This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer File: 7DavWXkJHGv6WA6juiJXeTV1cNc.cer (raw, json) Hash identifier: qy71PtnNKwK7c/L9Bo4dRX4iV+E1PZeSLC6q6KhYclc= Subject key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027445 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 10 Nov 2025 03:36:21 +0000 Certificate not after: Thu 30 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 134143 IP: 14.102.164.0/22 IP: 45.248.196.0/22 IP: 103.4.55.0/24 IP: 103.55.92.0/22 IP: 103.133.52.0/22 IP: 103.217.164.0/22 IP: 103.228.104.0/22 IP: 2402:3820::/32 IP: 2405:e180::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160837 (0x27445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 10 03:36:21 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ce:e5:d3:53:3f:f8:6f:56:20:bc:db:47:93: 76:0f:e7:84:4d:56:4c:b1:77:0e:9a:f4:9d:e8:b2: 90:ff:c9:b5:f5:41:ef:ed:49:d4:ac:9a:1d:88:e0: 10:d2:64:a9:ca:32:02:3e:46:c9:be:cc:7b:de:00: 58:7e:20:b6:f2:59:c0:70:57:26:64:76:0d:80:1e: 9e:77:45:05:c9:eb:b0:d3:c0:98:5c:3e:51:b3:2e: 46:90:e6:8e:29:61:aa:a5:80:27:40:cc:e9:84:47: 58:70:c6:fc:eb:a2:d6:39:dc:73:57:f1:e3:a4:fd: 11:3d:f0:63:e7:67:ae:a2:49:2a:ee:2a:5a:5b:9c: 9e:2a:09:d8:c2:7c:87:e6:51:07:7b:ac:4e:e4:ae: 6a:b5:ad:d2:d9:e5:69:02:a5:66:7e:fc:86:f8:3a: 46:8c:c8:d9:98:17:8a:d2:e2:25:e6:61:6b:23:ac: c7:6f:22:75:67:cb:e0:51:53:9e:33:e4:2c:69:47: 2e:08:6b:c7:e3:02:4e:65:9c:19:41:a5:3f:b6:4c: 94:07:ab:af:32:44:8f:7a:9a:0f:6a:9f:38:e0:63: 48:77:b1:02:4c:c1:57:73:22:3e:03:22:9e:3a:39: b6:ff:98:31:96:98:04:84:9c:14:52:2a:07:b8:6b: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134143 sbgp-ipAddrBlock: critical IPv4: 14.102.164.0/22 45.248.196.0/22 103.4.55.0/24 103.55.92.0/22 103.133.52.0/22 103.217.164.0/22 103.228.104.0/22 IPv6: 2402:3820::/32 2405:e180::/32 Signature Algorithm: sha256WithRSAEncryption bf:db:ec:82:5e:15:f3:af:63:a8:20:19:63:f6:7a:97:86:24: 12:44:3f:79:87:b3:c2:29:f1:d2:4e:3d:3b:a0:97:56:a6:05: 39:88:da:36:84:e0:25:1f:98:8f:4a:7b:37:df:86:03:17:99: 41:13:f8:74:cd:40:cb:3c:d1:f4:e4:ad:ee:e0:a0:6f:5f:bf: 46:e6:24:b2:1c:e7:77:5e:c4:37:fb:e1:8d:87:aa:47:c0:7a: 4a:c3:e9:18:88:51:f1:e7:f4:c6:34:2d:04:46:d0:8c:c9:65: 2a:90:a0:dd:90:38:3b:bc:15:da:5a:5e:ac:f5:34:4f:20:80: 1d:f4:2b:8e:06:a2:eb:92:c4:fd:53:a7:a0:d3:92:41:97:a4: 45:56:0f:fb:10:61:cc:a5:bd:6f:67:e0:83:98:89:29:ca:bf: 93:1f:69:08:25:8d:de:6b:18:ea:b1:68:41:be:66:fd:a4:0e: e0:8e:0e:37:e6:59:63:8c:3e:aa:f0:6d:4b:15:11:cd:5f:e1: 6c:f4:47:ef:f3:dd:8f:b9:bf:db:75:90:33:e3:bd:93:a3:c2: f6:34:05:f8:45:f9:f4:d2:a7:7c:4e:dc:df:34:a4:ec:de:1e: c0:84:00:73:bf:91:85:1a:c0:c7:9f:ff:59:30:4c:28:c3:8e: b0:90:f9:c7 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIDAnRFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMDAzMzYyMVoXDTI2MDczMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxRDc1NzgxMTAvBgNVBAUTKEVDMzZBRjU5NzkwOTFDNkJGQTU4MEVB M0JBMjI1Nzc5MzU3NTcwRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuzuXTUz/4b1YgvNtHk3YP54RNVkyxdw6a9J3ospD/ybX1Qe/tSdSsmh2I4BDS ZKnKMgI+Rsm+zHveAFh+ILbyWcBwVyZkdg2AHp53RQXJ67DTwJhcPlGzLkaQ5o4p YaqlgCdAzOmER1hwxvzrotY53HNX8eOk/RE98GPnZ66iSSruKlpbnJ4qCdjCfIfm UQd7rE7krmq1rdLZ5WkCpWZ+/Ib4OkaMyNmYF4rS4iXmYWsjrMdvInVny+BRU54z 5CxpRy4Ia8fjAk5lnBlBpT+2TJQHq68yRI96mg9qnzjgY0h3sQJMwVdzIj4DIp46 Obb/mDGWmASEnBRSKge4ayg/AgMBAAGjggNJMIIDRTAdBgNVHQ4EFgQU7DavWXkJ HGv6WA6juiJXeTV1cNcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ3NTc4L0QzQzAxOTBDQkI5RDExRUI4NEY3M0IzQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFENzU3OC9EM0MwMTkwQ0JCOUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hr SkhHdjZXQTZqdWlKWGVUVjFjTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgv/MFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQCDmakAwQCLfjE AwQAZwQ3AwQCZzdcAwQCZ4U0AwQCZ9mkAwQCZ+RoMBQEAgACMA4DBQAkAjggAwUA JAXhgDANBgkqhkiG9w0BAQsFAAOCAQEAv9vsgl4V869jqCAZY/Z6l4YkEkQ/eYez winx0k49O6CXVqYFOYjaNoTgJR+Yj0p7N9+GAxeZQRP4dM1AyzzR9OSt7uCgb1+/ RuYkshznd17EN/vhjYeqR8B6SsPpGIhR8ef0xjQtBEbQjMllKpCg3ZA4O7wV2lpe rPU0TyCAHfQrjgai65LE/VOnoNOSQZekRVYP+xBhzKW9b2fgg5iJKcq/kx9pCCWN 3msY6rFoQb5m/aQO4I4ON+ZZY4w+qvBtSxURzV/hbPRH7/Pdj7m/23WQM+O9k6PC 9jQF+EX59NKnfE7c3zSk7N4ewIQAc7+RhRrAx5//WTBMKMOOsJD5xw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:06:25 2025 by rpki-client