This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer File: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer (raw, json) Hash identifier: +V1dLTMUgvju4vyNScu/K6wkRdC2ryeUBhzWK0rc098= Subject key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0271BA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 01 Nov 2025 19:16:53 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 45.125.188.0/22 IP: 103.11.4.0/22 IP: 103.14.176.0/22 IP: 103.245.232.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160186 (0x271ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 1 19:16:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:0a:09:b1:db:80:d3:d9:2f:29:eb:61:1f: 94:d6:64:e5:02:95:35:86:e0:d4:bd:1e:db:97:81: 95:c7:0e:d0:d9:92:8d:36:fc:21:d5:bf:89:c8:14: 85:50:17:e8:12:86:1a:5e:84:af:91:70:83:0d:2d: 71:b3:8e:23:9f:29:42:5b:61:3c:a4:42:2f:ab:0b: 91:48:71:69:d3:51:7b:34:15:81:80:5b:2f:bc:f1: 9c:fa:6c:c6:d7:4c:f9:69:ee:ac:0c:63:79:8b:7d: de:e1:b0:35:ab:7f:46:59:c7:01:40:50:1e:d5:23: 35:c3:00:c8:8c:a2:3e:86:a2:b9:38:4e:ba:72:35: 8f:25:23:81:f1:0f:f0:0d:8c:e0:f6:e8:ff:bb:90: ac:26:ee:99:4b:13:da:b6:ea:74:82:d5:4e:ff:12: 60:03:c0:ab:94:bb:0b:a0:25:e0:7a:ea:ea:89:9d: ad:d8:95:87:af:9f:cb:d0:4d:83:dc:c2:41:9c:38: 5f:38:15:75:64:f5:82:80:e0:49:38:d3:72:c2:9e: 3d:77:f5:11:ef:ee:ce:cb:46:a2:80:6f:1f:fc:3e: 38:3c:be:c0:e3:69:ec:e3:38:58:f4:33:a7:c5:02: 11:5f:10:b2:17:95:6f:9d:dd:88:86:ac:c9:c9:ce: 38:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.125.188.0/22 103.11.4.0/22 103.14.176.0/22 103.245.232.0/22 Signature Algorithm: sha256WithRSAEncryption 72:55:ec:9d:6c:99:24:c7:70:6a:ce:e3:1d:90:62:39:f2:04: 48:ac:d9:f6:d6:4a:05:a7:42:a6:42:ec:50:33:36:15:10:67: 67:85:54:aa:b1:4e:71:e2:13:6b:92:ae:87:df:95:38:75:e3: ba:6f:54:a2:17:59:61:87:5a:66:3e:57:a8:81:88:76:dc:83: b4:8e:ea:63:64:0c:4d:47:e8:0d:0c:80:2b:a3:e1:21:d6:6a: ae:a5:af:70:d3:73:75:29:ae:3e:2a:df:79:a2:6a:48:22:fb: a0:a9:f1:b1:95:f2:7f:21:df:cc:13:44:36:e3:64:ce:62:f4: cf:60:c5:a1:6f:4a:2d:85:bc:7d:bf:0f:27:fb:8e:a0:21:d5: 4e:df:18:d8:b1:da:31:26:00:1a:e2:9c:7a:2e:e4:2e:d7:97: 37:53:e9:ac:72:d3:71:0e:16:7f:4a:85:8d:39:84:4b:08:4c: ca:a6:e8:ef:54:f9:1c:b1:88:65:ad:9c:86:a9:08:3b:dc:e8: b3:ea:21:2c:ec:20:af:6e:a0:bf:11:de:68:48:3c:4f:61:c5: e6:47:a9:39:1f:a4:62:90:32:2d:3a:1e:4e:14:98:71:4f:d9: d6:4d:e2:ea:da:73:36:8c:b4:a8:2e:be:50:ae:6e:0b:a4:35: 03:2a:cb:3d -----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgIDAnG6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwMTE5MTY1M1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZB QTI0QjlGNTBFMUNCOEZFRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+4QoJsduA09kvKethH5TWZOUClTWG4NS9HtuXgZXHDtDZko02/CHVv4nIFIVQ F+gShhpehK+RcIMNLXGzjiOfKUJbYTykQi+rC5FIcWnTUXs0FYGAWy+88Zz6bMbX TPlp7qwMY3mLfd7hsDWrf0ZZxwFAUB7VIzXDAMiMoj6Gork4TrpyNY8lI4HxD/AN jOD26P+7kKwm7plLE9q26nSC1U7/EmADwKuUuwugJeB66uqJna3YlYevn8vQTYPc wkGcOF84FXVk9YKA4Ek403LCnj139RHv7s7LRqKAbx/8Pjg8vsDjaezjOFj0M6fF AhFfELIXlW+d3YiGrMnJzjhBAgMBAAGjggMFMIIDATAdBgNVHQ4EFgQU6ZGlot2d HyokPfaqJLn1Dhy4/uUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUEyMzU5L0ZDMjk4REVBNDE3MDExRUE5OERFNjU2QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBMjM1OS9GQzI5OERFQTQxNzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3Qy ZEh5b2tQZmFxSkxuMURoeTRfdVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8EIjAg MB4EAgABMBgDBAItfbwDBAJnCwQDBAJnDrADBAJn9egwDQYJKoZIhvcNAQELBQAD ggEBAHJV7J1smSTHcGrO4x2QYjnyBEis2fbWSgWnQqZC7FAzNhUQZ2eFVKqxTnHi E2uSrofflTh147pvVKIXWWGHWmY+V6iBiHbcg7SO6mNkDE1H6A0MgCuj4SHWaq6l r3DTc3Uprj4q33miakgi+6Cp8bGV8n8h38wTRDbjZM5i9M9gxaFvSi2FvH2/Dyf7 jqAh1U7fGNix2jEmABrinHou5C7XlzdT6axy03EOFn9KhY05hEsITMqm6O9U+Ryx iGWtnIapCDvc6LPqISzsIK9uoL8R3mhIPE9hxeZHqTkfpGKQMi06Hk4UmHFP2dZN 4uraczaMtKguvlCubgukNQMqyz0= -----END CERTIFICATE-----Generated at Sat Dec 6 23:34:46 2025 by rpki-client