b:3d:88:c0:85:d0: 13:02:76:59:26:50:d9:76:15:30:4b:bd:fc:5d:b9:ed:aa:d5: 81:05:4a:3d:f7:0d:2c:2a:da:bb:7b:5d:62:0c:d9:86:cb:98: a8:b9:f4:17:54:77:fe:ea:6f:97:e8:ec:0c:0e:87:fe:7b:20: f6:97:5f:e3:88:62:4f:dc:17:df:19:79:00:51:a7:a8:2e:25: d7:ca:dc:4c:db:24:69:d7:63:f0:a9:71:cb:7f:eb:4b:48:ea: b9:ec:f6:12:42:95:82:01:14:b9:9b:12:fc:e6:43:81:cb:7e: 7a:aa:fa:fa -----BEGIN CERTIFICATE----- MIIGPzCCBSegAwIBAgIDAnpOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTIzMzMxMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQTg2RDAxMTAvBgNVBAUTKEQ4QUYzNzcxMkQ1NkIxQjY5M0VGNkQw M0UzNDZDMDBDRjNGMDQ5M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2W95MS+Y80S44nkQPRhcZMj9osiln/CIxE7CSTRfsd44MMtC+RP0dlWdOrGWH T+EqNquaAWc9MkUUeMunJyJX2Sv2WNDq7hu9sX6OFe7N/A12U6kLPFQWmM1hUdD7 d8QgXCowsmDrwPi74MyR5dK032JwaSM0h2crAE1XHFGVsnKuSj0Ey37ytgoj2saw KSzxstuAO6jzawQYXKlfRWlY8PdIet3gyeDhdmBm8fvGnCKE9ta31SlCstcTnzY5 psbSsCDEwDOSePfcWT8Xmr51pn0sj1jbRKKBtYqGgKjVZxnHsEe2IOAD3yCEUwsd pkFKWKk86+O1jmnAyI0MxFIxAgMBAAGjggM0MIIDMDAdBgNVHQ4EFgQU2K83cS1W sbaT720D40bADPPwST4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE4NkQwL0ZBNzhCMDQ0NkZDRTExRTk4OEM0NEIzRUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBODZEMC9GQTc4QjA0NDZGQ0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1Mx V3NiYVQ3MjBENDBiQURQUHdTVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAg5TAgMCIbgCAwJJXzA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgME AWeLZAMEAmfIhAMEAnk2pDANBAIAAjAHAwUAJAOOgDANBgkqhkiG9w0BAQsFAAOC AQEAVequvP7uymGzwC4n7c8q17guuPIDm5Bw4i5NZ88PLnkI2ugmWAWDByq1QH+7 Hwni2Il2JoqWJF9S0/AclwnDEFSxASAzqaPqZYcK2jiWRRwHfUVEsLpEg5Ip+5xn rh1E2tKahVYo4stuKPK7MsogVVYkbdqMK8JI0xp582gr1RZbBZp1uJW7+jDEWz2I wIXQEwJ2WSZQ2XYVMEu9/F257arVgQVKPfcNLCrau3tdYgzZhsuYqLn0F1R3/upv l+jsDA6H/nsg9pdf44hiT9wX3xl5AFGnqC4l18rcTNskaddj8Klxy3/rS0jquez2 EkKVggEUuZsS/OZDgct+eqr6+g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:03 2025 by rpki-client