This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer File: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer (raw, json) Hash identifier: BPG69IvuJLJkz/5u4oRbX2aIBEni06U+152E8CWYekI= Subject key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C5E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft caRepository: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 19:07:17 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 103.95.77.0 -- 103.95.79.255 IP: 202.176.15.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162910 (0x27c5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 5 19:07:17 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91AEAE7, serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:ec:71:97:3b:70:a6:04:8f:a7:7b:cd:f2: 15:f1:15:92:c7:1d:08:13:89:71:b3:51:7d:77:cc: 66:7e:2f:4a:b2:8c:63:97:83:63:43:0c:98:5e:79: 13:f9:b0:27:61:9e:8c:a9:5a:37:17:5b:c5:ed:25: 8a:3b:30:32:42:c0:a1:73:4e:35:f5:f6:e3:60:5c: 23:4d:71:db:2c:4d:43:66:41:5c:58:f1:b7:8a:a4: 7e:16:a9:07:b9:99:bc:eb:a2:bf:02:b6:ff:41:18: 1d:a4:9f:bf:89:5d:1e:13:4f:e8:8f:a9:a2:af:9f: a3:1d:a8:30:ab:b0:ad:ce:83:fe:a3:2e:c5:35:c9: 89:0f:38:3e:65:b8:fa:b8:73:a0:cc:12:c2:0f:6c: d1:75:c3:e2:40:e3:54:f5:22:5e:00:75:1f:fc:bc: 46:5f:9c:e7:c0:ae:85:ba:85:b3:da:da:10:e9:c1: a7:ff:f6:9f:fc:43:75:07:51:53:bd:65:d6:70:67: 38:34:10:14:4a:61:27:b1:da:3c:b9:a4:b4:c9:f2: f3:00:7a:b2:9e:f8:fe:b3:a1:21:24:42:1f:6c:5a: 89:54:d1:d1:47:3b:45:d4:e2:5e:6e:a3:9f:d4:fe: df:6c:02:74:c7:74:02:52:d8:87:6e:58:3e:08:3c: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.95.77.0-103.95.79.255 202.176.15.0/24 Signature Algorithm: sha256WithRSAEncryption a6:11:4e:5f:17:d0:0a:ac:2b:3e:00:da:06:b8:55:b0:d4:23: cb:60:a2:31:22:11:4e:79:e2:f3:31:8a:7f:db:fb:02:bd:dd: c6:8a:27:40:ba:b1:46:2c:f0:62:f1:6a:2c:3b:18:ce:e5:ad: 1b:c5:34:91:57:ab:ff:67:84:a1:e2:09:60:ed:5f:73:19:6c: bf:fc:26:6e:d7:9a:98:d6:72:30:7d:38:a0:0c:e8:d8:be:ee: 86:da:30:8f:39:05:9f:d3:33:84:24:a0:19:87:af:e2:7c:9c: 0f:3f:1b:e1:a4:c7:90:8d:c5:f0:5f:12:68:ac:97:03:35:31: 48:72:51:68:9e:52:7a:03:b1:2a:0c:0f:db:bc:8b:82:45:44: 60:f4:5b:9a:a6:e0:71:7f:e8:f5:a5:8c:72:33:d6:cd:c0:8e: 8f:09:fa:ae:27:8f:e8:9f:ef:24:3c:f9:66:47:05:57:9d:90: 96:12:d7:d7:a5:ea:52:83:9e:c3:ef:73:d4:13:b7:f5:86:bb: 8c:cf:ea:46:c9:5b:1f:b8:dc:25:d9:d0:8d:8e:79:ed:36:58: ff:5b:fd:1e:31:ab:76:4e:89:aa:8b:74:c1:00:0a:63:69:0b: f0:4d:f9:df:d7:9c:bd:15:c2:02:02:58:9d:48:12:2b:ca:68: c8:5e:47:7c -----BEGIN CERTIFICATE----- MIIGDDCCBPSgAwIBAgIDAnxeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNTE5MDcxN1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQUVBRTcxMTAvBgNVBAUTKERBQkZCM0I1OUY3RDcxNkZENTJENDVB NzQxQUYxNTlBRjdFQUY3QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAo+xxlztwpgSPp3vN8hXxFZLHHQgTiXGzUX13zGZ+L0qyjGOXg2NDDJheeRP5 sCdhnoypWjcXW8XtJYo7MDJCwKFzTjX19uNgXCNNcdssTUNmQVxY8beKpH4WqQe5 mbzror8Ctv9BGB2kn7+JXR4TT+iPqaKvn6MdqDCrsK3Og/6jLsU1yYkPOD5luPq4 c6DMEsIPbNF1w+JA41T1Il4AdR/8vEZfnOfAroW6hbPa2hDpwaf/9p/8Q3UHUVO9 ZdZwZzg0EBRKYSex2jy5pLTJ8vMAerKe+P6zoSEkQh9sWolU0dFHO0XU4l5uo5/U /t9sAnTHdAJS2IduWD4IPDuhAgMBAAGjggMBMIIC/TAdBgNVHQ4EFgQU2r+ztZ99 cW/VLUWnQa8Vmvfq97owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFFQUU3L0UxODI1Nzk2OTBGMzExRUI5RDJFMEU0RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBRUFFNy9FMTgyNTc5NjkwRjMxMUVCOUQyRTBFNEZDNEY5QUUwMi8yci16dFo5 OWNXX1ZMVVduUWE4Vm12ZnE5N28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8EHjAc MBoEAgABMBQwDAMEAGdfTQMEBGdfQAMEAMqwDzANBgkqhkiG9w0BAQsFAAOCAQEA phFOXxfQCqwrPgDaBrhVsNQjy2CiMSIRTnni8zGKf9v7Ar3dxoonQLqxRizwYvFq LDsYzuWtG8U0kVer/2eEoeIJYO1fcxlsv/wmbteamNZyMH04oAzo2L7uhtowjzkF n9MzhCSgGYev4nycDz8b4aTHkI3F8F8SaKyXAzUxSHJRaJ5SegOxKgwP27yLgkVE YPRbmqbgcX/o9aWMcjPWzcCOjwn6rieP6J/vJDz5ZkcFV52QlhLX16XqUoOew+9z 1BO39Ya7jM/qRslbH7jcJdnQjY557TZY/1v9HjGrdk6Jqot0wQAKY2kL8E3539ec vRXCAgJYnUgSK8poyF5HfA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:02 2025 by rpki-client