This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer File: 2TXs95kTG-wkONqd6CtoWJY8cFw.cer (raw, json) Hash identifier: caDzh/MQBWj5MoSQR/D64Rqt1l3WNpy1tsI3fW7U3hI= Subject key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02789B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 09:11:11 +0000 Certificate not after: Wed 30 Sep 2026 00:00:00 +0000 Subordinate resources: AS: 38460 AS: 131460 IP: 103.4.156.0/22 IP: 123.242.200.0/21 IP: 2001:df0:237::/48 IP: 2001:df0:2fb::/48 IP: 2404:a7c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161947 (0x2789b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 27 09:11:11 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:69:ea:6d:da:7c:6a:3c:d2:f0:e1:2a:09:f7: 13:5e:d4:54:83:3d:48:64:99:6f:4d:78:23:e6:61: d0:7c:be:ea:d7:bc:f3:22:51:b2:e2:59:45:ac:05: 71:e5:89:a2:dc:9a:70:b0:7f:a6:23:ab:99:9c:59: 51:76:0e:2e:50:4d:9b:60:a6:41:f2:0c:93:70:e8: 94:f7:b7:37:dc:f7:d7:95:4d:8c:21:0e:5c:2a:66: ee:79:56:ff:17:26:6b:d3:bf:eb:ec:55:22:e5:cd: 68:0b:db:a3:2c:e2:52:77:29:5e:c1:a2:16:d7:91: b8:74:85:4d:62:d4:1b:fb:83:4c:5e:32:24:57:b6: 95:1f:0d:34:2c:6a:0a:fa:f4:ae:b1:5d:a3:c7:6c: 53:42:0a:dc:86:22:88:ed:27:50:07:b9:95:70:91: e5:93:20:99:3c:bf:08:74:56:34:93:3a:fa:e5:eb: 19:26:dd:d4:a5:43:ab:db:d4:3e:bd:09:f1:92:21: b1:f6:f5:6b:64:c5:06:4a:95:8c:f4:7d:af:81:d1: 62:ae:d4:41:8f:56:33:b0:7b:23:6c:06:41:27:ec: f6:a5:91:c5:c0:8b:38:d4:30:36:9b:0a:82:2d:c3: e6:4b:b6:ad:af:d9:af:ae:2e:0e:cc:02:a6:03:89: 44:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38460 131460 sbgp-ipAddrBlock: critical IPv4: 103.4.156.0/22 123.242.200.0/21 IPv6: 2001:df0:237::/48 2001:df0:2fb::/48 2404:a7c0::/32 Signature Algorithm: sha256WithRSAEncryption 9f:1f:96:ef:54:b9:ca:2e:60:f9:e3:93:cc:53:6b:f2:ca:2c: ae:fc:45:ee:1c:9d:89:cf:e6:eb:65:85:3f:a8:43:ce:92:ac: 5b:f7:b3:ea:ae:6b:72:38:e8:fb:d7:fc:61:58:eb:35:4e:18: e0:16:c5:b3:22:4d:8a:44:11:c3:4b:1f:ea:93:d0:f6:31:87: 98:21:99:48:4a:3c:0d:25:21:bf:6f:12:d8:9d:b1:fb:da:e3: df:83:16:3e:5b:d0:e3:9a:e8:5b:ff:de:aa:40:4e:5b:3a:2b: ea:e9:ce:ac:13:3b:d8:14:e3:ee:c3:05:48:d9:c7:ef:65:ad: de:48:b8:36:b7:58:c0:14:1e:8b:4b:c0:49:01:17:1e:0c:a7: 74:d0:03:f1:36:2d:31:fb:e6:ba:24:4c:db:3f:f3:e3:a3:a3: 0f:91:ca:13:cc:22:40:90:17:c7:8b:2a:52:de:d0:49:4e:d2: b7:1b:13:02:b4:7d:1c:1f:d8:24:41:b1:93:ec:98:08:fa:6e: 83:93:9e:6c:70:8c:2f:65:f6:28:ec:53:74:7a:40:4c:e0:9d: f2:27:2c:32:0b:27:1c:70:fa:a6:9a:15:da:dc:0f:4c:2f:83: 1a:ff:f9:25:cf:1d:1a:3a:3e:f8:08:60:b1:d3:a9:12:47:77: 51:f3:04:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIDAnibMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNzA5MTExMVoXDTI2MDkzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTQ3RTQxMTAvBgNVBAUTKEQ5MzVFQ0Y3OTkxMzFCRUMyNDM4REE5 REU4MkI2ODU4OTYzQzcwNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcaept2nxqPNLw4SoJ9xNe1FSDPUhkmW9NeCPmYdB8vurXvPMiUbLiWUWsBXHl iaLcmnCwf6Yjq5mcWVF2Di5QTZtgpkHyDJNw6JT3tzfc99eVTYwhDlwqZu55Vv8X JmvTv+vsVSLlzWgL26Ms4lJ3KV7BohbXkbh0hU1i1Bv7g0xeMiRXtpUfDTQsagr6 9K6xXaPHbFNCCtyGIojtJ1AHuZVwkeWTIJk8vwh0VjSTOvrl6xkm3dSlQ6vb1D69 CfGSIbH29WtkxQZKlYz0fa+B0WKu1EGPVjOweyNsBkEn7PalkcXAizjUMDabCoIt w+ZLtq2v2a+uLg7MAqYDiURrAgMBAAGjggM7MIIDNzAdBgNVHQ4EFgQU2TXs95kT G+wkONqd6CtoWJY8cFwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU0N0U0LzAyMzJFNTQ4Q0I3MTExRjBBNUFERUQyMkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1NDdFNC8wMjMyRTU0OENCNzExMUYwQTVBREVEMjJDNEY5QUUwMi8yVFhzOTVr VEctd2tPTnFkNkN0b1dKWThjRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAJY8AgMCAYQwRgYIKwYBBQUHAQcBAf8ENzA1MBIEAgABMAwDBAJnBJwD BAN78sgwHwQCAAIwGQMHACABDfACNwMHACABDfAC+wMFACQEp8AwDQYJKoZIhvcN AQELBQADggEBAJ8flu9UucouYPnjk8xTa/LKLK78Re4cnYnP5utlhT+oQ86SrFv3 s+qua3I46PvX/GFY6zVOGOAWxbMiTYpEEcNLH+qT0PYxh5ghmUhKPA0lIb9vEtid sfva49+DFj5b0OOa6Fv/3qpATls6K+rpzqwTO9gU4+7DBUjZx+9lrd5IuDa3WMAU HotLwEkBFx4Mp3TQA/E2LTH75rokTNs/8+Ojow+RyhPMIkCQF8eLKlLe0ElO0rcb EwK0fRwf2CRBsZPsmAj6boOTnmxwjC9l9ijsU3R6QEzgnfInLDILJxxw+qaaFdrc D0wvgxr/+SXPHRo6PvgIYLHTqRJHd1HzBMI= -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:51 2025 by rpki-client