This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer File: 3UhfmiMRbUEQwHvThx70phTsTSw.cer (raw, json) Hash identifier: 9BBfrbTi7mloH93NfZ+ngePLqs+T8SUcvIB0tmxoIyE= Subject key identifier: DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02774A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 24 Nov 2025 04:10:46 +0000 Certificate not after: Mon 31 Aug 2026 00:00:00 +0000 Subordinate resources: IP: 203.12.115.0/24 IP: 203.34.104.0/24 IP: 2001:df0:da40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161610 (0x2774a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 24 04:10:46 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=A91331AA, serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:89:fa:b3:ac:77:07:fc:17:79:4c:e1:a3: a9:d5:c9:d8:81:4a:db:16:17:47:10:3d:86:20:9a: 4e:5e:00:dc:cf:a0:71:2c:5c:88:80:4a:3b:4e:03: ec:d2:8c:e5:6d:bc:c4:85:74:e4:7d:70:87:04:be: b3:55:6a:bc:0e:47:f2:fb:83:61:6d:83:43:96:56: 55:1d:8b:19:49:fa:1a:a7:45:36:de:83:40:f9:be: 30:28:67:d2:29:d0:0f:62:e2:95:d1:24:78:87:9c: 6d:83:5a:42:6a:db:08:90:64:0a:86:b9:9f:f4:1d: 81:57:29:42:b4:16:00:2a:1d:4e:62:d7:44:02:c4: a3:85:73:db:f0:cf:d5:01:27:86:4d:37:88:03:9f: ff:eb:9b:eb:e9:8c:98:ba:cd:ff:e4:1f:8c:ee:a5: 37:37:88:ac:17:ae:e1:e6:24:d9:82:9f:56:e1:cb: 10:e2:35:3f:79:9b:2a:49:89:aa:51:40:43:33:a5: 8e:df:e8:1d:43:fc:f1:8c:4f:18:08:b7:96:3f:7f: a1:12:f6:d3:85:d4:f3:37:65:be:ee:5a:30:22:a0: a8:25:55:b7:7b:e4:05:7b:7e:cd:96:7e:fc:f4:8f: db:6b:bb:b9:08:9b:9a:c7:ee:60:4a:3a:79:63:ca: 20:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.12.115.0/24 203.34.104.0/24 IPv6: 2001:df0:da40::/48 Signature Algorithm: sha256WithRSAEncryption 28:41:04:dd:18:5c:cf:ef:17:b3:61:16:c8:bc:d3:83:9a:4e: d1:83:68:9c:04:19:e4:17:1f:07:f4:88:d2:2b:6e:09:f1:fd: 63:8e:19:f3:1a:0d:9f:09:68:fa:87:c1:59:24:e6:59:0a:b7: f2:45:8d:6a:6d:3a:62:f4:23:71:6a:f9:ee:fb:0d:d6:bb:73: 0e:b6:f4:42:a6:cf:82:77:f5:59:12:96:80:7a:e5:cd:f4:b8: 13:c9:fd:25:53:07:5b:0a:06:dc:25:0b:de:20:b8:f5:aa:01: 0a:b4:40:31:cb:fa:22:c1:9c:08:63:b6:e3:55:7f:dc:79:11: 68:63:2e:35:85:70:41:4b:d2:cb:06:4d:8b:06:1a:3f:f3:30: bd:fc:73:8c:93:a9:90:99:d2:23:0d:f1:1b:27:61:24:e0:2a: 0a:b2:9a:ca:8a:ac:b0:c2:a2:b5:96:60:41:5a:42:bb:7b:1e: c9:8b:7b:e7:b2:f9:a7:62:d3:c0:fd:36:5e:e0:a1:0c:6f:f4: 7c:e6:46:28:83:63:d2:03:2f:49:92:0d:d1:d2:b4:fa:dd:0f: 7c:32:04:8b:87:3f:a2:3d:f8:aa:ba:c8:be:da:b2:99:08:ef: ae:83:cb:53:57:09:7a:65:a3:98:38:e8:b3:75:ce:14:da:9f: 54:54:5e:42 -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIDAndKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNDA0MTA0NloXDTI2MDgzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzMxQUExMTAvBgNVBAUTKERENDg1RjlBMjMxMTZENDExMEMwN0JE Mzg3MUVGNEE2MTRFQzREMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6hIn6s6x3B/wXeUzho6nVydiBStsWF0cQPYYgmk5eANzPoHEsXIiASjtOA+zS jOVtvMSFdOR9cIcEvrNVarwOR/L7g2Ftg0OWVlUdixlJ+hqnRTbeg0D5vjAoZ9Ip 0A9i4pXRJHiHnG2DWkJq2wiQZAqGuZ/0HYFXKUK0FgAqHU5i10QCxKOFc9vwz9UB J4ZNN4gDn//rm+vpjJi6zf/kH4zupTc3iKwXruHmJNmCn1bhyxDiNT95mypJiapR QEMzpY7f6B1D/PGMTxgIt5Y/f6ES9tOF1PM3Zb7uWjAioKglVbd75AV7fs2Wfvz0 j9tru7kIm5rH7mBKOnljyiDnAgMBAAGjggMKMIIDBjAdBgNVHQ4EFgQU3UhfmiMR bUEQwHvThx70phTsTSwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTMzMUFBLzhBRkJEQjYwQzhFQjExRjA4NjE4N0I4MEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzMzFBQS84QUZCREI2MEM4RUIxMUYwODYxODdCODBDNEY5QUUwMi8zVWhmbWlN UmJVRVF3SHZUaHg3MHBoVHNUU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8EJzAl MBIEAgABMAwDBADLDHMDBADLImgwDwQCAAIwCQMHACABDfDaQDANBgkqhkiG9w0B AQsFAAOCAQEAKEEE3Rhcz+8Xs2EWyLzTg5pO0YNonAQZ5BcfB/SI0ituCfH9Y44Z 8xoNnwlo+ofBWSTmWQq38kWNam06YvQjcWr57vsN1rtzDrb0QqbPgnf1WRKWgHrl zfS4E8n9JVMHWwoG3CUL3iC49aoBCrRAMcv6IsGcCGO241V/3HkRaGMuNYVwQUvS ywZNiwYaP/MwvfxzjJOpkJnSIw3xGydhJOAqCrKayoqssMKitZZgQVpCu3seyYt7 57L5p2LTwP02XuChDG/0fOZGKINj0gMvSZIN0dK0+t0PfDIEi4c/oj34qrrIvtqy mQjvroPLU1cJemWjmDjos3XOFNqfVFReQg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:15:08 2025 by rpki-client