This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAV55XydHpSk4-TgZlZmIOww4qc.cer File: TAV55XydHpSk4-TgZlZmIOww4qc.cer (raw, json) Hash identifier: uqkPAdHOaw+OsvKdZ2mqhgBJf5K+dMtCmv+G7ia+XeU= Subject key identifier: 4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027BF9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft caRepository: rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 16:36:19 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 103.203.190.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162809 (0x27bf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 16:36:19 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A917C34D, serialNumber=4C0579E57C9D1E94A4E3E4E066566620EC30E2A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:77:67:a2:20:34:a1:77:63:26:3b:f0:9a:9d: e6:1d:73:ee:e0:60:b5:08:13:2d:af:1a:e8:28:38: d3:22:af:1a:1f:64:2c:df:32:5a:44:4f:2b:45:f8: 3a:61:d9:a2:fd:9b:10:2d:cf:a4:4c:7a:38:f2:e0: 0c:95:8f:7c:59:02:cb:76:c9:c9:31:e0:02:b7:5f: bd:e4:49:42:86:e5:f1:f0:a3:05:90:db:29:8d:eb: ed:0b:5f:ef:d8:42:23:65:2f:0b:31:28:56:a1:42: c9:90:23:22:69:22:40:44:2e:06:84:1d:b8:9f:ca: bf:33:bf:25:b9:2a:a1:83:08:49:ae:d0:b3:2c:32: 06:0a:c0:b0:77:2a:5e:0b:ac:ba:0f:52:20:72:bd: d5:41:2c:69:ec:78:a9:dc:73:2f:f1:ed:3f:fb:05: 62:ce:86:a1:c9:80:51:0a:df:0f:d2:a2:dc:6b:27: bf:ae:7e:c9:b9:43:7d:96:f0:45:75:bc:67:0b:b6: d5:69:b0:ad:15:7b:7a:ea:c5:c2:b0:f4:9f:58:bb: 9b:39:24:bd:d1:94:ef:62:5e:7b:42:d9:a4:7d:f4: 8c:ba:13:db:dc:94:a3:0b:b5:1f:25:d4:22:6d:66: 06:a4:9a:ea:68:28:4f:71:d2:49:97:50:ad:62:87: d0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:05:79:E5:7C:9D:1E:94:A4:E3:E4:E0:66:56:66:20:EC:30:E2:A7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C34D/F4F049186B4211EB9D2C192CC4F9AE02/TAV55XydHpSk4-TgZlZmIOww4qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.203.190.0/23 Signature Algorithm: sha256WithRSAEncryption 03:93:54:5e:33:c3:ee:1e:e1:b8:7a:da:27:e0:86:9a:6c:5e: 43:a3:79:56:88:1a:91:ee:8b:46:67:e0:46:72:9e:28:bd:0d: 75:c1:09:eb:d8:83:99:73:5d:e8:a5:68:bc:1b:89:84:84:98: ec:ed:3a:06:55:06:10:bc:c8:e4:1d:74:ad:41:1d:eb:a5:08: 19:ec:5c:4e:29:48:be:d1:84:a1:21:cc:0b:4e:9a:13:9c:0b: cb:29:ce:d9:be:9b:e2:41:2e:73:96:dc:0d:14:91:2c:cd:d1: c5:29:81:2f:05:63:51:66:0f:26:d0:1d:4e:da:09:f4:5c:9c: 76:30:ab:a9:da:24:a5:85:96:b6:0f:18:33:fd:b0:4a:7b:5c: 21:02:2b:ac:a8:10:57:b4:97:14:96:a4:8f:23:95:4d:19:31: 51:a4:68:2e:a7:e8:87:ee:5c:4d:07:aa:a8:1d:21:dd:6b:51: ff:21:8b:49:2a:ff:c3:78:3a:a9:8a:e1:6b:80:07:6f:93:b4: 01:ed:d4:01:13:ea:1b:c9:11:c7:a6:88:b7:6b:6e:8b:cb:94: 7d:f6:47:04:4f:31:62:c6:e8:7c:37:d0:5a:3d:57:23:67:02: 2f:1c:89:b0:84:a4:74:aa:a4:6d:27:bf:44:71:0e:ab:bc:49: 25:c0:f4:29 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAnv5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDE2MzYxOVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxN0MzNEQxMTAvBgNVBAUTKDRDMDU3OUU1N0M5RDFFOTRBNEUzRTRF MDY2NTY2NjIwRUMzMEUyQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkd2eiIDShd2MmO/CaneYdc+7gYLUIEy2vGugoONMirxofZCzfMlpETytF+Dph 2aL9mxAtz6RMejjy4AyVj3xZAst2yckx4AK3X73kSUKG5fHwowWQ2ymN6+0LX+/Y QiNlLwsxKFahQsmQIyJpIkBELgaEHbifyr8zvyW5KqGDCEmu0LMsMgYKwLB3Kl4L rLoPUiByvdVBLGnseKnccy/x7T/7BWLOhqHJgFEK3w/SotxrJ7+ufsm5Q32W8EV1 vGcLttVpsK0Ve3rqxcKw9J9Yu5s5JL3RlO9iXntC2aR99Iy6E9vclKMLtR8l1CJt ZgakmupoKE9x0kmXUK1ih9BdAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUTAV55Xyd HpSk4+TgZlZmIOww4qcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdDMzREL0Y0RjA0OTE4NkI0MjExRUI5RDJDMTkyQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3QzM0RC9GNEYwNDkxODZCNDIxMUVCOUQyQzE5MkNDNEY5QUUwMi9UQVY1NVh5 ZEhwU2s0LVRnWmxabUlPd3c0cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAFny74wDQYJKoZIhvcNAQELBQADggEBAAOTVF4zw+4e4bh62ifg hppsXkOjeVaIGpHui0Zn4EZynii9DXXBCevYg5lzXeilaLwbiYSEmOztOgZVBhC8 yOQddK1BHeulCBnsXE4pSL7RhKEhzAtOmhOcC8spztm+m+JBLnOW3A0UkSzN0cUp gS8FY1FmDybQHU7aCfRcnHYwq6naJKWFlrYPGDP9sEp7XCECK6yoEFe0lxSWpI8j lU0ZMVGkaC6n6IfuXE0HqqgdId1rUf8hi0kq/8N4OqmK4WuAB2+TtAHt1AET6hvJ EcemiLdrbovLlH32RwRPMWLG6Hw30Fo9VyNnAi8cibCEpHSqpG0nv0RxDqu8SSXA 9Ck= -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:27 2025 by rpki-client