This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer File: TiH1qoySjAtnV8A-VbClkjxOSKs.cer (raw, json) Hash identifier: J2OdHHbrPP0R2QisRu2XszgQTr48xD2hNwh1oiLUwTg= Subject key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027566 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft caRepository: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 15 Nov 2025 13:23:00 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 151848 IP: 202.77.138.0/23 IP: 2001:df3:3c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161126 (0x27566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 15 13:23:00 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:2b:94:16:ef:2b:ee:c2:43:ea:a5:09:49: 18:5b:d5:82:ab:33:e3:9f:61:b5:8d:56:b0:97:4d: fe:d4:6e:21:80:e6:c0:53:70:41:4a:e7:20:71:59: 3e:4f:bc:c5:74:48:04:68:bc:96:fa:29:04:99:db: 69:9d:bf:01:f1:d1:02:ea:b4:60:29:21:56:4f:f1: 88:98:a9:27:c3:29:3f:1d:0c:c8:1f:71:98:46:a3: 35:88:74:9b:0b:49:52:7c:92:42:70:ca:fc:67:c3: a2:6a:ce:42:a0:cd:10:c2:cd:35:0a:74:30:18:51: 3e:bb:e5:04:9f:95:91:bf:60:d3:08:07:b3:3a:3e: 58:e7:b8:ec:20:65:d8:d2:7f:3f:42:0c:33:d0:9c: 2b:bc:82:62:f2:1e:8e:86:f1:b4:af:1e:bd:89:bf: 42:0a:76:4f:28:0e:aa:06:07:66:aa:96:b1:29:c7: 80:23:88:ad:d0:a6:8c:7d:cb:7a:3f:2e:3e:97:99: 59:fa:e3:94:a0:f1:ea:6d:06:c2:7f:a8:79:ac:d5: ba:fb:15:0b:f8:c2:7e:ce:ff:0c:59:a3:75:4e:7c: f1:df:30:04:77:93:75:64:b3:51:f6:4d:23:78:14: 6b:21:23:d0:53:70:94:cf:54:2a:60:a9:2d:a0:f0: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151848 sbgp-ipAddrBlock: critical IPv4: 202.77.138.0/23 IPv6: 2001:df3:3c0::/48 Signature Algorithm: sha256WithRSAEncryption c3:1a:c1:7d:cb:70:a7:5c:a7:f6:87:01:51:c5:07:39:64:92: 11:36:94:30:02:c1:ff:f0:ad:51:58:1e:5e:b2:81:4b:ef:dc: f8:3a:e8:69:07:08:0f:3e:58:d4:77:30:e0:af:80:ee:19:f7: f2:32:f8:71:94:30:6b:3a:16:12:31:01:ee:86:de:c7:d4:df: 7f:d9:7e:28:c6:fb:0d:59:2a:60:41:84:69:81:4e:af:4c:1a: db:a6:25:5a:38:2b:9d:09:90:fa:cb:32:e5:b5:61:15:44:65: 78:19:4b:e8:96:e1:06:a7:15:b5:04:b2:0b:7c:1b:40:4a:02: f9:1c:04:16:78:00:2d:bf:49:3a:29:0c:fc:11:63:45:52:dd: 5d:be:67:6e:5c:94:68:a0:4b:ff:bd:65:58:b3:07:de:32:32: 26:4c:1d:d2:2f:d7:2a:62:ea:e3:a1:db:7b:13:43:5e:74:14: 1f:54:0f:a8:af:a4:e0:7c:3b:4f:e0:d2:07:bf:46:69:a2:7e: f5:5e:7e:07:2d:cc:18:76:d2:7e:4e:4e:ed:d9:53:7c:2e:ef: dc:f9:f1:c6:64:22:f2:0d:56:6b:b7:37:6c:91:e2:22:7d:66: 06:2d:10:d1:21:54:f5:cb:99:e9:cf:db:dc:32:77:d9:4a:ab: 15:54:21:ee -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnVmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNTEzMjMwMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxODBENzkxMTAvBgNVBAUTKDRFMjFGNUFBOEM5MjhDMEI2NzU3QzAz RTU1QjBBNTkyM0M0RTQ4QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC68CuUFu8r7sJD6qUJSRhb1YKrM+OfYbWNVrCXTf7UbiGA5sBTcEFK5yBxWT5P vMV0SARovJb6KQSZ22mdvwHx0QLqtGApIVZP8YiYqSfDKT8dDMgfcZhGozWIdJsL SVJ8kkJwyvxnw6JqzkKgzRDCzTUKdDAYUT675QSflZG/YNMIB7M6PljnuOwgZdjS fz9CDDPQnCu8gmLyHo6G8bSvHr2Jv0IKdk8oDqoGB2aqlrEpx4AjiK3Qpox9y3o/ Lj6XmVn645Sg8eptBsJ/qHms1br7FQv4wn7O/wxZo3VOfPHfMAR3k3Vks1H2TSN4 FGshI9BTcJTPVCpgqS2g8MEdAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUTiH1qoyS jAtnV8A+VbClkjxOSKswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTgwRDc5L0UxODIwOEJDNkQ5QzExRUVBMDJCQkIwRUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4MEQ3OS9FMTgyMDhCQzZEOUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95 U2pBdG5WOEEtVmJDbGtqeE9TS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlEoMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQByk2KMA8EAgAC MAkDBwAgAQ3zA8AwDQYJKoZIhvcNAQELBQADggEBAMMawX3LcKdcp/aHAVHFBzlk khE2lDACwf/wrVFYHl6ygUvv3Pg66GkHCA8+WNR3MOCvgO4Z9/Iy+HGUMGs6FhIx Ae6G3sfU33/ZfijG+w1ZKmBBhGmBTq9MGtumJVo4K50JkPrLMuW1YRVEZXgZS+iW 4QanFbUEsgt8G0BKAvkcBBZ4AC2/STopDPwRY0VS3V2+Z25clGigS/+9ZVizB94y MiZMHdIv1ypi6uOh23sTQ150FB9UD6ivpOB8O0/g0ge/RmmifvVefgctzBh20n5O Tu3ZU3wu79z58cZkIvINVmu3N2yR4iJ9ZgYtENEhVPXLmenP29wyd9lKqxVUIe4= -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:31 2025 by rpki-client