This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlwMrqX6-WreoBWKqPtS-jRn4Og.cer File: LlwMrqX6-WreoBWKqPtS-jRn4Og.cer (raw, json) Hash identifier: smjh8WR3nFhaSxPBsUOGzX+qTT3VfL4UT0S4dEGxsLc= Subject key identifier: 2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B81 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft caRepository: rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 21:21:11 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 133130 IP: 43.245.112.0/22 IP: 103.252.56.0/22 IP: 2400:3c80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162689 (0x27b81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 21:21:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A918F7E6, serialNumber=2E5C0CAEA5FAF96ADEA0158AA8FB52FA3467E0E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:06:a4:cf:22:4d:07:b1:4e:61:d5:3e:42: 2d:70:6e:3d:90:89:df:7a:a4:00:bf:27:51:f3:f1: 41:ff:3a:ca:36:e8:b1:37:3d:1f:aa:d0:b9:07:da: cf:3b:57:cc:3a:dc:c2:89:2e:05:03:6c:4f:6c:ad: 7e:1a:8c:72:a1:81:1a:cc:ce:da:5e:eb:51:90:17: ec:db:5c:9e:d8:c3:03:ca:c8:8b:03:ba:eb:ba:1d: 12:9a:3d:53:00:0e:b1:20:8a:b7:78:26:9a:61:44: 45:9b:c5:c4:3d:b6:51:fb:ba:83:c5:b8:a6:95:c7: 5a:36:4c:91:bf:49:f9:cc:1f:c9:10:1d:a0:ed:de: 0c:9e:0a:d0:fa:2a:3f:9e:f8:e7:00:f1:93:ea:91: 2f:46:d5:eb:5c:d5:5d:29:e8:90:96:c9:49:0d:84: 99:66:d6:59:9d:fd:3e:43:66:4e:75:f2:7e:69:a1: 97:29:20:a4:95:42:82:5b:1c:82:c4:ab:ca:07:12: fb:6a:35:fb:0d:f4:41:4b:b2:bd:08:47:5c:27:e0: 91:1e:55:62:a5:c4:29:69:ac:aa:32:5f:5c:67:05: 9f:ed:9f:7c:af:09:60:ec:e0:47:9e:03:ea:4a:da: 22:9d:b3:60:7d:4f:5d:af:5d:62:b8:4d:0d:c9:6c: 09:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5C:0C:AE:A5:FA:F9:6A:DE:A0:15:8A:A8:FB:52:FA:34:67:E0:E8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918F7E6/01C72C807D7511EB8D8F486DC4F9AE02/LlwMrqX6-WreoBWKqPtS-jRn4Og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133130 sbgp-ipAddrBlock: critical IPv4: 43.245.112.0/22 103.252.56.0/22 IPv6: 2400:3c80::/32 Signature Algorithm: sha256WithRSAEncryption 3e:36:be:4d:b8:90:93:44:a4:8b:9f:0b:b7:6e:46:36:60:70: 89:52:84:ec:65:d7:8b:c6:a6:9d:8e:29:9b:ea:2c:59:0f:ff: 43:e8:0a:7d:51:7d:cc:12:31:3b:32:3e:be:32:59:f1:f1:3c: 86:b2:06:8e:66:77:09:5b:fb:c8:73:ff:7c:51:8c:90:2c:61: 61:8f:f2:d1:18:50:c9:a4:86:8d:03:3f:23:31:d7:1a:8d:14: 44:23:36:59:f0:9d:1c:0f:01:5d:84:2a:9f:a7:72:6d:5a:ea: 7a:4e:55:ac:b0:7c:b0:62:f0:90:b2:da:51:1a:16:28:d5:e6: 2b:44:3d:c7:63:72:ad:b2:03:7a:c4:e8:92:d4:82:27:87:76: 72:93:d9:34:3e:4d:b1:12:e8:d7:ff:44:85:bc:3b:91:87:99: 09:4d:3d:3f:80:01:79:21:2b:be:66:30:f6:c9:03:c9:69:8b: 0e:22:16:ed:a9:e0:a4:e4:ee:6b:6b:ae:7c:00:2a:92:fc:a8: 6f:fd:6c:30:ca:1f:53:91:4a:7f:e6:10:35:2e:9b:23:2a:86: 4e:29:7b:46:20:d5:1c:55:e1:c3:3b:2f:c7:47:2d:07:9a:2c: 1b:71:76:18:84:6f:ca:a6:a7:8e:d3:ba:28:71:90:0b:70:20: 57:27:dd:ff -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAnuBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzIxMjExMVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOEY3RTYxMTAvBgNVBAUTKDJFNUMwQ0FFQTVGQUY5NkFERUEwMTU4 QUE4RkI1MkZBMzQ2N0UwRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJvgakzyJNB7FOYdU+Qi1wbj2Qid96pAC/J1Hz8UH/Oso26LE3PR+q0LkH2s87 V8w63MKJLgUDbE9srX4ajHKhgRrMztpe61GQF+zbXJ7YwwPKyIsDuuu6HRKaPVMA DrEgird4JpphREWbxcQ9tlH7uoPFuKaVx1o2TJG/SfnMH8kQHaDt3gyeCtD6Kj+e +OcA8ZPqkS9G1etc1V0p6JCWyUkNhJlm1lmd/T5DZk518n5poZcpIKSVQoJbHILE q8oHEvtqNfsN9EFLsr0IR1wn4JEeVWKlxClprKoyX1xnBZ/tn3yvCWDs4EeeA+pK 2iKds2B9T12vXWK4TQ3JbAnHAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQULlwMrqX6 +WreoBWKqPtS+jRn4OgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThGN0U2LzAxQzcyQzgwN0Q3NTExRUI4RDhGNDg2REM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4RjdFNi8wMUM3MkM4MDdENzUxMUVCOEQ4RjQ4NkRDNEY5QUUwMi9MbHdNcnFY Ni1XcmVvQldLcVB0Uy1qUm40T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAggKMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCK/VwAwQCZ/w4 MA0EAgACMAcDBQAkADyAMA0GCSqGSIb3DQEBCwUAA4IBAQA+Nr5NuJCTRKSLnwu3 bkY2YHCJUoTsZdeLxqadjimb6ixZD/9D6Ap9UX3MEjE7Mj6+Mlnx8TyGsgaOZncJ W/vIc/98UYyQLGFhj/LRGFDJpIaNAz8jMdcajRREIzZZ8J0cDwFdhCqfp3JtWup6 TlWssHywYvCQstpRGhYo1eYrRD3HY3KtsgN6xOiS1IInh3Zyk9k0Pk2xEujX/0SF vDuRh5kJTT0/gAF5ISu+ZjD2yQPJaYsOIhbtqeCk5O5ra658ACqS/Khv/Wwwyh9T kUp/5hA1LpsjKoZOKXtGINUcVeHDOy/HRy0HmiwbcXYYhG/KpqeO07oocZALcCBX J93/ -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:49 2025 by rpki-client