This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer File: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer (raw, json) Hash identifier: nN+rUr7XOT7I4P4IanG/tT838xa2icIxdVb/et/Cmrc= Subject key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0274DC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft caRepository: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 13 Nov 2025 01:12:43 +0000 Certificate not after: Wed 30 Sep 2026 00:00:00 +0000 Subordinate resources: AS: 140711 IP: 103.152.18.0/23 IP: 2406:25c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160988 (0x274dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 13 01:12:43 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=A9150A9C, serialNumber=367E1FAF752C631FC43D872098240E80321575C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b5:34:44:1e:02:52:aa:c8:d0:1b:32:36:ac: 10:bf:80:b4:94:ea:99:e3:b7:8c:7e:07:8a:8c:a8: b8:41:84:21:4a:14:2f:64:cd:14:11:f2:05:19:00: a1:1c:b9:5d:d4:68:6b:68:2b:42:e1:cc:05:59:72: b2:37:79:2a:4f:25:e5:b8:d2:02:b8:77:51:a9:6e: 44:c8:7c:21:35:34:b6:25:af:aa:86:74:16:50:03: 20:47:41:01:35:ef:bc:25:f7:4b:4f:0a:49:a1:7e: 86:a8:cc:6a:57:23:a7:4c:c8:2f:3d:f7:02:c0:97: 0c:e1:54:aa:09:12:db:e5:27:81:ae:ea:da:3a:c7: af:16:b4:8b:69:41:4e:bc:47:0d:64:6e:91:02:08: d7:4c:a3:0a:6f:54:03:91:69:4a:fa:25:4c:4f:fd: a5:66:46:ec:6a:f7:0e:2e:27:2d:84:b3:0e:ec:d8: 80:6f:16:40:42:3a:56:84:03:4e:91:71:f0:02:0a: 06:2b:57:dd:53:0c:c2:ac:d4:b4:81:e0:b0:a6:29: 6c:de:63:6d:a8:8f:7d:7e:a8:d8:75:64:a6:44:bc: fc:82:58:72:fd:d6:e5:4a:06:8e:aa:5e:cb:6e:6d: aa:1d:33:12:72:57:9a:2a:ac:f3:f4:c2:5b:2c:6e: 6c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 140711 sbgp-ipAddrBlock: critical IPv4: 103.152.18.0/23 IPv6: 2406:25c0::/32 Signature Algorithm: sha256WithRSAEncryption a5:01:51:29:cb:97:02:97:86:f1:e5:63:fc:f5:47:92:d9:ba: ef:4a:3a:b8:47:4b:10:6e:db:14:e8:92:a7:93:35:b4:0e:25: 54:e0:f7:a0:05:cd:78:ad:31:ad:ed:b5:e8:0f:48:25:20:7a: 55:86:61:ba:27:04:cb:52:87:66:de:da:ee:da:43:82:4c:f8: 51:72:09:6d:cf:ea:4e:2d:33:24:d0:af:de:30:56:27:03:90: 6c:33:f7:ea:e5:d6:d7:c8:00:c9:05:b8:1d:f2:ef:7e:83:19: d5:c3:4f:91:64:7b:85:3e:14:f7:78:db:de:16:e9:39:bf:4a: a6:63:4b:95:7c:cf:f4:78:50:6d:70:bf:a8:8c:b1:6e:8b:d3: d2:06:69:52:8b:ce:17:fc:94:d7:87:44:42:5d:5e:7c:1e:ac: 5a:8d:09:e4:b8:df:0a:24:92:ed:1b:75:7a:41:5d:5c:33:aa: 32:9a:5c:9c:0a:a7:8b:31:82:6b:ad:f4:f3:c6:66:c2:83:47: cd:00:54:37:38:8d:4f:dd:25:fe:2b:d2:07:c3:81:2c:a4:40: 4c:ee:82:fc:8f:74:71:21:a9:3a:0c:f0:66:fd:af:b5:04:6c: 42:ef:ee:e2:2d:b8:35:90:3a:10:6b:97:31:77:bb:c5:50:f8: 80:54:f6:b0 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnTcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMzAxMTI0M1oXDTI2MDkzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTBBOUMxMTAvBgNVBAUTKDM2N0UxRkFGNzUyQzYzMUZDNDNEODcy MDk4MjQwRTgwMzIxNTc1QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCtTREHgJSqsjQGzI2rBC/gLSU6pnjt4x+B4qMqLhBhCFKFC9kzRQR8gUZAKEc uV3UaGtoK0LhzAVZcrI3eSpPJeW40gK4d1GpbkTIfCE1NLYlr6qGdBZQAyBHQQE1 77wl90tPCkmhfoaozGpXI6dMyC899wLAlwzhVKoJEtvlJ4Gu6to6x68WtItpQU68 Rw1kbpECCNdMowpvVAORaUr6JUxP/aVmRuxq9w4uJy2Esw7s2IBvFkBCOlaEA06R cfACCgYrV91TDMKs1LSB4LCmKWzeY22oj31+qNh1ZKZEvPyCWHL91uVKBo6qXstu baodMxJyV5oqrPP0wlssbmwNAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUNn4fr3Us Yx/EPYcgmCQOgDIVdccwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTUwQTlDLzJBMjk0ODRDQUJBODExRUE5NUNFMkMxNkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1MEE5Qy8yQTI5NDg0Q0FCQTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNV c1l4X0VQWWNnbUNRT2dESVZkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiWnMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5gSMA0EAgAC MAcDBQAkBiXAMA0GCSqGSIb3DQEBCwUAA4IBAQClAVEpy5cCl4bx5WP89UeS2brv Sjq4R0sQbtsU6JKnkzW0DiVU4PegBc14rTGt7bXoD0glIHpVhmG6JwTLUodm3tru 2kOCTPhRcgltz+pOLTMk0K/eMFYnA5BsM/fq5dbXyADJBbgd8u9+gxnVw0+RZHuF PhT3eNveFuk5v0qmY0uVfM/0eFBtcL+ojLFui9PSBmlSi84X/JTXh0RCXV58Hqxa jQnkuN8KJJLtG3V6QV1cM6oymlycCqeLMYJrrfTzxmbCg0fNAFQ3OI1P3SX+K9IH w4EspEBM7oL8j3RxIak6DPBm/a+1BGxC7+7iLbg1kDoQa5cxd7vFUPiAVPaw -----END CERTIFICATE-----Generated at Sat Dec 6 10:36:06 2025 by rpki-client