This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer File: B82dMe1hhir1A-UglCjHyyfqiB8.cer (raw, json) Hash identifier: L2E70YVbzKbe5t/kbWHzobA7uakCnNGlOV6Nv1HROv4= Subject key identifier: 07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027AAE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 13:58:42 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 64049 IP: 59.153.104.0/22 IP: 103.198.140.0/22 IP: 2403:1a80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162478 (0x27aae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 13:58:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91FD609, serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:9b:0c:d2:7d:ef:bf:30:1e:96:fc:a1:c0: c7:65:3a:c0:b6:88:0f:61:4e:6b:e7:b3:c5:5b:4e: f6:9b:7f:46:da:ad:e5:a3:ee:d7:75:27:6a:aa:8c: 3d:7c:bd:e7:71:c3:af:a4:41:70:41:41:a3:05:bb: 27:47:c1:fa:50:44:4f:79:f5:15:32:cb:3c:ee:40: 0b:7a:91:f9:c2:86:95:46:fd:1f:f9:23:97:b5:1f: b1:6c:89:f4:16:0e:37:f0:67:8b:15:03:ff:dc:eb: 94:75:88:ce:09:e2:10:5b:03:86:e2:51:8f:c7:76: d8:a7:48:15:67:75:52:6c:a6:29:e6:56:ce:4b:bf: 87:38:5c:33:e2:1c:91:7d:37:85:08:8c:f5:0e:6f: aa:21:7a:48:a5:ac:d5:27:16:34:2d:e2:36:ed:18: 24:eb:9a:d6:2d:3d:3a:ec:2c:f4:c8:33:ee:b1:f7: 2a:c0:41:82:a3:8e:93:a1:aa:59:12:82:64:e7:38: f2:75:63:18:4c:90:80:38:79:93:7c:74:c4:4a:58: b8:51:8b:ec:87:dd:7c:23:16:dd:77:3b:2e:cd:e0: 32:c1:e7:19:ba:11:f2:4f:c6:fb:d7:5d:8d:4a:3d: e1:29:28:20:c0:d8:dd:81:77:ac:d0:4a:b9:c2:39: 27:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 64049 sbgp-ipAddrBlock: critical IPv4: 59.153.104.0/22 103.198.140.0/22 IPv6: 2403:1a80::/32 Signature Algorithm: sha256WithRSAEncryption 21:34:0c:53:02:20:39:4c:7d:e3:85:06:39:6b:70:b8:ef:09: 16:ec:2a:05:b0:2f:d8:ee:64:b3:80:9e:94:2c:c1:7a:3a:94: e8:f3:81:79:4f:8e:bc:e6:72:f5:9c:e5:e5:cb:fc:b2:77:9c: 1d:49:e1:c1:55:f0:0b:60:8d:15:88:40:59:c3:65:5a:a4:6f: 17:0f:f7:bc:33:7e:1a:1b:d7:ca:2b:f8:85:98:f4:5b:63:59: 8d:97:dd:de:9c:a6:ee:a6:09:35:66:43:2e:dc:22:de:1f:c8: 5d:39:5e:01:49:3e:3e:04:64:f0:74:df:c5:da:35:d5:a3:0a: 71:5a:65:7b:63:05:87:70:46:9a:3f:bb:54:cb:e5:46:9b:b3: 8c:6e:af:f0:1c:2b:5e:c2:0e:52:29:44:84:42:96:6a:8d:ca: 78:eb:0e:36:c0:1b:55:ed:61:7a:8f:6c:6e:31:a5:0f:7d:3f: 41:3d:6e:80:b1:63:9d:41:6e:2d:15:d3:78:10:26:8c:e9:b2: ca:96:ae:a5:28:76:a4:ca:e0:9d:18:4f:3f:34:2b:fb:e6:d6: 4a:f9:9b:f5:3a:73:39:0e:63:77:96:0a:6b:91:f8:57:67:18: 0c:52:bf:9a:b1:8e:bc:bb:10:d6:19:f3:7a:48:c4:fc:a7:ff: 8e:c2:d2:ef -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAnquMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjEzNTg0MloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRkQ2MDkxMTAvBgNVBAUTKDA3Q0Q5RDMxRUQ2MTg2MkFGNTAzRTUy MDk0MjhDN0NCMjdFQTg4MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/v5sM0n3vvzAelvyhwMdlOsC2iA9hTmvns8VbTvabf0bareWj7td1J2qqjD18 vedxw6+kQXBBQaMFuydHwfpQRE959RUyyzzuQAt6kfnChpVG/R/5I5e1H7FsifQW DjfwZ4sVA//c65R1iM4J4hBbA4biUY/HdtinSBVndVJspinmVs5Lv4c4XDPiHJF9 N4UIjPUOb6ohekilrNUnFjQt4jbtGCTrmtYtPTrsLPTIM+6x9yrAQYKjjpOhqlkS gmTnOPJ1YxhMkIA4eZN8dMRKWLhRi+yH3XwjFt13Oy7N4DLB5xm6EfJPxvvXXY1K PeEpKCDA2N2Bd6zQSrnCOSfdAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUB82dMe1h hir1A+UglCjHyyfqiB8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZENjA5LzBDNjA5QjlDRUMxOTExRUE5MjVERkM2RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGRDYwOS8wQzYwOUI5Q0VDMTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUx aGhpcjFBLVVnbENqSHl5ZnFpQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAPoxMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCO5loAwQCZ8aM MA0EAgACMAcDBQAkAxqAMA0GCSqGSIb3DQEBCwUAA4IBAQAhNAxTAiA5TH3jhQY5 a3C47wkW7CoFsC/Y7mSzgJ6ULMF6OpTo84F5T4685nL1nOXly/yyd5wdSeHBVfAL YI0ViEBZw2VapG8XD/e8M34aG9fKK/iFmPRbY1mNl93enKbupgk1ZkMu3CLeH8hd OV4BST4+BGTwdN/F2jXVowpxWmV7YwWHcEaaP7tUy+VGm7OMbq/wHCtewg5SKUSE QpZqjcp46w42wBtV7WF6j2xuMaUPfT9BPW6AsWOdQW4tFdN4ECaM6bLKlq6lKHak yuCdGE8/NCv75tZK+Zv1OnM5DmN3lgprkfhXZxgMUr+asY68uxDWGfN6SMT8p/+O wtLv -----END CERTIFICATE-----Generated at Sat Dec 6 22:40:59 2025 by rpki-client