This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer File: DeK2pi5UoKYbzzFLbi77jzoeOno.cer (raw, json) Hash identifier: CgILXybLgB/qFdIUyp5+NLnNcDSd0MRupv0SOhX1TQA= Subject key identifier: 0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027938 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft caRepository: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 29 Nov 2025 13:23:29 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 59217 IP: 43.248.248.0/22 IP: 103.243.164.0/22 IP: 2402:c940::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162104 (0x27938) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 29 13:23:29 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A916F8DB, serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:2a:77:9e:a3:a2:d7:d5:80:5c:08:52:8b: f0:3e:85:b9:df:a5:34:e9:b1:96:84:8c:4a:f4:21: 97:71:c9:dc:a1:e5:d6:06:1d:e1:1d:fa:38:32:92: 7c:c6:13:18:56:9c:64:a0:60:5d:2c:d0:a3:2c:fe: 95:54:7b:db:23:94:a1:72:41:99:c0:dd:ed:17:94: d6:8e:7c:d1:13:ab:64:a3:14:48:6a:d3:89:8b:bf: 49:d3:b2:ea:c6:d1:31:b1:cf:07:57:06:e1:c2:59: a8:7a:aa:03:c6:4e:5f:6f:7c:21:34:77:96:06:11: 23:ef:15:aa:96:50:a2:e4:c5:ef:1e:51:27:01:87: 5a:ae:54:4d:c5:e7:fa:6c:f1:89:db:76:c3:d3:2b: a6:9b:00:7c:58:83:c1:38:98:17:76:dc:97:4e:f1: f6:f1:24:d3:2e:28:a4:d4:26:e1:bb:2a:a5:42:c7: 4d:6a:c2:ae:ae:3f:b7:e2:d1:59:9f:d8:60:13:57: f1:22:9b:70:e6:7b:54:6d:f4:0b:f0:cf:09:bc:71: 70:72:c2:7c:b9:d5:08:4e:64:b7:dc:fb:72:b2:3e: f4:f3:45:5d:69:30:69:6d:83:ef:2a:05:62:25:8a: 1f:34:ad:2c:13:50:b7:01:41:f2:90:18:74:22:96: 58:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59217 sbgp-ipAddrBlock: critical IPv4: 43.248.248.0/22 103.243.164.0/22 IPv6: 2402:c940::/32 Signature Algorithm: sha256WithRSAEncryption 90:8a:93:a5:3f:42:e1:bd:a6:cc:4f:e1:ba:dc:31:6b:6e:75: 6f:12:9f:eb:11:c5:3c:4d:2c:a5:41:f2:b4:f6:39:1a:a1:0d: 8c:d8:2a:bb:0e:f7:37:8d:58:1d:32:59:c1:f3:e7:99:0a:15: fb:7b:31:17:01:b8:31:a7:2d:b3:15:fb:75:54:83:7e:35:91: 36:bb:10:c8:eb:2a:38:e0:63:5d:1c:b6:71:10:3a:b0:65:fe: 14:2f:fc:cd:53:47:35:60:e7:56:a6:12:17:3e:d9:40:9a:ce: 21:c0:2e:14:f7:5c:a6:be:1e:d3:3d:7d:3e:1c:b4:ba:41:60: 89:8e:76:7a:48:7d:b4:5c:50:06:ae:29:f7:cd:64:dc:f7:75: 78:59:f7:38:6a:6a:38:c0:10:dd:bc:65:15:2e:9b:0c:0d:82: 91:6b:61:25:fc:d2:db:cd:78:23:18:0a:db:67:0d:7d:38:dd: 87:ba:b4:1d:9f:44:3d:cf:ff:41:d7:52:8a:bf:64:98:6f:d6: 3f:80:a0:b4:d3:24:ba:fa:80:d2:3a:76:00:08:7e:d1:1f:52: 52:d8:0c:0d:2e:00:40:7f:e0:02:c2:29:83:2e:63:c2:2d:93: 3f:4c:9e:bd:b6:61:86:28:81:65:d6:ba:55:2f:7a:17:3f:7d: 30:63:3e:7f -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAnk4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyOTEzMjMyOVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNkY4REIxMTAvBgNVBAUTKDBERTJCNkE2MkU1NEEwQTYxQkNGMzE0 QjZFMkVGQjhGM0ExRTNBN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC23yp3nqOi19WAXAhSi/A+hbnfpTTpsZaEjEr0IZdxydyh5dYGHeEd+jgyknzG ExhWnGSgYF0s0KMs/pVUe9sjlKFyQZnA3e0XlNaOfNETq2SjFEhq04mLv0nTsurG 0TGxzwdXBuHCWah6qgPGTl9vfCE0d5YGESPvFaqWUKLkxe8eUScBh1quVE3F5/ps 8YnbdsPTK6abAHxYg8E4mBd23JdO8fbxJNMuKKTUJuG7KqVCx01qwq6uP7fi0Vmf 2GATV/Eim3Dme1Rt9Avwzwm8cXBywny51QhOZLfc+3KyPvTzRV1pMGltg+8qBWIl ih80rSwTULcBQfKQGHQillhhAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUDeK2pi5U oKYbzzFLbi77jzoeOnowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZGOERCLzZDOEJCODYyNTRCQzExRUVCOERCMTE0QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2RjhEQi82QzhCQjg2MjU0QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1 VW9LWWJ6ekZMYmk3N2p6b2VPbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAOdRMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCK/j4AwQCZ/Ok MA0EAgACMAcDBQAkAslAMA0GCSqGSIb3DQEBCwUAA4IBAQCQipOlP0LhvabMT+G6 3DFrbnVvEp/rEcU8TSylQfK09jkaoQ2M2Cq7Dvc3jVgdMlnB8+eZChX7ezEXAbgx py2zFft1VIN+NZE2uxDI6yo44GNdHLZxEDqwZf4UL/zNU0c1YOdWphIXPtlAms4h wC4U91ymvh7TPX0+HLS6QWCJjnZ6SH20XFAGrin3zWTc93V4Wfc4amo4wBDdvGUV LpsMDYKRa2El/NLbzXgjGArbZw19ON2HurQdn0Q9z/9B11KKv2SYb9Y/gKC00yS6 +oDSOnYACH7RH1JS2AwNLgBAf+ACwimDLmPCLZM/TJ69tmGGKIFl1rpVL3oXP30w Yz5/ -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:52 2025 by rpki-client