This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer File: 8FIaW22wTXVvopUqDymjkSEsWLI.cer (raw, json) Hash identifier: Wyxa79pK60LK1qWdxx+QpkmH+XIImCeWVBVmsMcvAY4= Subject key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0273FB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft caRepository: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 07 Nov 2025 19:44:14 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 154261 IP: 43.240.54.0/23 IP: 2001:df6:2540::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160763 (0x273fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 7 19:44:14 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:62:80:72:95:99:b8:2d:02:41:fd:eb:66: 01:fa:a7:d5:e4:6f:b6:70:f7:6d:8d:f5:b1:e9:4b: d8:52:65:a2:7c:ec:5c:7a:8d:a2:83:2b:58:41:08: 1a:dd:fc:ca:ac:4d:91:ed:7b:ec:9d:70:3b:ac:4a: ad:0e:15:ac:76:58:38:87:5e:8f:4b:e1:6a:87:b1: 8a:b9:2b:f9:86:06:34:ef:eb:66:57:39:41:e8:8c: e9:78:27:60:dc:e6:ca:71:2f:5b:b7:10:f6:2d:94: da:f5:0b:3a:d8:ba:5c:06:0c:46:4e:7a:4a:c4:ec: d9:9c:78:72:72:9b:d2:90:1c:da:a6:ea:84:d3:64: d1:fb:29:5a:85:91:67:5a:a3:ec:e4:90:ca:62:b6: ec:1b:16:27:92:2c:78:6c:c5:50:d2:bb:97:63:f3: 64:ec:3e:c6:a3:c3:bd:af:de:21:8d:7a:15:2a:b5: c7:19:36:b2:ed:0a:ed:40:ec:8f:4b:27:fb:31:b3: 10:3f:5d:84:34:ed:d6:d3:bc:11:fc:a7:52:ff:e2: c5:8f:a4:38:9f:fe:7a:f9:d4:e2:4f:e5:c4:19:0d: 7f:58:c8:6b:65:f2:53:73:89:10:5d:3a:c6:ab:fa: c4:29:06:60:97:4b:36:4b:a2:cf:ec:36:61:9b:33: 3f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154261 sbgp-ipAddrBlock: critical IPv4: 43.240.54.0/23 IPv6: 2001:df6:2540::/48 Signature Algorithm: sha256WithRSAEncryption 46:2f:83:c4:c8:b6:cc:e7:71:99:02:7b:f8:5c:92:16:68:b7: 3b:e3:2a:dc:c0:2a:68:d4:32:bd:a5:90:0e:62:33:2a:d4:03: cf:f4:de:97:0e:62:8d:24:e1:ba:dc:40:aa:02:91:46:7f:30: bc:4a:7b:2f:76:e1:f0:e4:ee:ca:55:3d:66:b7:3b:63:3a:48: 52:2c:06:b1:92:b8:79:44:1b:af:eb:8d:b2:20:7a:42:e3:3a: e3:5a:c1:8b:f0:f9:a3:eb:17:64:ef:0b:f1:bb:21:5b:b8:1b: fb:64:52:1e:cb:0b:d6:43:e2:0b:b5:3b:fb:e8:61:8c:e4:68: 7b:f0:b0:ad:e1:55:a2:27:48:2e:90:ef:f3:5a:c2:0e:9c:2d: e1:81:1e:ca:c4:0f:ec:50:85:9c:33:81:98:67:2e:67:ab:2f: 59:27:b3:8a:24:d9:e4:0b:73:6a:d2:6d:3d:91:b2:dc:40:10: 79:43:47:bd:f1:14:0e:ad:8f:8f:1b:43:51:86:21:b9:4b:dc: ae:1d:d4:4a:9b:90:ac:2d:dd:f7:d4:b7:37:f5:7f:14:6b:da: e0:22:f6:c2:0d:23:cb:ac:cb:52:e9:d7:c9:54:1a:46:b6:3d: fa:6b:38:b1:d2:4c:4b:7e:29:a4:ec:8a:6e:11:c6:0e:bc:81: 1c:82:e8:f4 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnP7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNzE5NDQxNFoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxOUFFNkExMTAvBgNVBAUTKEYwNTIxQTVCNkRCMDRENzU2RkEyOTUy QTBGMjlBMzkxMjEyQzU4QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgU2KAcpWZuC0CQf3rZgH6p9Xkb7Zw922N9bHpS9hSZaJ87Fx6jaKDK1hBCBrd /MqsTZHte+ydcDusSq0OFax2WDiHXo9L4WqHsYq5K/mGBjTv62ZXOUHojOl4J2Dc 5spxL1u3EPYtlNr1CzrYulwGDEZOekrE7NmceHJym9KQHNqm6oTTZNH7KVqFkWda o+zkkMpituwbFieSLHhsxVDSu5dj82TsPsajw72v3iGNehUqtccZNrLtCu1A7I9L J/sxsxA/XYQ07dbTvBH8p1L/4sWPpDif/nr51OJP5cQZDX9YyGtl8lNziRBdOsar +sQpBmCXSzZLos/sNmGbMz+3AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU8FIaW22w TXVvopUqDymjkSEsWLIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlBRTZBLzIxOUQ3RDhBQkMxMjExRjA4NTVGRDg3QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5QUU2QS8yMTlEN0Q4QUJDMTIxMUYwODU1RkQ4N0FDNEY5QUUwMi84RklhVzIy d1RYVnZvcFVxRHltamtTRXNXTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlqVMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBK/A2MA8EAgAC MAkDBwAgAQ32JUAwDQYJKoZIhvcNAQELBQADggEBAEYvg8TItszncZkCe/hckhZo tzvjKtzAKmjUMr2lkA5iMyrUA8/03pcOYo0k4brcQKoCkUZ/MLxKey924fDk7spV PWa3O2M6SFIsBrGSuHlEG6/rjbIgekLjOuNawYvw+aPrF2TvC/G7IVu4G/tkUh7L C9ZD4gu1O/voYYzkaHvwsK3hVaInSC6Q7/Nawg6cLeGBHsrED+xQhZwzgZhnLmer L1kns4ok2eQLc2rSbT2RstxAEHlDR73xFA6tj48bQ1GGIblL3K4d1EqbkKwt3ffU tzf1fxRr2uAi9sINI8usy1Lp18lUGka2PfprOLHSTEt+KaTsim4Rxg68gRyC6PQ= -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:30 2025 by rpki-client