This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer File: T4ElgrV_TBLHNl5qp_D_yncQlJE.cer (raw, json) Hash identifier: 1aoMpLDWsxdlRXVghhFhH+jCx88c1enbaiiZTrmZ/+E= Subject key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02756E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 15 Nov 2025 14:20:50 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 43.246.220.0/22 IP: 103.35.208.0/22 IP: 2401:f840::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161134 (0x2756e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 15 14:20:50 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91B2D29, serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:33:ff:8f:17:94:17:88:72:00:10:ac:5f: e3:50:13:d1:98:97:b9:a8:af:1e:1c:56:fc:db:21: 9a:1d:63:19:11:fa:09:c4:d2:eb:88:b3:e6:5c:c1: 5a:81:d4:c9:db:d7:30:8c:f2:76:ad:09:3c:29:66: 8b:2a:d1:33:c9:bd:97:e1:b6:e4:7e:1f:51:9d:52: 22:88:08:f2:16:1c:29:0e:5a:6d:34:93:ee:f9:13: 9a:ea:a3:5c:18:0f:bd:42:1f:c3:ba:dc:90:be:92: c8:5a:a2:b7:c2:c6:30:51:af:54:ca:50:08:4e:e2: 1a:df:c9:6f:a3:53:e5:83:8e:70:c9:c7:ac:02:92: 80:36:42:7d:31:1b:57:46:60:6f:ed:6f:06:81:61: 52:cb:11:85:48:73:7a:db:95:84:51:99:eb:a7:4a: bd:64:01:97:0c:66:e1:8f:f1:72:44:13:17:53:bf: c1:45:05:e5:23:40:9a:5e:c9:4c:02:1e:30:4a:f9: 40:ff:98:24:6b:dd:43:50:5c:79:8d:f3:6b:f4:ff: fd:9a:e7:dc:b4:d1:6b:3c:fb:79:53:cf:e1:29:93: 55:3d:8e:92:40:73:bd:29:3c:8d:92:31:01:95:37: 4d:31:ed:c4:cf:ff:ce:1c:4a:06:9c:20:13:a5:48: a1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.220.0/22 103.35.208.0/22 IPv6: 2401:f840::/32 Signature Algorithm: sha256WithRSAEncryption 7a:a6:40:5e:82:23:f9:a9:fb:d2:04:f1:c9:bb:0a:be:bd:a9: fb:aa:74:83:a6:50:82:52:ee:f5:de:c5:26:dd:09:ab:14:57: 2e:4c:29:e9:bf:c6:12:6a:84:31:18:dd:df:6f:8a:e8:2a:2b: e3:e9:69:be:15:88:e9:64:da:0c:12:77:51:38:62:92:99:d0: 90:58:87:7c:85:3f:0c:bc:2c:5f:e3:62:d7:25:94:7b:f0:a8: 20:22:23:f9:d1:cd:ae:f1:83:ed:11:37:bc:e6:f4:64:94:0c: b4:4e:d5:21:e4:25:16:81:2a:09:49:40:3f:ad:58:ef:1d:06: c5:df:e3:b1:cc:fc:df:22:52:2c:1a:da:f9:85:ba:71:91:de: 25:bd:27:28:e9:a9:ce:a7:7f:1d:3f:31:80:bc:25:81:5d:e9: 49:b8:1b:65:fc:c6:21:da:54:14:f2:79:fe:4e:ea:c1:5c:2e: fd:33:d4:35:14:de:b4:8d:10:31:2e:1d:4b:60:db:53:96:2e: 11:17:96:1b:09:ca:f6:ce:d4:a9:d2:d7:8e:ee:a4:4d:ab:af: a6:a6:e9:cb:94:f4:e2:fd:a7:ae:fa:c9:a3:f1:33:ad:89:a1: e5:ca:0e:58:59:0e:e1:6b:2b:03:4a:b6:9d:86:79:0d:3c:2a: 67:89:d3:fd -----BEGIN CERTIFICATE----- MIIGEzCCBPugAwIBAgIDAnVuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNTE0MjA1MFoXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjJEMjkxMTAvBgNVBAUTKDRGODEyNTgyQjU3RjRDMTJDNzM2NUU2 QUE3RjBGRkNBNzcxMDk0OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkpjP/jxeUF4hyABCsX+NQE9GYl7morx4cVvzbIZodYxkR+gnE0uuIs+ZcwVqB 1Mnb1zCM8natCTwpZosq0TPJvZfhtuR+H1GdUiKICPIWHCkOWm00k+75E5rqo1wY D71CH8O63JC+kshaorfCxjBRr1TKUAhO4hrfyW+jU+WDjnDJx6wCkoA2Qn0xG1dG YG/tbwaBYVLLEYVIc3rblYRRmeunSr1kAZcMZuGP8XJEExdTv8FFBeUjQJpeyUwC HjBK+UD/mCRr3UNQXHmN82v0//2a59y00Ws8+3lTz+Epk1U9jpJAc70pPI2SMQGV N00x7cTP/84cSgacIBOlSKF1AgMBAAGjggMIMIIDBDAdBgNVHQ4EFgQUT4ElgrV/ TBLHNl5qp/D/yncQlJEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUIyRDI5L0Y3MUU3MTY2NTUyMTExRTVBREIyMDkyQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCMkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JW X1RCTEhObDVxcF9EX3luY1FsSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8EJTAj MBIEAgABMAwDBAIr9twDBAJnI9AwDQQCAAIwBwMFACQB+EAwDQYJKoZIhvcNAQEL BQADggEBAHqmQF6CI/mp+9IE8cm7Cr69qfuqdIOmUIJS7vXexSbdCasUVy5MKem/ xhJqhDEY3d9viugqK+Ppab4ViOlk2gwSd1E4YpKZ0JBYh3yFPwy8LF/jYtcllHvw qCAiI/nRza7xg+0RN7zm9GSUDLRO1SHkJRaBKglJQD+tWO8dBsXf47HM/N8iUiwa 2vmFunGR3iW9Jyjpqc6nfx0/MYC8JYFd6Um4G2X8xiHaVBTyef5O6sFcLv0z1DUU 3rSNEDEuHUtg21OWLhEXlhsJyvbO1KnS147upE2rr6am6cuU9OL9p676yaPxM62J oeXKDlhZDuFrKwNKtp2GeQ08KmeJ0/0= -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:43 2025 by rpki-client