This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/32d9hpNHe5Kh6f58IEImls6oYJ0.cer File: 32d9hpNHe5Kh6f58IEImls6oYJ0.cer (raw, json) Hash identifier: BvgslWVnpv9vikyxy2TE1N4hYwlN8x6N8MyF1henHXs= Subject key identifier: DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02744A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft caRepository: rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 10 Nov 2025 08:47:21 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 59322 AS: 59334 IP: 43.247.16.0/22 IP: 103.225.36.0/22 IP: 110.36.58.0/23 IP: 2001:df2:6800::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160842 (0x2744a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 10 08:47:21 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A918BDA2, serialNumber=DF677D8693477B92A1E9FE7C20422696CEA8609D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:fc:56:9f:36:7f:c8:15:0e:6c:4b:f0:64: 04:de:e7:1c:0d:4e:e4:75:79:b8:a5:3b:0b:4d:43: e1:e2:66:65:b1:0f:99:f1:76:0d:e5:78:13:6b:98: 83:29:98:c4:da:dd:cf:ed:9a:99:82:c9:e1:6c:ea: bb:81:72:6e:cf:04:b2:e8:57:d6:5f:e7:05:fc:46: 42:5f:e5:ac:d4:ed:b1:a7:3a:99:2b:01:35:3c:b3: 63:42:05:88:0d:14:27:74:8e:a0:ef:29:f8:b3:43: 2a:87:fa:a5:de:42:e5:d5:cd:61:38:c3:01:0e:af: 20:b3:9e:4a:b4:ba:6d:14:e6:28:51:cc:e7:dc:81: 9b:b7:85:2d:1d:7b:af:c2:3c:10:44:62:bd:78:0a: d0:67:8d:e7:a4:cc:fc:87:07:da:a7:af:fd:70:e9: 05:f9:18:6b:d3:2a:48:c6:f3:39:c7:32:05:b2:33: f4:48:c3:5e:12:b6:7c:c9:4a:f9:8b:f9:69:19:7e: c8:0b:8a:07:f8:d9:e1:0a:99:f0:9f:84:8e:2d:ed: 65:4d:87:66:df:06:bc:6c:e6:37:e9:3d:08:ac:a9: 0c:3a:f7:e2:56:90:c1:27:67:71:47:dc:eb:ab:a9: a8:c4:84:a5:73:9b:5b:fc:dd:a7:87:89:81:3e:c5: 98:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:67:7D:86:93:47:7B:92:A1:E9:FE:7C:20:42:26:96:CE:A8:60:9D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918BDA2/70E69C18D0EE11ECBC5C4973C4F9AE02/32d9hpNHe5Kh6f58IEImls6oYJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59322 59334 sbgp-ipAddrBlock: critical IPv4: 43.247.16.0/22 103.225.36.0/22 110.36.58.0/23 IPv6: 2001:df2:6800::/48 Signature Algorithm: sha256WithRSAEncryption 1b:bb:a9:39:67:47:2a:d2:08:f8:c0:6e:45:ab:ff:63:f8:b3: cb:1a:c9:b6:1c:58:46:41:1d:20:f6:46:aa:00:4e:12:57:5c: fb:17:7e:8f:45:20:1a:ef:40:b9:18:40:58:cd:0c:5b:8c:ca: 1f:ed:08:44:93:2b:14:f7:09:4b:86:82:47:7a:85:68:fd:05: 2a:f8:3f:b9:5f:54:f3:54:8c:4f:1b:da:32:ab:c3:50:85:cd: cd:2c:20:57:09:6c:44:d1:36:01:2d:fb:27:70:44:3b:cb:dd: 7c:22:e9:e0:4e:1a:23:50:40:72:38:11:f1:7d:6f:4b:bb:3f: c8:52:cc:19:71:3f:a3:05:91:dd:e0:17:91:f2:6d:23:a3:2a: 14:79:d6:97:78:d9:78:e5:12:76:00:81:f7:05:7d:51:ce:8a: e3:5b:a6:e7:f6:00:51:5d:8d:7c:fa:4d:0c:7e:cb:d1:88:f8: 9c:d1:b9:49:b7:15:7f:fb:d2:42:c6:86:1e:58:12:76:06:18: 05:14:d6:54:8d:6a:ec:79:68:0c:61:55:17:45:5b:a4:12:49: dc:bb:82:e6:29:e3:db:f5:70:7e:65:6a:a9:2f:0b:5c:db:29: 16:a6:2c:a9:93:be:0a:10:98:fb:5d:ee:be:cd:3a:73:b2:cd: e1:84:40:79 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIDAnRKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMDA4NDcyMVoXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOEJEQTIxMTAvBgNVBAUTKERGNjc3RDg2OTM0NzdCOTJBMUU5RkU3 QzIwNDIyNjk2Q0VBODYwOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIhvxWnzZ/yBUObEvwZATe5xwNTuR1ebilOwtNQ+HiZmWxD5nxdg3leBNrmIMp mMTa3c/tmpmCyeFs6ruBcm7PBLLoV9Zf5wX8RkJf5azU7bGnOpkrATU8s2NCBYgN FCd0jqDvKfizQyqH+qXeQuXVzWE4wwEOryCznkq0um0U5ihRzOfcgZu3hS0de6/C PBBEYr14CtBnjeekzPyHB9qnr/1w6QX5GGvTKkjG8znHMgWyM/RIw14StnzJSvmL +WkZfsgLigf42eEKmfCfhI4t7WVNh2bfBrxs5jfpPQisqQw69+JWkMEnZ3FH3Our qajEhKVzm1v83aeHiYE+xZgDAgMBAAGjggMxMIIDLTAdBgNVHQ4EFgQU32d9hpNH e5Kh6f58IEImls6oYJ0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThCREEyLzcwRTY5QzE4RDBFRTExRUNCQzVDNDk3M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4QkRBMi83MEU2OUMxOEQwRUUxMUVDQkM1QzQ5NzNDNEY5QUUwMi8zMmQ5aHBO SGU1S2g2ZjU4SUVJbWxzNm9ZSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAOe6AgMA58YwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBIDBAIr9xAD BAJn4SQDBAFuJDowDwQCAAIwCQMHACABDfJoADANBgkqhkiG9w0BAQsFAAOCAQEA G7upOWdHKtII+MBuRav/Y/izyxrJthxYRkEdIPZGqgBOEldc+xd+j0UgGu9AuRhA WM0MW4zKH+0IRJMrFPcJS4aCR3qFaP0FKvg/uV9U81SMTxvaMqvDUIXNzSwgVwls RNE2AS37J3BEO8vdfCLp4E4aI1BAcjgR8X1vS7s/yFLMGXE/owWR3eAXkfJtI6Mq FHnWl3jZeOUSdgCB9wV9Uc6K41um5/YAUV2NfPpNDH7L0Yj4nNG5SbcVf/vSQsaG HlgSdgYYBRTWVI1q7HloDGFVF0VbpBJJ3LuC5inj2/VwfmVqqS8LXNspFqYsqZO+ ChCY+13uvs06c7LN4YRAeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:29 2025 by rpki-client