This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer (raw, json) Hash identifier: JqIfzBheO04jivP91iIpMUOElgZ08FeZwkjnW4Oy3Js= Subject key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B8F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft caRepository: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 23:38:18 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 10107 IP: 27.106.216.0/21 IP: 103.66.88.0/22 IP: 103.230.116.0/22 IP: 183.177.112.0/21 IP: 2402:ba00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162703 (0x27b8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 23:38:18 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:11:4b:c4:7d:f3:b0:bc:cc:8b:4f:64:ce:2b: a3:e7:12:09:61:a2:a9:39:75:b8:82:66:86:b9:87: 72:fc:93:99:0f:52:6d:76:3f:9c:64:83:d6:e4:d3: 50:ee:27:35:c6:0c:5e:49:65:92:a3:13:27:11:7d: 41:45:6a:31:c5:de:2e:46:0f:62:b3:94:3a:17:0f: 64:da:28:23:3d:ae:4d:bf:6a:04:ec:76:18:e3:73: 8c:f8:d7:42:a2:2e:82:bd:05:10:e5:5f:be:b0:e2: 85:f4:1c:96:3f:47:df:71:42:65:4f:08:16:64:42: e9:ca:62:4f:88:a0:a0:65:ff:32:55:6c:a4:6d:c6: b1:95:f7:04:f5:97:f9:7a:e4:2d:ef:34:8b:7e:9a: 7b:9f:4b:36:df:f0:2f:05:30:86:f2:5f:e1:45:09: 45:b0:86:c7:2a:12:5b:23:d5:b9:d7:60:39:6a:fb: f8:be:95:98:d2:7a:f6:0a:3a:5d:34:8a:cc:19:91: 13:c4:f0:f1:f8:74:86:bc:d8:6e:e1:d3:de:10:ad: 35:1a:2f:65:35:d4:7b:44:bb:b8:ac:ed:48:ac:40: 3e:a7:cc:e4:5f:8f:0a:18:e8:b2:8d:99:eb:8a:ce: 02:ee:b0:64:b1:63:72:f7:52:79:61:9a:87:0b:c1: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 10107 sbgp-ipAddrBlock: critical IPv4: 27.106.216.0/21 103.66.88.0/22 103.230.116.0/22 183.177.112.0/21 IPv6: 2402:ba00::/32 Signature Algorithm: sha256WithRSAEncryption 96:ee:e2:6f:fb:51:71:cf:4d:ff:52:ee:37:0d:67:a6:4f:da: 80:57:c5:ed:ac:71:c3:40:db:42:ec:78:26:24:79:32:7f:51: bd:9c:b6:6b:d5:be:c3:af:16:a9:79:37:25:9b:36:78:61:df: 9e:83:32:65:37:bf:0c:27:18:89:1b:95:4a:9e:c5:1a:db:1a: 4a:e6:38:f1:81:db:a2:ea:33:af:3f:48:e6:12:b2:0e:89:5b: fb:cb:90:83:e1:7e:fe:8e:67:79:0b:87:7d:ca:ea:a4:34:d3: 3b:1f:08:4f:9c:8b:8e:33:66:89:8b:c3:c7:50:49:f1:08:c6: 62:a8:0e:8e:fd:d6:b3:4f:b7:69:6c:d2:e8:e2:5b:be:7e:be: 88:18:84:2d:a4:67:19:f2:aa:74:f4:d1:76:7b:43:75:2a:ce: c9:82:fc:ac:16:f3:28:76:72:17:22:03:d4:29:db:91:e7:fc: 6c:cc:04:28:83:eb:47:4a:ea:c6:c8:41:1d:47:b9:0b:1e:05: 20:23:3c:bb:fb:82:9f:22:58:31:62:6f:a4:e9:5a:ca:96:05: 34:8b:ed:ce:9b:36:0c:1c:ea:c6:99:d6:8e:14:3e:4e:da:ee: 5c:6c:30:21:a3:24:ff:4b:fb:96:a5:4c:47:79:4b:75:9a:3b: d3:44:54:1e -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgIDAnuPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzIzMzgxOFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxOUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFD OUZFRTdBMjRERTgwMUYyRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuEUvEffOwvMyLT2TOK6PnEglhoqk5dbiCZoa5h3L8k5kPUm12P5xkg9bk01Du JzXGDF5JZZKjEycRfUFFajHF3i5GD2KzlDoXD2TaKCM9rk2/agTsdhjjc4z410Ki LoK9BRDlX76w4oX0HJY/R99xQmVPCBZkQunKYk+IoKBl/zJVbKRtxrGV9wT1l/l6 5C3vNIt+mnufSzbf8C8FMIbyX+FFCUWwhscqElsj1bnXYDlq+/i+lZjSevYKOl00 iswZkRPE8PH4dIa82G7h094QrTUaL2U11HtEu7is7UisQD6nzORfjwoY6LKNmeuK zgLusGSxY3L3UnlhmocLwd6xAgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQUIh9QFD4d X5PEzTHJ/ueiTegB8tcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlENTM5L0MxMjY1REMwRTM4OTExRUFCNzNBMzY1OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5RDUzOS9DMTI2NURDMEUzODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0 ZFg1UEV6VEhKX3VlaVRlZ0I4dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICJ3swQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAMbatgDBAJnQlgD BAJn5nQDBAO3sXAwDQQCAAIwBwMFACQCugAwDQYJKoZIhvcNAQELBQADggEBAJbu 4m/7UXHPTf9S7jcNZ6ZP2oBXxe2sccNA20LseCYkeTJ/Ub2ctmvVvsOvFql5NyWb Nnhh356DMmU3vwwnGIkblUqexRrbGkrmOPGB26LqM68/SOYSsg6JW/vLkIPhfv6O Z3kLh33K6qQ00zsfCE+ci44zZomLw8dQSfEIxmKoDo791rNPt2ls0ujiW75+vogY hC2kZxnyqnT00XZ7Q3UqzsmC/KwW8yh2chciA9Qp25Hn/GzMBCiD60dK6sbIQR1H uQseBSAjPLv7gp8iWDFib6TpWsqWBTSL7c6bNgwc6saZ1o4UPk7a7lxsMCGjJP9L +5alTEd5S3WaO9NEVB4= -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:14 2025 by rpki-client