This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer File: 526yVsD8sH4pB5eDQ-mtndIf4gY.cer (raw, json) Hash identifier: SIUi8eUa073vrNcQHFFAK6Kbu+N5WGBlZjPlbBehn+o= Subject key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02748A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft caRepository: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 11 Nov 2025 14:07:50 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 38616 AS: 38710 AS: 55414 IP: 103.246.108.0/22 IP: 111.88.0.0/17 IP: 111.88.132.0/23 IP: 111.88.136.0/22 IP: 111.88.160.0 -- 111.88.171.255 IP: 111.88.184.0/21 IP: 111.88.212.0 -- 111.88.239.255 IP: 115.186.0.0/17 IP: 117.102.0.0/18 IP: 203.81.224.0/20 IP: 2406:7000::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160906 (0x2748a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 11 14:07:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:c3:78:7c:1c:62:55:e2:dc:96:33:ef:d3: ef:37:71:9f:7b:68:89:bb:f0:35:40:a8:1b:3c:6b: e9:ce:69:bd:57:a3:35:40:b1:af:bd:74:c0:a1:e9: 8b:13:d8:e2:f8:28:12:94:a4:54:c3:5a:7a:7d:ae: 12:79:c7:94:ee:d7:58:41:60:1a:60:36:bf:a5:0d: e3:2c:e5:99:6a:17:36:28:a6:d9:db:b1:83:fc:0d: 90:6c:ac:5f:e7:b5:a3:35:10:ab:f8:2f:a2:14:df: 71:d2:a6:7c:96:6e:40:04:c9:69:78:e1:07:61:14: f0:14:b0:d6:8d:33:6a:46:0e:4b:03:3f:95:ff:45: c0:dc:9c:5b:0b:d6:18:0c:ee:d9:fc:5f:12:40:f9: 45:5c:46:8e:7a:a8:3a:5c:4b:66:da:3f:ae:e8:0f: 33:a6:66:b1:03:73:42:ec:6f:e2:40:0e:54:37:54: 30:55:2f:6a:1d:95:fe:df:5b:a6:8d:58:16:9f:b1: 01:1c:4c:db:dc:a7:61:3d:49:04:f5:ff:1b:17:02: 76:6a:69:d0:cb:b8:3b:1b:84:b6:52:4f:e4:bc:1c: ff:28:39:7d:db:d3:0b:7c:5c:29:f4:c0:8a:96:ae: cc:7b:30:4e:7b:a4:e7:9f:9a:f6:bb:54:af:aa:dd: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38616 38710 55414 sbgp-ipAddrBlock: critical IPv4: 103.246.108.0/22 111.88.0.0/17 111.88.132.0/23 111.88.136.0/22 111.88.160.0-111.88.171.255 111.88.184.0/21 111.88.212.0-111.88.239.255 115.186.0.0/17 117.102.0.0/18 203.81.224.0/20 IPv6: 2406:7000::/32 Signature Algorithm: sha256WithRSAEncryption 7c:78:19:08:d1:30:c2:bf:19:d9:31:1b:0d:9a:b6:b9:d0:d8: f1:5d:fb:79:df:1e:10:40:5f:55:e2:44:5a:9e:d8:12:4d:ea: 75:24:8b:f9:3d:90:39:af:5a:69:bb:cf:c5:b2:74:31:fb:c7: 37:9c:ca:3a:b3:95:e8:41:a6:80:27:5a:c3:83:39:e8:7c:90: 14:cf:e5:d0:41:15:4a:db:59:68:49:f4:fe:ef:f5:2c:7a:cf: da:90:0a:ed:a7:f6:8e:85:20:a9:e5:f0:38:06:1c:d0:0c:48: 18:df:c4:23:4c:4b:07:7c:21:f6:74:e9:23:f4:68:4f:a3:8a: 76:bf:21:9c:22:3b:9f:3d:b7:44:93:f2:c0:03:22:74:61:96: fc:2e:ce:31:ba:a1:ac:59:b6:84:a0:7b:9d:84:1d:70:64:17: ed:8d:a6:eb:f7:e4:8b:55:16:bb:3f:be:11:46:3e:de:75:c5: 1f:a1:78:38:03:2c:55:3a:d3:7a:a6:06:7e:19:8a:aa:67:45: 2f:0e:c6:9a:80:02:87:58:0b:94:66:1b:f7:2c:de:e1:33:6d: 10:a8:4a:55:01:f8:0b:20:6f:00:23:ad:49:68:0c:4f:ae:c2: d7:55:9c:f3:cc:74:d2:9a:15:01:85:74:d6:1f:0c:a1:20:8f: 0a:8b:a1:c9 -----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgIDAnSKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMTE0MDc1MFoXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4 MzQzRTlBRDlERDIxRkUyMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQIMN4fBxiVeLcljPv0+83cZ97aIm78DVAqBs8a+nOab1XozVAsa+9dMCh6YsT 2OL4KBKUpFTDWnp9rhJ5x5Tu11hBYBpgNr+lDeMs5ZlqFzYoptnbsYP8DZBsrF/n taM1EKv4L6IU33HSpnyWbkAEyWl44QdhFPAUsNaNM2pGDksDP5X/RcDcnFsL1hgM 7tn8XxJA+UVcRo56qDpcS2baP67oDzOmZrEDc0Lsb+JADlQ3VDBVL2odlf7fW6aN WBafsQEcTNvcp2E9SQT1/xsXAnZqadDLuDsbhLZST+S8HP8oOX3b0wt8XCn0wIqW rsx7ME57pOefmva7VK+q3RVXAgMBAAGjggNuMIIDajAdBgNVHQ4EFgQU526yVsD8 sH4pB5eDQ+mtndIf4gYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZDODNCL0U0RTEwQjRBMUQ4ODExRTJBMDEyQ0JFMTA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2QzgzQi9FNEUxMEI0QTFEODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNE OHNINHBCNWVEUS1tdG5kSWY0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAJbYAgMAlzYCAwDYdjB0BggrBgEFBQcBBwEB/wRlMGMwUgQCAAEwTAME Amf2bAMEB29YAAMEAW9YhAMEAm9YiDAMAwQFb1igAwQCb1ioAwQDb1i4MAwDBAJv WNQDBARvWOADBAdzugADBAZ1ZgADBATLUeAwDQQCAAIwBwMFACQGcAAwDQYJKoZI hvcNAQELBQADggEBAHx4GQjRMMK/GdkxGw2atrnQ2PFd+3nfHhBAX1XiRFqe2BJN 6nUki/k9kDmvWmm7z8WydDH7xzecyjqzlehBpoAnWsODOeh8kBTP5dBBFUrbWWhJ 9P7v9Sx6z9qQCu2n9o6FIKnl8DgGHNAMSBjfxCNMSwd8IfZ06SP0aE+jina/IZwi O589t0ST8sADInRhlvwuzjG6oaxZtoSge52EHXBkF+2Npuv35ItVFrs/vhFGPt51 xR+heDgDLFU603qmBn4ZiqpnRS8OxpqAAodYC5RmG/cs3uEzbRCoSlUB+AsgbwAj rUloDE+uwtdVnPPMdNKaFQGFdNYfDKEgjwqLock= -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:22 2025 by rpki-client