This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer File: NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer (raw, json) Hash identifier: ndMUaKHtq3xfOcabmpRT0cPOoJx8zoPQ6pIg4KEnMSM= Subject key identifier: 34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02771F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 23 Nov 2025 09:33:58 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 154269 IP: 43.248.254.0/23 IP: 2001:df6:2740::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161567 (0x2771f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 23 09:33:58 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91BB9EF, serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:2a:66:21:7b:1c:fc:12:39:79:f0:67:f6: 61:06:34:a2:f6:04:44:f9:0f:6a:eb:92:89:db:a8: c3:4f:f7:7a:04:9a:0e:ee:e8:da:a8:3e:67:4a:ac: a2:0e:68:4f:a4:53:8e:57:d7:e8:a2:c5:d7:91:48: a4:4e:f5:d7:fc:ed:c6:aa:76:da:54:73:9f:1c:72: bd:ed:dc:8b:6f:28:6a:8b:18:b8:03:af:15:d2:61: 19:cf:41:b7:79:aa:f6:42:fb:b0:c6:3d:94:ca:d2: 8e:1d:d2:3d:e2:c1:c6:87:41:69:df:db:f9:33:f4: 52:c0:46:7f:b1:94:6f:96:c2:d0:56:cd:45:61:fe: 88:3e:24:cb:12:7f:c9:61:4e:60:d8:25:4a:65:f4: 2d:3c:f8:be:76:8d:dd:95:d3:d9:b4:ec:b0:16:34: 23:2a:82:b6:a0:b5:ab:bf:ba:0d:92:48:06:b9:7a: 5b:32:d6:0e:9a:34:fa:db:57:95:56:6d:fc:a7:c6: 4c:6c:f6:4f:6c:20:42:43:69:61:e6:8f:ab:6b:75: 9b:73:83:fd:53:1c:9b:d7:de:f6:9d:f7:7e:b1:12: 1a:b7:d5:fd:a1:80:32:21:9d:4d:40:4b:04:ef:c2: 61:7b:ac:02:d4:73:de:b0:81:8e:7d:82:94:d6:c2: da:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154269 sbgp-ipAddrBlock: critical IPv4: 43.248.254.0/23 IPv6: 2001:df6:2740::/48 Signature Algorithm: sha256WithRSAEncryption 4a:4b:fc:cb:56:d4:48:66:ab:c5:5f:ab:3c:07:e6:99:3c:c1: e2:34:cf:5b:5d:f2:59:d8:8f:de:35:7e:1c:7c:0f:19:b6:c8: 9f:9b:66:14:be:dc:65:c1:cb:a6:45:4a:6b:48:72:52:d1:91: 16:18:07:33:9f:27:3a:84:09:3e:8b:18:a9:db:95:4d:55:a1: 5f:ea:83:95:17:36:c9:4a:4c:9d:3b:f6:7e:a6:09:c7:b5:19: 0e:f0:b1:72:90:8e:f6:c1:70:da:c8:11:d7:c3:17:ed:7e:cd: 00:02:ff:4b:ce:42:5a:98:ef:2a:5e:32:ab:27:26:db:ac:3d: 44:38:51:ff:ee:f2:a3:9f:6e:3f:9a:a0:4f:e6:ad:f2:ef:ed: 11:4d:1a:4b:5c:2c:92:78:c3:2b:b6:31:52:09:a6:c0:ae:fb: 1a:c9:ba:db:80:3e:e8:e1:57:47:8b:a5:c9:b4:a7:d4:3f:6e: 2b:8a:a5:fb:0b:cc:d3:1c:06:cf:75:5c:5f:b1:88:df:9d:24: b2:cc:2c:4c:80:bf:d6:2e:1a:11:b3:c9:17:38:47:88:0b:56: 11:75:93:b9:d8:ef:b4:1e:88:42:b4:c1:cd:fa:88:c2:66:b5: 5c:12:68:20:e9:11:aa:d0:4d:81:c4:6c:95:df:22:2b:d7:81: 15:14:e7:a2 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAncfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMzA5MzM1OFoXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkI5RUYxMTAvBgNVBAUTKDM0RjQ2NzZDMDY2MzgzOTE0Nzk3M0Q0 Qzg2OUI0OURDOEM2NjQwRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC4CpmIXsc/BI5efBn9mEGNKL2BET5D2rrkonbqMNP93oEmg7u6NqoPmdKrKIO aE+kU45X1+iixdeRSKRO9df87caqdtpUc58ccr3t3ItvKGqLGLgDrxXSYRnPQbd5 qvZC+7DGPZTK0o4d0j3iwcaHQWnf2/kz9FLARn+xlG+WwtBWzUVh/og+JMsSf8lh TmDYJUpl9C08+L52jd2V09m07LAWNCMqgragtau/ug2SSAa5elsy1g6aNPrbV5VW bfynxkxs9k9sIEJDaWHmj6trdZtzg/1THJvX3vad936xEhq31f2hgDIhnU1ASwTv wmF7rALUc96wgY59gpTWwtp3AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUNPRnbAZj g5FHlz1MhptJ3IxmQPMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJCOUVGLzg3ODcyM0U2Qzg0RjExRjA4QkVCQ0QwQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCQjlFRi84Nzg3MjNFNkM4NEYxMUYwOEJFQkNEMEJDNEY5QUUwMi9OUFJuYkFa amc1RkhsejFNaHB0SjNJeG1RUE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlqdMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBK/j+MA8EAgAC MAkDBwAgAQ32J0AwDQYJKoZIhvcNAQELBQADggEBAEpL/MtW1Ehmq8VfqzwH5pk8 weI0z1td8lnYj941fhx8Dxm2yJ+bZhS+3GXBy6ZFSmtIclLRkRYYBzOfJzqECT6L GKnblU1VoV/qg5UXNslKTJ079n6mCce1GQ7wsXKQjvbBcNrIEdfDF+1+zQAC/0vO QlqY7ypeMqsnJtusPUQ4Uf/u8qOfbj+aoE/mrfLv7RFNGktcLJJ4wyu2MVIJpsCu +xrJutuAPujhV0eLpcm0p9Q/biuKpfsLzNMcBs91XF+xiN+dJLLMLEyAv9YuGhGz yRc4R4gLVhF1k7nY77QeiEK0wc36iMJmtVwSaCDpEarQTYHEbJXfIivXgRUU56I= -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:43 2025 by rpki-client