This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer File: A72QmhoVpFA9-tWUw8bem5RgTmY.cer (raw, json) Hash identifier: 4J8Uvi8joi9wCK8hf2jPZWoU7G6ad7PsGHAhKNA6P5Q= Subject key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027810 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 22:58:40 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 133759 IP: 43.249.220.0/22 IP: 103.41.80.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161808 (0x27810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 22:58:40 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91D873B, serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:80:7a:23:11:97:3d:b6:55:9c:ae:98:08: 07:59:c5:64:ef:51:ae:36:cf:d5:70:ce:37:e6:a7: 06:8a:0f:ac:bd:62:bd:15:33:43:6f:bf:7a:8b:73: a6:90:91:0b:3c:75:44:2b:92:a7:d6:7c:d0:2a:e4: 14:e7:63:d5:23:47:a3:a2:e9:6f:bc:3f:41:8c:ea: e0:07:78:4a:88:e6:2e:39:31:34:4b:8c:c0:89:c8: 69:fa:f4:cc:53:f3:9d:fc:70:5e:bb:64:ee:bb:f9: 44:52:47:8a:ec:0c:32:91:f5:4a:15:33:4a:d6:54: 81:7c:18:b8:e0:a8:58:14:31:bd:71:90:bd:34:32: 68:b4:c4:87:db:4a:08:18:ae:3a:2b:ec:24:56:0f: 0b:42:43:95:a2:02:de:49:a5:39:4a:0e:c8:de:07: 61:d5:b2:89:ae:18:de:bd:ae:be:6b:0f:28:27:6d: 45:de:d3:c4:a4:c5:d9:6d:be:5f:2b:ab:92:78:6e: 1d:97:fc:2f:31:0c:3b:88:93:26:ca:c9:28:90:d4: 16:85:f4:5d:24:79:36:f2:dd:40:76:43:34:aa:de: c6:d8:0c:ef:70:f0:b1:6f:46:eb:13:18:39:92:c5: dd:5a:f0:f7:bd:70:0a:4c:5d:20:b7:ae:f1:79:e8: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133759 sbgp-ipAddrBlock: critical IPv4: 43.249.220.0/22 103.41.80.0/22 Signature Algorithm: sha256WithRSAEncryption 30:5f:f1:84:e2:59:50:de:97:1c:f7:e4:ae:33:94:05:c4:92: f2:f7:9e:b9:bb:60:88:27:45:75:1a:a9:aa:c8:2e:68:3b:b9: c6:2c:f9:45:48:e7:11:4c:b7:e7:1f:bb:7b:8a:37:ac:70:99: 3f:1f:7d:2d:e3:c1:30:12:c5:bd:72:51:57:c9:e3:9c:c4:2b: 48:01:58:bf:cf:f7:f8:04:97:cf:89:43:44:28:a5:c5:2e:2d: 0d:1c:96:8b:4b:ab:a7:b2:c7:5a:28:65:58:03:3f:72:e4:31: 00:8b:88:17:32:94:bd:3d:20:10:5e:c9:8d:a4:23:37:9e:48: 7c:06:a1:8e:73:16:9f:63:eb:53:26:5f:0e:08:49:7b:79:b4: 50:8a:6e:e6:aa:ba:76:81:0a:69:78:0f:b1:cb:08:57:5c:2d: 31:73:6e:77:1c:9a:7a:e4:1b:b0:aa:e3:3b:bd:45:f2:ac:e2: d0:27:8e:d8:10:a1:d2:d5:f0:98:c5:0c:e0:94:f5:ff:9e:6e: a0:ff:ee:99:ec:e7:ac:03:41:63:77:69:4d:4d:7e:0a:d1:ce: e2:4b:34:e4:d2:7f:ee:70:4b:43:18:18:c1:dd:4e:a0:33:95: bf:b3:a4:fd:7a:c8:cb:30:67:4b:60:c1:a1:fd:0d:42:55:82: 66:1e:39:ae -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAngQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTIyNTg0MFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5 NEMzQzZERTlCOTQ2MDRFNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJN4B6IxGXPbZVnK6YCAdZxWTvUa42z9VwzjfmpwaKD6y9Yr0VM0Nvv3qLc6aQ kQs8dUQrkqfWfNAq5BTnY9UjR6Oi6W+8P0GM6uAHeEqI5i45MTRLjMCJyGn69MxT 8538cF67ZO67+URSR4rsDDKR9UoVM0rWVIF8GLjgqFgUMb1xkL00Mmi0xIfbSggY rjor7CRWDwtCQ5WiAt5JpTlKDsjeB2HVsomuGN69rr5rDygnbUXe08Skxdltvl8r q5J4bh2X/C8xDDuIkybKySiQ1BaF9F0keTby3UB2QzSq3sbYDO9w8LFvRusTGDmS xd1a8Pe9cApMXSC3rvF56H1lAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUA72QmhoV pFA9+tWUw8bem5RgTmYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ4NzNCLzRBMTZCQkRBQzYwNDExRUNBQTk0NTk0QkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEODczQi80QTE2QkJEQUM2MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhv VnBGQTktdFdVdzhiZW01UmdUbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgp/MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCK/ncAwQCZylQ MA0GCSqGSIb3DQEBCwUAA4IBAQAwX/GE4llQ3pcc9+SuM5QFxJLy9565u2CIJ0V1 GqmqyC5oO7nGLPlFSOcRTLfnH7t7ijescJk/H30t48EwEsW9clFXyeOcxCtIAVi/ z/f4BJfPiUNEKKXFLi0NHJaLS6unssdaKGVYAz9y5DEAi4gXMpS9PSAQXsmNpCM3 nkh8BqGOcxafY+tTJl8OCEl7ebRQim7mqrp2gQppeA+xywhXXC0xc253HJp65Buw quM7vUXyrOLQJ47YEKHS1fCYxQzglPX/nm6g/+6Z7OesA0Fjd2lNTX4K0c7iSzTk 0n/ucEtDGBjB3U6gM5W/s6T9esjLMGdLYMGh/Q1CVYJmHjmu -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:01 2025 by rpki-client