This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer File: C7BDH1UIA338kvd-BrSK7JVR9ls.cer (raw, json) Hash identifier: b0uKApn1ddmX885ZPNbRyqxdgdfb6MmRgtz9rgxbWas= Subject key identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0276AE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft caRepository: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 20 Nov 2025 16:02:28 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 132806 IP: 103.74.84.0/22 IP: 2407:2b80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161454 (0x276ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 20 16:02:28 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A918C255, serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:71:83:e3:2f:1b:7f:0a:88:41:46:cd:83: e6:19:df:f1:b1:4f:3c:56:d8:05:7a:b2:ee:0a:78: a1:97:3e:37:9c:d1:d9:c7:ad:1f:a7:a7:8f:68:56: 7c:a5:e0:9f:4b:27:c3:40:7a:7e:a1:f1:26:ba:90: 6a:81:71:61:61:67:df:ca:a3:10:4f:ff:16:fe:cf: ef:6c:b9:4a:85:3d:1a:be:5e:e4:4f:52:16:46:66: 24:b3:9c:b5:af:7b:58:10:a6:64:52:6d:2c:c6:58: 0a:ac:c6:3b:c9:96:28:7d:f5:76:23:d7:78:0b:97: 4d:3d:99:bf:28:c3:a6:bc:4f:6e:c2:d2:9e:7f:9c: 57:8b:dc:d7:57:12:24:18:bf:a0:6a:95:e4:f8:9a: b7:a6:32:27:c2:f5:2b:65:2f:26:13:d7:2a:44:16: 69:7b:d1:ae:da:ca:cb:8f:3e:a7:75:52:bb:55:2c: 07:6b:e7:aa:61:55:11:2f:f2:9b:19:0a:d4:75:89: 75:92:93:36:7f:2a:86:78:f8:5b:1b:fb:af:d8:ae: 6c:34:c7:fa:d6:8f:a0:46:07:e9:72:8b:ae:fd:18: a3:6c:87:25:72:8d:d1:c8:1f:25:3b:49:a7:e2:21: 91:5d:ba:9f:2f:e8:84:55:12:d8:48:24:9a:01:08: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 132806 sbgp-ipAddrBlock: critical IPv4: 103.74.84.0/22 IPv6: 2407:2b80::/32 Signature Algorithm: sha256WithRSAEncryption 39:3b:b8:56:5d:3b:4b:f4:01:90:b7:b6:43:4b:cc:ef:7c:de: 78:49:09:de:54:4c:4d:11:c7:36:94:01:5d:2a:82:47:22:fa: b8:a8:aa:20:54:dd:d3:eb:6b:7d:db:96:bd:7a:d5:5b:de:2d: ba:83:36:ae:28:e0:ad:59:16:18:45:3f:73:72:d3:6c:c5:90: 09:c2:95:11:d5:4a:7e:29:46:82:06:bd:43:ee:e4:2b:d0:dd: 68:de:cd:bc:80:9f:dd:af:70:88:e5:32:8d:9a:cd:7f:fe:34: 79:a6:68:b6:e9:1f:5a:c4:48:28:65:06:72:bb:b0:ed:17:8a: 7c:74:1c:b5:56:c8:38:08:7d:d4:a2:d2:11:86:14:15:39:68: 83:3d:87:b4:1c:8d:a9:cb:5e:dc:8f:9a:e7:3c:bb:65:33:7f: cd:4d:23:bb:cb:5a:7d:f4:53:1e:90:e8:f6:86:1c:5e:18:8d: bb:7e:6b:ec:11:10:44:d9:3c:b5:ed:65:c5:d2:eb:c7:50:e0: 2a:54:a4:6f:8b:cd:32:95:97:28:29:fe:3b:0c:44:c2:70:24: 02:43:0f:47:5e:7e:54:4c:9f:08:c3:08:36:70:8e:15:c2:28: 14:93:9d:0c:01:df:8e:cc:6f:22:b4:78:0e:72:34:17:aa:19: 4f:b0:e7:6e -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnauMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMDE2MDIyOFoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxOEMyNTUxMTAvBgNVBAUTKDBCQjA0MzFGNTUwODAzN0RGQzkyRjc3 RTA2QjQ4QUVDOTU1MUY2NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4ynGD4y8bfwqIQUbNg+YZ3/GxTzxW2AV6su4KeKGXPjec0dnHrR+np49oVnyl 4J9LJ8NAen6h8Sa6kGqBcWFhZ9/KoxBP/xb+z+9suUqFPRq+XuRPUhZGZiSznLWv e1gQpmRSbSzGWAqsxjvJlih99XYj13gLl009mb8ow6a8T27C0p5/nFeL3NdXEiQY v6BqleT4mremMifC9StlLyYT1ypEFml70a7aysuPPqd1UrtVLAdr56phVREv8psZ CtR1iXWSkzZ/KoZ4+Fsb+6/Yrmw0x/rWj6BGB+lyi679GKNshyVyjdHIHyU7Safi IZFdup8v6IRVEthIJJoBCOT3AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUC7BDH1UI A338kvd+BrSK7JVR9lswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThDMjU1L0JFNjJEQzlFMjMyRjExRTdBNTRCNDI2NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4QzI1NS9CRTYyREM5RTIzMkYxMUU3QTU0QjQyNjZDNEY5QUUwMi9DN0JESDFV SUEzMzhrdmQtQnJTSzdKVlI5bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgbGMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ0pUMA0EAgAC MAcDBQAkByuAMA0GCSqGSIb3DQEBCwUAA4IBAQA5O7hWXTtL9AGQt7ZDS8zvfN54 SQneVExNEcc2lAFdKoJHIvq4qKogVN3T62t925a9etVb3i26gzauKOCtWRYYRT9z ctNsxZAJwpUR1Up+KUaCBr1D7uQr0N1o3s28gJ/dr3CI5TKNms1//jR5pmi26R9a xEgoZQZyu7DtF4p8dBy1Vsg4CH3UotIRhhQVOWiDPYe0HI2py17cj5rnPLtlM3/N TSO7y1p99FMekOj2hhxeGI27fmvsERBE2Ty17WXF0uvHUOAqVKRvi80ylZcoKf47 DETCcCQCQw9HXn5UTJ8Iwwg2cI4VwigUk50MAd+OzG8itHgOcjQXqhlPsOdu -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:53 2025 by rpki-client