This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer File: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer (raw, json) Hash identifier: 0N7B0EqSZi3lt4NXmAiqqY9q2Ojbs0geSbIzpcmsNHQ= Subject key identifier: ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027996 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 30 Nov 2025 19:55:26 +0000 Certificate not after: Mon 30 Mar 2026 00:00:00 +0000 Subordinate resources: IP: 103.143.120.0/23 IP: 2405:4d40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162198 (0x27996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 30 19:55:26 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=A91BAA24, serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7a:72:3c:b9:d9:55:c7:8f:ab:5b:a7:cb:e2: 99:30:f7:65:2f:57:37:56:7d:09:ca:ae:33:bd:0a: f9:fb:3e:92:35:2d:8c:59:41:4f:ba:5b:37:6f:47: 29:b0:ee:78:24:c4:ea:66:6f:4e:ba:01:24:4d:be: 38:b6:8b:c2:c0:78:ce:e7:d2:5c:ca:e4:34:c9:94: 32:5a:84:50:ab:37:13:cc:1f:5e:b9:60:3f:3c:c4: 33:b3:4d:51:b9:e4:c5:31:2f:1a:fa:92:95:1f:86: cb:7a:ba:92:c9:f1:35:15:36:0d:32:b5:7a:98:d5: 84:1c:39:16:df:2b:c7:b9:c9:32:23:f8:a9:04:3f: 0b:2c:f2:78:67:9d:34:38:fa:63:f5:dc:c3:9a:38: 39:fe:51:db:46:d8:75:f8:ad:00:ff:fc:7b:82:c6: e5:ee:8a:94:7d:5d:9a:78:2b:fb:33:10:2d:3f:ce: 1d:0f:d5:41:ba:6d:4a:cb:91:fe:ea:f7:11:9f:8b: b3:0e:65:96:ed:9f:51:c2:3f:c9:be:1e:3e:5e:0e: 87:fc:30:3d:9e:3e:ed:24:0c:b0:f5:c7:46:99:ec: f8:13:05:d6:cf:96:76:a6:eb:b9:cb:1a:fe:fc:ce: ff:61:91:0c:d4:38:5d:14:11:1f:d4:44:0e:74:b2: e0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.120.0/23 IPv6: 2405:4d40::/32 Signature Algorithm: sha256WithRSAEncryption 26:7b:0e:a0:44:32:11:d8:9d:50:fa:9d:29:88:1f:a4:f4:ed: 34:cf:f5:84:7e:b3:17:5f:38:64:8a:97:6b:6a:ce:e8:e1:95: 17:56:76:c6:45:a7:9e:1c:91:ac:d7:48:60:85:5e:47:40:c5: 61:25:51:0e:a4:b8:e7:88:0f:f9:2f:89:07:26:22:03:09:c2: e6:62:6d:8d:ac:13:5a:98:32:9c:26:77:ba:7c:27:3c:df:36: 89:e5:2b:34:a7:fe:d4:57:ed:1b:fc:35:64:4e:02:43:65:33: b9:a6:13:97:a6:34:82:72:af:15:7e:71:da:18:17:4a:18:f2: e7:1b:b8:39:cd:1f:a8:d3:72:6c:66:3d:11:54:1c:98:0e:c9: 8d:06:74:cd:29:e9:45:8c:e6:49:54:c9:1a:36:03:a2:79:9f: 64:35:61:90:9c:0d:f1:a5:16:7b:70:1e:fe:6f:0d:4a:a5:12: 80:99:e1:9d:76:80:dd:c7:e3:cd:47:fa:f9:27:da:97:47:0b: ef:ce:be:8b:d8:63:bd:bb:fb:02:cc:a1:21:3a:c2:98:f0:20: 30:59:34:50:99:60:1d:77:83:50:ae:a6:89:94:39:40:d7:83: a0:47:ed:91:13:5e:42:42:7a:e9:2f:09:ab:d8:f0:c4:7b:8d: 33:34:0e:a0 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIDAnmWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEzMDE5NTUyNloXDTI2MDMzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkFBMjQxMTAvBgNVBAUTKEVENzJDNzE2QkMwQUY1OUQ0MzA2MzIz RkJBQTQ3NEJENEI0REU3MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7enI8udlVx4+rW6fL4pkw92UvVzdWfQnKrjO9Cvn7PpI1LYxZQU+6WzdvRymw 7ngkxOpmb066ASRNvji2i8LAeM7n0lzK5DTJlDJahFCrNxPMH165YD88xDOzTVG5 5MUxLxr6kpUfhst6upLJ8TUVNg0ytXqY1YQcORbfK8e5yTIj+KkEPwss8nhnnTQ4 +mP13MOaODn+UdtG2HX4rQD//HuCxuXuipR9XZp4K/szEC0/zh0P1UG6bUrLkf7q 9xGfi7MOZZbtn1HCP8m+Hj5eDof8MD2ePu0kDLD1x0aZ7PgTBdbPlnam67nLGv78 zv9hkQzUOF0UER/URA50suBlAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQU7XLHFrwK 9Z1DBjI/uqR0vUtN5xwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJBQTI0LzE3MzlDMzVBMkJDOTExRjBCOEJFM0YzQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCQUEyNC8xNzM5QzM1QTJCQzkxMUYwQjhCRTNGM0JDNEY5QUUwMi83WExIRnJ3 SzlaMURCaklfdXFSMHZVdE41eHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBAFnj3gwDQQCAAIwBwMFACQFTUAwDQYJKoZIhvcNAQELBQADggEB ACZ7DqBEMhHYnVD6nSmIH6T07TTP9YR+sxdfOGSKl2tqzujhlRdWdsZFp54ckazX SGCFXkdAxWElUQ6kuOeID/kviQcmIgMJwuZibY2sE1qYMpwmd7p8JzzfNonlKzSn /tRX7Rv8NWROAkNlM7mmE5emNIJyrxV+cdoYF0oY8ucbuDnNH6jTcmxmPRFUHJgO yY0GdM0p6UWM5klUyRo2A6J5n2Q1YZCcDfGlFntwHv5vDUqlEoCZ4Z12gN3H481H +vkn2pdHC+/OvovYY727+wLMoSE6wpjwIDBZNFCZYB13g1CupomUOUDXg6BH7ZET XkJCeukvCavY8MR7jTM0DqA= -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:26 2025 by rpki-client