This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer (raw, json) Hash identifier: smDDvmX54I4W9XLSH7UO2qsd3SpwN0BfL8aN1x9v9u0= Subject key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027412 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 08 Nov 2025 14:30:27 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 103.129.140.0/22 IP: 2403:7ec0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160786 (0x27412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 8 14:30:27 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:83:fb:2c:95:cf:ae:2e:d7:ca:dd:bc:d9:58: eb:7c:e9:70:0f:2b:c0:b0:10:24:25:5d:12:ca:31: 31:0b:90:ed:c3:ee:7c:73:6a:cf:17:93:92:0a:c2: 64:63:f3:c9:b5:1c:19:24:82:14:46:1c:26:54:5c: 68:38:5e:9e:da:7b:6d:10:9b:b9:e1:46:e0:8e:cb: 75:38:df:6a:92:37:68:2a:32:9b:61:d4:ea:10:5c: d3:96:55:aa:a0:bf:8f:7c:f6:b1:78:69:e6:71:9f: fc:3c:fc:34:d0:58:64:fc:26:96:d7:d3:09:e2:03: ba:6b:7a:31:67:e3:ab:07:b1:bf:2c:e6:82:1f:46: 48:d4:65:f9:c2:55:b2:3e:14:f3:47:0b:b2:eb:91: b2:6d:26:07:61:ea:8e:aa:2a:a3:eb:62:82:36:83: 14:05:0f:ef:20:d3:e4:72:25:a5:af:6e:c2:6b:f3: 9c:89:49:fb:ea:53:36:ea:51:b8:59:db:e8:52:3e: 87:0c:c6:6f:82:2f:61:95:77:bd:2f:14:07:84:a0: 31:87:df:49:16:dc:5c:c5:59:56:36:af:22:fa:83: bc:5d:6d:19:fa:49:4b:f4:6d:d8:00:b9:31:f8:3a: f2:b3:51:a0:48:ed:62:30:95:57:e7:a7:f6:d3:d3: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.129.140.0/22 IPv6: 2403:7ec0::/32 Signature Algorithm: sha256WithRSAEncryption 82:b9:58:c3:9c:32:18:a9:8c:47:9b:03:e3:71:24:a8:62:55: 4d:40:6a:ae:ff:f6:23:3d:11:ad:13:e3:31:41:80:d5:80:c0: b0:5c:d1:01:6f:07:56:c8:22:9f:62:5b:33:9c:f5:3e:e6:14: 9a:e6:4e:80:78:9c:39:40:9d:d9:c5:48:44:30:75:c6:7a:0b: 15:29:2f:5b:24:d1:cb:aa:12:06:7e:b1:e8:d6:a2:48:c0:e7: 54:df:12:2b:3e:15:57:da:9b:66:c6:cb:6c:bd:b9:73:3e:69: 68:01:c7:c0:84:b9:10:72:d8:07:db:ed:36:49:c6:4e:99:ad: b5:e7:0e:b7:2b:c2:9e:a6:b7:16:2b:0a:08:f6:53:63:64:14: de:48:1c:32:21:b9:55:88:55:81:f3:cd:87:7f:82:b0:bb:f4: 82:89:b1:48:56:90:ce:d8:80:6d:8d:22:50:80:89:6c:eb:09: c1:4d:c7:43:8a:39:02:20:c3:c5:88:7b:48:08:59:ce:c9:27: 57:2b:11:00:10:46:ca:9d:ba:b8:29:74:8e:fa:b5:52:80:3d: 33:24:a5:de:a2:45:59:54:aa:a0:bc:22:0f:ee:8b:1d:70:ed: 5b:34:2b:c3:df:ee:68:c7:94:c2:3f:c4:c5:22:74:6a:f6:20: 79:91:d3:2f -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIDAnQSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwODE0MzAyN1oXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxRDgzQjMxMTAvBgNVBAUTKDVFMDU3NDQ2QzQ5NjFFNEQyNkMzN0ZG RUE4QUMzRjdBQUREODNCMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpg/sslc+uLtfK3bzZWOt86XAPK8CwECQlXRLKMTELkO3D7nxzas8Xk5IKwmRj 88m1HBkkghRGHCZUXGg4Xp7ae20Qm7nhRuCOy3U432qSN2gqMpth1OoQXNOWVaqg v4989rF4aeZxn/w8/DTQWGT8JpbX0wniA7prejFn46sHsb8s5oIfRkjUZfnCVbI+ FPNHC7LrkbJtJgdh6o6qKqPrYoI2gxQFD+8g0+RyJaWvbsJr85yJSfvqUzbqUbhZ 2+hSPocMxm+CL2GVd70vFAeEoDGH30kW3FzFWVY2ryL6g7xdbRn6SUv0bdgAuTH4 OvKzUaBI7WIwlVfnp/bT01TXAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUXgV0RsSW Hk0mw3/+qKw/eq3YOzIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ4M0IzL0EzRDNEODIyOEEwRDExRUFBNTA1OTcxNEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEODNCMy9BM0QzRDgyMjhBMEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNT V0hrMG13M18tcUt3X2VxM1lPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBAJngYwwDQQCAAIwBwMFACQDfsAwDQYJKoZIhvcNAQELBQADggEB AIK5WMOcMhipjEebA+NxJKhiVU1Aaq7/9iM9Ea0T4zFBgNWAwLBc0QFvB1bIIp9i WzOc9T7mFJrmToB4nDlAndnFSEQwdcZ6CxUpL1sk0cuqEgZ+sejWokjA51TfEis+ FVfam2bGy2y9uXM+aWgBx8CEuRBy2Afb7TZJxk6ZrbXnDrcrwp6mtxYrCgj2U2Nk FN5IHDIhuVWIVYHzzYd/grC79IKJsUhWkM7YgG2NIlCAiWzrCcFNx0OKOQIgw8WI e0gIWc7JJ1crEQAQRsqdurgpdI76tVKAPTMkpd6iRVlUqqC8Ig/uix1w7Vs0K8Pf 7mjHlMI/xMUidGr2IHmR0y8= -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:05 2025 by rpki-client