This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer File: XS3RVLXc4h-3hsUm297xsEWSirg.cer (raw, json) Hash identifier: bVLSeK8fH+B4ARt8v4w1ggXmTeTP7fJ/AAyqvNbxXkQ= Subject key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0279D7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 00:28:21 +0000 Certificate not after: Thu 28 May 2026 00:00:00 +0000 Subordinate resources: AS: 7707 AS: 9299 AS: 17796 AS: 24458 AS: 45664 AS: 131180 AS: 132508 AS: 132803 AS: 133754 AS: 134140 AS: 134154 AS: 134779 AS: 135499 AS: 135592 AS: 136227 AS: 137202 AS: 137417 AS: 137459 AS: 138036 AS: 139040 AS: 139350 AS: 139639 AS: 139710 AS: 139867 AS: 141238 AS: 142648 AS: 147044 AS: 149519 AS: 152891 IP: 27.110.128.0/17 IP: 45.125.248.0/22 IP: 49.144.0.0/13 IP: 58.69.0.0/16 IP: 58.71.0.0/17 IP: 103.10.178.0/23 IP: 103.233.36.0/22 IP: 112.200.0.0 -- 112.211.255.255 IP: 115.146.160.0 -- 115.147.255.255 IP: 119.92.0.0/14 IP: 122.2.0.0/15 IP: 122.52.0.0/14 IP: 124.83.0.0/17 IP: 124.104.0.0/14 IP: 124.217.0.0/17 IP: 180.192.0.0/14 IP: 202.86.200.0/21 IP: 202.138.128.0/18 IP: 203.213.192.0/19 IP: 210.1.64.0/19 IP: 210.5.64.0/18 IP: 210.14.0.0/19 IP: 210.185.176.0/20 IP: 210.213.64.0 -- 210.213.255.255 IP: 2001:4450::/29 IP: 2400:f200::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162263 (0x279d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 00:28:21 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ce:06:82:a6:89:2b:9f:d5:85:90:d5:61:c5: ce:bc:c2:a8:fe:7c:d2:6b:74:24:4f:6a:af:cd:a2: f1:9f:5b:f5:bb:fb:77:c0:64:57:51:76:86:6f:2e: c8:4c:79:5d:f6:99:a7:a9:52:e3:6b:ea:54:a3:af: 15:7d:36:d7:f6:b7:55:6f:57:e3:eb:9e:4f:3b:76: be:70:04:f0:8e:a9:5d:e4:75:d1:88:e5:9b:df:76: e2:17:67:68:c7:43:f1:0a:a2:e1:dc:0e:0e:92:77: 51:70:3d:30:88:c3:5a:a7:26:71:db:58:f8:cd:25: 72:0d:02:6c:22:23:5b:b5:91:6e:47:7b:5b:f7:2e: f7:d6:58:d1:c4:e7:21:b7:a4:2d:77:9c:81:33:b2: ea:ec:df:fa:c2:ec:5e:65:15:0d:1f:01:3e:a8:c6: ad:af:8f:82:e8:49:26:36:50:ef:e0:f0:cc:c2:3a: ed:ef:9a:af:19:06:c2:4f:bd:54:a8:15:54:ab:d2: 57:b9:e1:a5:8d:f4:b5:0a:e4:0e:c5:07:8c:e8:d7: 1c:0a:55:96:aa:5e:aa:dc:77:44:3d:4e:8f:3d:f3: af:b3:ca:a4:bc:26:2b:95:25:d2:e4:d8:c4:12:28: 33:63:a5:64:9e:25:1a:1b:62:04:98:3d:9d:64:54: 4e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 7707 9299 17796 24458 45664 131180 132508 132803 133754 134140 134154 134779 135499 135592 136227 137202 137417 137459 138036 139040 139350 139639 139710 139867 141238 142648 147044 149519 152891 sbgp-ipAddrBlock: critical IPv4: 27.110.128.0/17 45.125.248.0/22 49.144.0.0/13 58.69.0.0/16 58.71.0.0/17 103.10.178.0/23 103.233.36.0/22 112.200.0.0-112.211.255.255 115.146.160.0-115.147.255.255 119.92.0.0/14 122.2.0.0/15 122.52.0.0/14 124.83.0.0/17 124.104.0.0/14 124.217.0.0/17 180.192.0.0/14 202.86.200.0/21 202.138.128.0/18 203.213.192.0/19 210.1.64.0/19 210.5.64.0/18 210.14.0.0/19 210.185.176.0/20 210.213.64.0-210.213.255.255 IPv6: 2001:4450::/29 2400:f200::/32 Signature Algorithm: sha256WithRSAEncryption 5a:a3:4d:83:3e:2c:5d:63:9e:57:54:ca:76:34:81:0b:49:06: 64:67:bf:74:7e:c3:a8:80:7d:42:40:75:c6:4e:7f:ec:26:ae: b9:5c:91:51:24:11:4d:f2:5b:e0:3c:37:42:f2:e3:43:2c:ba: a1:d7:69:6d:bb:bf:62:f1:ec:74:73:54:d1:af:cd:f1:58:3c: 32:c0:72:0a:c3:9c:a5:f2:b1:f2:13:31:42:1f:8e:87:c1:3b: e3:51:d5:0f:e5:1f:e4:3b:b5:f2:92:3a:e0:30:e2:66:13:bb: 67:3e:cf:7b:5f:e8:2f:d1:c9:43:01:4f:2a:0b:be:81:6c:c9: a3:fb:23:92:73:ed:ff:a5:66:1e:aa:56:92:33:cc:ad:cc:6d: e4:cb:65:84:35:cc:17:38:17:e9:11:b3:b6:aa:51:9f:1a:bd: 56:1a:19:da:1e:21:79:6e:69:3b:40:7a:4f:84:84:f1:07:50: 1f:43:3b:d9:1b:36:de:36:10:9d:64:cb:85:76:36:d2:df:7b: d5:27:44:7d:94:6f:9b:a9:c2:f1:61:2c:75:e9:1d:37:46:d5: 41:04:fa:9c:80:93:fb:9a:de:00:2f:92:c2:bf:40:c8:83:49: d2:ac:45:c6:3e:40:2a:13:cd:c0:76:86:5a:cb:29:98:ba:1d: 91:11:0b:f8 -----BEGIN CERTIFICATE----- MIIHWTCCBkGgAwIBAgIDAnnXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTAwMjgyMVoXDTI2MDUyODAwMDAwMFowRjERMA8G A1UEAxMIQTkxREZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUy NkRCREVGMUIwNDU5MjhBQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMzgaCpokrn9WFkNVhxc68wqj+fNJrdCRPaq/NovGfW/W7+3fAZFdRdoZvLshM eV32maepUuNr6lSjrxV9Ntf2t1VvV+Prnk87dr5wBPCOqV3kddGI5ZvfduIXZ2jH Q/EKouHcDg6Sd1FwPTCIw1qnJnHbWPjNJXINAmwiI1u1kW5He1v3LvfWWNHE5yG3 pC13nIEzsurs3/rC7F5lFQ0fAT6oxq2vj4LoSSY2UO/g8MzCOu3vmq8ZBsJPvVSo FVSr0le54aWN9LUK5A7FB4zo1xwKVZaqXqrcd0Q9To8986+zyqS8JiuVJdLk2MQS KDNjpWSeJRobYgSYPZ1kVE7LAgMBAAGjggROMIIESjAdBgNVHQ4EFgQUXS3RVLXc 4h+3hsUm297xsEWSirgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURGQjcwLzI5ODM2NDdDODM4RjExRTU4NkZDNTgxMkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFERkI3MC8yOTgzNjQ3QzgzOEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxY YzRoLTNoc1VtMjk3eHNFV1NpcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgaYGCCsGAQUFBwEIAQH/BIGW MIGToIGQMIGNAgIeGwICJFMCAkWEAgJfigIDALJgAgMCAGwCAwIFnAIDAgbDAgMC CnoCAwIL/AIDAgwKAgMCDnsCAwIRSwIDAhGoAgMCFCMCAwIX8gIDAhjJAgMCGPMC AwIbNAIDAh8gAgMCIFYCAwIhdwIDAiG+AgMCIlsCAwIntgIDAi04AgMCPmQCAwJI DwIDAlU7MIHQBggrBgEFBQcBBwEB/wSBwDCBvTCBpAQCAAEwgZ0DBAcbboADBAIt ffgDAwMxkAMDADpFAwQHOkcAAwQBZwqyAwQCZ+kkMAoDAwNwyAMDAnDQMAsDBAVz kqADAwJzkAMDAndcAwMBegIDAwJ6NAMEB3xTAAMDAnxoAwQHfNkAAwMCtMADBAPK VsgDBAbKioADBAXL1cADBAXSAUADBAbSBUADBAXSDgADBATSubAwCwMEBtLVQAMD AdLUMBQEAgACMA4DBQMgAURQAwUAJADyADANBgkqhkiG9w0BAQsFAAOCAQEAWqNN gz4sXWOeV1TKdjSBC0kGZGe/dH7DqIB9QkB1xk5/7CauuVyRUSQRTfJb4Dw3QvLj Qyy6oddpbbu/YvHsdHNU0a/N8Vg8MsByCsOcpfKx8hMxQh+Oh8E741HVD+Uf5Du1 8pI64DDiZhO7Zz7Pe1/oL9HJQwFPKgu+gWzJo/sjknPt/6VmHqpWkjPMrcxt5Mtl hDXMFzgX6RGztqpRnxq9VhoZ2h4heW5pO0B6T4SE8QdQH0M72Rs23jYQnWTLhXY2 0t971SdEfZRvm6nC8WEsdekdN0bVQQT6nICT+5reAC+Swr9AyINJ0qxFxj5AKhPN wHaGWsspmLodkREL+A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:43:00 2025 by rpki-client