This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer File: QgBM9ryh-lZCT17qJPYqkrJc3s8.cer (raw, json) Hash identifier: MeV5N60c8eUuhlsd8r5aPAKPpA3erFOuu9kNhzIXC+k= Subject key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02792B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft caRepository: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 29 Nov 2025 00:33:48 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 141342 AS: 152638 IP: 103.157.40.0/23 IP: 2400:8220::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162091 (0x2792b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 29 00:33:48 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:b2:6e:f0:ca:b1:cb:79:11:6b:7f:21:db: 5c:27:5f:65:22:d0:37:89:61:fe:40:8f:ab:66:b3: 69:64:f6:00:f1:d1:37:e4:f5:b1:cc:5e:13:d6:91: 77:ea:0f:de:c6:fb:55:c2:83:78:e8:90:c3:89:d1: ee:00:ba:8c:f6:25:0f:bc:e0:ac:fd:41:c5:34:0c: f3:13:08:5a:4a:9e:55:13:e2:5d:e3:6e:c9:ad:44: 10:5a:4c:2c:59:78:e7:74:85:20:9b:e2:24:bb:50: 32:c7:f5:de:25:fa:05:83:bd:1a:01:bd:9f:a2:23: aa:4f:ba:aa:9f:73:55:05:8a:5a:61:b8:55:dc:ba: 04:6a:5a:4a:87:87:9d:e5:4d:b1:33:aa:75:3a:65: 68:c8:b6:d9:96:52:8e:81:75:ec:92:af:a3:4c:86: 11:84:d1:23:d9:0e:52:6e:69:27:b9:7f:3f:99:82: 85:d6:5d:39:d3:f7:e1:8a:e7:8f:e8:0d:0f:27:4f: 5a:96:0f:f6:b7:ca:94:24:07:3e:4e:96:69:2a:4f: ed:5a:11:e4:f3:66:42:07:d5:d0:6b:d1:1b:ef:b9: 8a:ea:91:53:62:53:7e:54:bc:fc:f1:7c:1c:00:17: e8:97:9a:29:3a:fd:77:12:70:9f:ca:84:23:5c:1d: 60:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141342 152638 sbgp-ipAddrBlock: critical IPv4: 103.157.40.0/23 IPv6: 2400:8220::/32 Signature Algorithm: sha256WithRSAEncryption cf:6d:e9:ee:26:92:c7:ea:30:9f:25:b7:65:86:05:6b:bb:4a: 80:fa:e4:fb:2f:00:f3:00:61:18:7a:ce:f3:b6:f5:6f:cb:5a: 05:a7:eb:b1:7e:09:9f:2f:a1:bb:1d:72:46:29:18:62:de:d5: cb:86:bc:71:84:29:3b:33:af:78:2d:ab:9f:29:61:dc:bc:45: 74:2f:76:46:50:64:50:bc:f4:63:fd:c3:25:2d:d4:34:b7:9a: 84:63:47:f2:aa:d4:ac:23:c7:65:17:df:fc:29:2b:e8:41:25: 95:57:89:bc:d2:77:06:58:f6:c2:a4:04:c5:5d:9b:41:71:2d: 8c:65:3e:c1:6e:36:e3:5e:a4:f0:63:f0:e3:94:14:27:3a:4f: 50:07:29:c5:37:be:97:5f:72:88:de:4c:67:df:a6:a3:67:4e: 72:20:66:81:9b:f4:a8:d6:35:ea:e0:83:d4:fa:91:4d:d2:b0: 63:84:6b:6b:8f:d9:60:9f:b9:a0:a8:ba:e6:8d:fb:0c:b8:62: 5f:c0:fa:7e:3e:ba:63:99:4c:04:79:3e:c4:72:8b:b6:f1:d7: 66:c7:ad:9e:ca:92:15:27:1b:d7:ac:ea:a1:d0:f1:51:45:bc: 0a:f4:62:5c:e4:ea:2b:6c:d3:f3:4b:43:9e:54:2c:35:11:1d: 69:9a:2b:5b -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIDAnkrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyOTAwMzM0OFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVF QTI0RjYyQTkyQjI1Q0RFQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9mLJu8Mqxy3kRa38h21wnX2Ui0DeJYf5Aj6tms2lk9gDx0Tfk9bHMXhPWkXfq D97G+1XCg3jokMOJ0e4Auoz2JQ+84Kz9QcU0DPMTCFpKnlUT4l3jbsmtRBBaTCxZ eOd0hSCb4iS7UDLH9d4l+gWDvRoBvZ+iI6pPuqqfc1UFilphuFXcugRqWkqHh53l TbEzqnU6ZWjIttmWUo6BdeySr6NMhhGE0SPZDlJuaSe5fz+ZgoXWXTnT9+GK54/o DQ8nT1qWD/a3ypQkBz5OlmkqT+1aEeTzZkIH1dBr0RvvuYrqkVNiU35UvPzxfBwA F+iXmik6/XcScJ/KhCNcHWCtAgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQUQgBM9ryh +lZCT17qJPYqkrJc3s8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk5NjBEL0JEMEI2NEM2OEREQTExRUQ4NzNBNzQ4N0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5OTYwRC9CRDBCNjRDNjhEREExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5 aC1sWkNUMTdxSlBZcWtySmMzczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAigeAgMCVD4wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFnnSgw DQQCAAIwBwMFACQAgiAwDQYJKoZIhvcNAQELBQADggEBAM9t6e4mksfqMJ8lt2WG BWu7SoD65PsvAPMAYRh6zvO29W/LWgWn67F+CZ8vobsdckYpGGLe1cuGvHGEKTsz r3gtq58pYdy8RXQvdkZQZFC89GP9wyUt1DS3moRjR/Kq1Kwjx2UX3/wpK+hBJZVX ibzSdwZY9sKkBMVdm0FxLYxlPsFuNuNepPBj8OOUFCc6T1AHKcU3vpdfcojeTGff pqNnTnIgZoGb9KjWNergg9T6kU3SsGOEa2uP2WCfuaCouuaN+wy4Yl/A+n4+umOZ TAR5PsRyi7bx12bHrZ7KkhUnG9es6qHQ8VFFvAr0Ylzk6its0/NLQ55ULDURHWma K1s= -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:42 2025 by rpki-client