This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer File: UK8aopMCL3bNH1G6DdWKW4lmkVo.cer (raw, json) Hash identifier: o6j2Y81Hx0FZbBG6CoGMmBHBxfZrQFQNXvK2+qHm+mY= Subject key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0278EC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft caRepository: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 28 Nov 2025 05:34:40 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 141518 IP: 103.160.192.0/24 IP: 114.129.10.0/23 IP: 2400:1b20::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162028 (0x278ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 28 05:34:40 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a9:26:0c:10:66:f9:af:42:97:60:c7:4b:d2: 10:16:ef:b7:dc:51:f9:a9:f0:0a:fc:ee:fc:74:4e: 8a:ae:bf:11:92:c1:dd:ad:e6:22:cf:6f:9d:36:a6: 41:c3:d9:df:cb:6f:dc:03:c5:52:d7:91:44:3e:f0: 66:9d:13:de:b3:75:90:b0:94:fe:ca:6d:ec:fd:b9: aa:17:e2:0b:9e:b6:5b:87:4e:69:4d:12:8b:d8:5c: bf:fe:bc:a7:b2:d4:99:6b:09:20:78:17:0f:f1:12: 46:e6:9a:1b:0e:51:83:ec:37:5c:e9:27:b2:da:4c: dc:a9:a1:00:3d:49:7a:fe:09:3b:9c:ec:ec:d0:9a: 4d:1b:14:99:6a:39:a9:8c:90:12:79:4a:e5:65:e1: 08:67:d4:8d:62:48:02:55:59:38:e9:8f:64:2f:51: 7f:9c:08:60:4e:27:6e:ea:21:00:80:79:94:f6:df: 71:00:52:a1:67:9a:a1:a9:74:ee:f1:76:f0:e4:11: a6:c4:24:eb:55:c5:1b:56:24:c8:dd:76:4c:3a:35: 6a:7f:1f:70:ef:80:01:62:9e:24:06:3e:ff:bd:b0: 24:55:59:82:da:37:3d:a6:cd:fe:71:3b:ae:14:00: 17:68:27:29:38:0e:0f:90:f4:2a:04:23:3d:1f:19: 6c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141518 sbgp-ipAddrBlock: critical IPv4: 103.160.192.0/24 114.129.10.0/23 IPv6: 2400:1b20::/32 Signature Algorithm: sha256WithRSAEncryption 66:c3:1e:65:e9:c8:e7:6e:02:8d:5e:b7:58:41:7b:83:58:83: a3:a8:a1:24:f7:46:38:4a:82:58:a7:af:12:cb:ed:35:bb:0b: 63:31:4c:ae:69:18:c1:64:7b:d2:31:ea:c2:75:94:d8:6d:18: d3:d8:09:0a:e2:34:58:92:67:02:0e:81:93:9b:50:52:e4:74: 33:2c:e2:b5:3b:a2:a7:21:9d:39:c0:e2:71:99:d7:98:41:cc: df:f5:9b:25:72:a1:77:35:6b:99:df:8f:52:9d:56:43:18:5e: ea:3d:10:3e:7b:60:0a:5c:da:3a:e7:08:25:35:b6:f1:b2:8b: 58:ff:c0:69:34:cf:d9:66:1f:fd:d0:59:95:4d:53:70:a5:a8: aa:4a:a8:03:82:34:68:61:3c:d0:9c:8b:b5:1e:c0:27:24:86: 3b:20:da:71:77:70:81:d0:e9:aa:22:08:41:3e:e9:f5:e7:5f: db:e4:97:10:0a:cf:b4:16:5c:b5:19:4b:bb:5f:aa:26:ca:62: 80:c1:e6:08:9e:ed:e4:65:1c:f7:2c:15:89:3d:01:b1:58:66: f4:db:24:3f:e1:24:3c:5a:8e:71:4f:51:21:c7:8a:c3:c1:89: da:34:8f:ce:48:89:e9:41:1a:60:3e:71:75:28:c0:db:0c:c1: 47:2b:1a:19 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAnjsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyODA1MzQ0MFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNUFDMzYxMTAvBgNVBAUTKDUwQUYxQUEyOTMwMjJGNzZDRDFGNTFC QTBERDU4QTVCODk2NjkxNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXqSYMEGb5r0KXYMdL0hAW77fcUfmp8Ar87vx0ToquvxGSwd2t5iLPb502pkHD 2d/Lb9wDxVLXkUQ+8GadE96zdZCwlP7Kbez9uaoX4guetluHTmlNEovYXL/+vKey 1JlrCSB4Fw/xEkbmmhsOUYPsN1zpJ7LaTNypoQA9SXr+CTuc7OzQmk0bFJlqOamM kBJ5SuVl4Qhn1I1iSAJVWTjpj2QvUX+cCGBOJ27qIQCAeZT233EAUqFnmqGpdO7x dvDkEabEJOtVxRtWJMjddkw6NWp/H3DvgAFiniQGPv+9sCRVWYLaNz2mzf5xO64U ABdoJyk4Dg+Q9CoEIz0fGWwbAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUUK8aopMC L3bNH1G6DdWKW4lmkVowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVBQzM2L0VEMEM4MUEwQ0MxQjExRjA5QURBOEYyQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1QUMzNi9FRDBDODFBMENDMUIxMUYwOUFEQThGMkNDNEY5QUUwMi9VSzhhb3BN Q0wzYk5IMUc2RGRXS1c0bG1rVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAijOMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAZ6DAAwQBcoEK MA0EAgACMAcDBQAkABsgMA0GCSqGSIb3DQEBCwUAA4IBAQBmwx5l6cjnbgKNXrdY QXuDWIOjqKEk90Y4SoJYp68Sy+01uwtjMUyuaRjBZHvSMerCdZTYbRjT2AkK4jRY kmcCDoGTm1BS5HQzLOK1O6KnIZ05wOJxmdeYQczf9ZslcqF3NWuZ349SnVZDGF7q PRA+e2AKXNo65wglNbbxsotY/8BpNM/ZZh/90FmVTVNwpaiqSqgDgjRoYTzQnIu1 HsAnJIY7INpxd3CB0OmqIghBPun151/b5JcQCs+0Fly1GUu7X6omymKAweYInu3k ZRz3LBWJPQGxWGb02yQ/4SQ8Wo5xT1Ehx4rDwYnaNI/OSInpQRpgPnF1KMDbDMFH KxoZ -----END CERTIFICATE-----Generated at Sat Dec 6 18:07:18 2025 by rpki-client