This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqWspVx7NeP5Iru42qsdfYhw43M.cer File: OqWspVx7NeP5Iru42qsdfYhw43M.cer (raw, json) Hash identifier: MJgRR4GP8mmgevKDFAQZx7rd5CcjahUYeyNEYrZWGjE= Subject key identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A1C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft caRepository: rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 16:13:00 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 133152 IP: 43.229.132.0/22 IP: 103.253.72.0/22 IP: 2400:5780::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162332 (0x27a1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 16:13:00 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A915A533, serialNumber=3AA5ACA55C7B35E3F922BBB8DAAB1D7D8870E373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:55:e6:6c:7a:5b:20:86:9c:00:5e:55:ad:7f: 3b:86:f8:ba:12:a2:c3:39:14:73:98:ef:a0:c1:64: 76:d6:ed:27:99:99:b0:e9:15:7f:78:db:57:92:96: 74:72:a7:6e:15:b8:2f:9e:bb:24:44:29:14:4e:d2: 53:38:85:72:9e:c3:db:eb:bf:2b:ea:6a:1d:10:7f: bc:c0:0f:68:ae:ec:8e:78:7e:f6:6e:dc:d2:7a:3c: b2:9e:73:76:67:ce:50:75:b4:d1:21:df:35:10:4b: 88:11:5f:0f:50:d9:ee:a9:1d:bc:c9:75:ea:b9:d6: ea:7b:1d:ef:2c:97:36:3f:63:81:44:0f:21:40:d3: 7e:ab:be:f7:fd:41:f9:79:bf:26:9e:83:67:3f:7b: 58:5c:7a:23:5d:a2:fe:96:bf:17:b4:42:bd:75:d9: 6a:73:63:6d:4a:f7:69:90:e8:64:0a:cc:80:c4:d3: 69:8b:7c:5f:ab:24:b9:4e:f3:03:7e:97:83:0a:88: 41:14:95:b8:45:9d:2b:d1:bb:7e:f7:e3:6d:d5:35: dd:66:6f:44:03:ca:27:83:45:0b:42:c0:ef:cf:78: 74:65:b0:39:e9:60:4b:b9:b9:89:52:01:6a:94:b9: 43:78:43:54:ed:33:b0:9f:34:8b:19:fe:a1:9f:0b: c3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A5:AC:A5:5C:7B:35:E3:F9:22:BB:B8:DA:AB:1D:7D:88:70:E3:73 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915A533/4029978AF87D11ED94F17C57C4F9AE02/OqWspVx7NeP5Iru42qsdfYhw43M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133152 sbgp-ipAddrBlock: critical IPv4: 43.229.132.0/22 103.253.72.0/22 IPv6: 2400:5780::/32 Signature Algorithm: sha256WithRSAEncryption 3d:f7:b7:0f:b6:f0:32:f4:14:ab:82:21:61:c4:04:57:1a:ce: 16:43:f3:22:7a:54:d3:e6:72:81:bd:68:10:3b:2b:8b:5a:42: 1d:52:c9:42:e0:7e:36:4d:01:06:e7:3d:58:0d:b7:2a:af:53: f6:1d:c2:a1:f6:6c:14:3d:1c:bf:81:c5:4b:21:44:a4:fd:a5: ef:81:a7:32:51:97:3d:f9:f8:f8:ee:9a:ac:0f:a8:11:75:c7: 76:03:1f:df:7f:73:73:5d:f3:71:69:9a:90:f7:8b:e1:f2:e2: 00:14:86:c9:ec:f5:66:19:2f:19:f2:28:ac:39:c2:dd:a3:bf: a8:f5:a6:8d:1a:0a:2c:51:f9:e6:4e:69:0d:23:77:28:f6:87: f7:f6:f9:f9:97:d4:f1:75:e4:cd:e4:dd:b6:6c:fe:72:c7:90: a7:74:2e:81:90:93:30:5e:cd:41:56:57:00:5f:2d:5f:5e:83: 6c:63:70:5d:ca:0b:eb:1b:a4:a9:ff:64:74:ae:ff:51:c5:35: b6:7f:b9:94:23:63:23:a3:02:c4:0a:3a:6f:9a:e3:d0:70:62: 44:03:10:0b:e3:d1:da:95:09:bd:bf:c5:6a:27:20:3a:c9:87: f7:db:4a:3a:b3:d9:67:35:7d:d7:59:2e:4a:5c:e8:94:45:55: bd:7f:d6:da -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAnocMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTE2MTMwMFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNUE1MzMxMTAvBgNVBAUTKDNBQTVBQ0E1NUM3QjM1RTNGOTIyQkJC OERBQUIxRDdEODg3MEUzNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZVeZselsghpwAXlWtfzuG+LoSosM5FHOY76DBZHbW7SeZmbDpFX9421eSlnRy p24VuC+euyREKRRO0lM4hXKew9vrvyvqah0Qf7zAD2iu7I54fvZu3NJ6PLKec3Zn zlB1tNEh3zUQS4gRXw9Q2e6pHbzJdeq51up7He8slzY/Y4FEDyFA036rvvf9Qfl5 vyaeg2c/e1hceiNdov6Wvxe0Qr112WpzY21K92mQ6GQKzIDE02mLfF+rJLlO8wN+ l4MKiEEUlbhFnSvRu373423VNd1mb0QDyieDRQtCwO/PeHRlsDnpYEu5uYlSAWqU uUN4Q1TtM7CfNIsZ/qGfC8PZAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUOqWspVx7 NeP5Iru42qsdfYhw43MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVBNTMzLzQwMjk5NzhBRjg3RDExRUQ5NEYxN0M1N0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1QTUzMy80MDI5OTc4QUY4N0QxMUVEOTRGMTdDNTdDNEY5QUUwMi9PcVdzcFZ4 N05lUDVJcnU0MnFzZGZZaHc0M00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgggMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCK+WEAwQCZ/1I MA0EAgACMAcDBQAkAFeAMA0GCSqGSIb3DQEBCwUAA4IBAQA997cPtvAy9BSrgiFh xARXGs4WQ/MielTT5nKBvWgQOyuLWkIdUslC4H42TQEG5z1YDbcqr1P2HcKh9mwU PRy/gcVLIUSk/aXvgacyUZc9+fj47pqsD6gRdcd2Ax/ff3NzXfNxaZqQ94vh8uIA FIbJ7PVmGS8Z8iisOcLdo7+o9aaNGgosUfnmTmkNI3co9of39vn5l9TxdeTN5N22 bP5yx5CndC6BkJMwXs1BVlcAXy1fXoNsY3BdygvrG6Sp/2R0rv9RxTW2f7mUI2Mj owLECjpvmuPQcGJEAxAL49HalQm9v8VqJyA6yYf320o6s9lnNX3XWS5KXOiURVW9 f9ba -----END CERTIFICATE-----Generated at Sun Dec 7 00:52:00 2025 by rpki-client