This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer File: _KoIYibfAq-DlPqyLR-5bgt9Zd0.cer (raw, json) Hash identifier: Oolir9OlRjSrMYijMdKDMdCu80H6r+CP/fNUh3CR2IU= Subject key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02733B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 05 Nov 2025 07:54:31 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 58895 AS: 150350 IP: 36.255.100.0/22 IP: 43.229.164.0/22 IP: 43.230.92.0/22 IP: 43.231.60.0/22 IP: 43.246.224.0/22 IP: 43.248.12.0/22 IP: 45.113.124.0/22 IP: 45.117.104.0/22 IP: 103.24.96.0/22 IP: 103.35.212.0/22 IP: 103.39.80.0/22 IP: 103.49.136.0/22 IP: 103.50.156.0/22 IP: 103.53.44.0/22 IP: 103.57.168.0/22 IP: 103.70.84.0/22 IP: 103.117.160.0/22 IP: 103.200.196.0/22 IP: 103.209.84.0/22 IP: 117.53.40.0/22 IP: 150.129.4.0/22 IP: 2400:1680::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160571 (0x2733b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 5 07:54:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ed:eb:76:fe:fa:3d:84:b6:28:17:c8:fb:38: 13:16:24:24:af:7d:af:53:04:91:66:7c:fb:5e:c0: 8c:45:ba:69:d9:55:e0:41:ea:29:29:f8:9b:ca:32: 84:44:91:50:10:62:92:a2:c4:9e:5a:c7:14:a4:40: b5:0b:fd:5f:12:a0:3b:5c:97:43:c9:94:31:54:eb: 23:c7:bc:1d:0e:42:87:6b:5b:62:7b:c7:d0:e9:68: 84:3e:1f:8c:70:58:d2:3e:d4:5f:de:0f:ac:04:99: 6a:c0:1c:b4:8a:2f:b6:1e:b8:f4:48:21:5e:2d:f7: 90:a8:16:41:63:a5:95:00:8a:b3:bb:60:21:ca:fa: c2:76:86:b9:90:d2:1c:a9:ca:92:49:60:0d:80:ff: 84:bb:65:99:76:6d:85:6a:3f:88:b0:62:e9:df:af: 1c:39:2f:08:d7:10:ef:52:33:e8:c9:09:d2:b9:b6: 23:21:23:3d:3a:fd:85:e2:20:c9:f7:9a:5e:ef:af: d4:8d:62:f6:67:16:78:73:d4:b2:b3:f4:b6:0f:c6: cf:fc:17:96:38:17:14:46:3d:22:3f:09:2a:1e:99: 02:26:92:06:04:10:cc:db:50:0d:9d:e8:fb:57:6c: ed:f5:76:1e:9e:1f:ae:9d:3d:8c:a0:91:32:a3:be: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 58895 150350 sbgp-ipAddrBlock: critical IPv4: 36.255.100.0/22 43.229.164.0/22 43.230.92.0/22 43.231.60.0/22 43.246.224.0/22 43.248.12.0/22 45.113.124.0/22 45.117.104.0/22 103.24.96.0/22 103.35.212.0/22 103.39.80.0/22 103.49.136.0/22 103.50.156.0/22 103.53.44.0/22 103.57.168.0/22 103.70.84.0/22 103.117.160.0/22 103.200.196.0/22 103.209.84.0/22 117.53.40.0/22 150.129.4.0/22 IPv6: 2400:1680::/32 Signature Algorithm: sha256WithRSAEncryption 7d:d4:fd:d2:b2:89:b0:e4:b1:56:95:22:07:30:81:1f:d9:ae: 4b:10:23:d9:27:bb:6a:49:94:b9:cb:a6:7b:00:30:ea:8e:22: e2:19:d5:52:31:ae:4f:4a:84:cf:7a:ad:58:19:0a:7c:44:c2: 86:80:f5:60:42:8a:56:08:0d:25:fb:6f:f7:91:e1:1a:73:de: 5b:7b:24:94:ae:5e:d5:69:72:e7:76:f2:b4:7f:23:a0:48:8a: dd:f9:f5:9d:d8:49:8d:c4:aa:89:08:e0:57:b2:d9:0b:03:59: a6:41:a6:d2:e6:32:d1:56:ca:59:32:34:a4:2a:49:fd:29:1d: 9e:b4:90:dc:7c:9f:7b:76:f2:5d:eb:fe:ea:f0:2d:56:9b:cf: 47:19:ed:94:80:56:f4:fe:83:4b:76:a8:b7:52:cc:d5:11:c4: 0c:64:3e:a2:3a:db:cf:d8:f7:2f:7c:2c:86:3f:8f:65:2b:d4: ab:9c:90:f0:48:e7:a8:92:7b:a0:72:36:4b:8d:b8:b2:3d:4b: a9:e5:44:fe:05:f3:7e:ec:97:bd:0d:a8:68:44:b5:f4:58:a5: ed:d2:9c:a9:dd:a0:15:bf:77:3a:93:38:6b:59:46:87:ba:5e: 54:b5:7e:bb:b0:71:d0:a2:b8:66:bf:4e:03:82:bd:c9:ad:57: 67:84:1b:20 -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIDAnM7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNTA3NTQzMVoXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMjk4REExMTAvBgNVBAUTKEZDQUEwODYyMjZERjAyQUY4Mzk0RkFC MjJEMUZCOTZFMEI3RDY1REQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb7et2/vo9hLYoF8j7OBMWJCSvfa9TBJFmfPtewIxFumnZVeBB6ikp+JvKMoRE kVAQYpKixJ5axxSkQLUL/V8SoDtcl0PJlDFU6yPHvB0OQodrW2J7x9DpaIQ+H4xw WNI+1F/eD6wEmWrAHLSKL7YeuPRIIV4t95CoFkFjpZUAirO7YCHK+sJ2hrmQ0hyp ypJJYA2A/4S7ZZl2bYVqP4iwYunfrxw5LwjXEO9SM+jJCdK5tiMhIz06/YXiIMn3 ml7vr9SNYvZnFnhz1LKz9LYPxs/8F5Y4FxRGPSI/CSoemQImkgYEEMzbUA2d6PtX bO31dh6eH66dPYygkTKjvq79AgMBAAGjggOfMIIDmzAdBgNVHQ4EFgQU/KoIYibf Aq+DlPqyLR+5bgt9Zd0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI5OERBLzM0RjM2MTJFMjY4MTExRUE5MDNENzA1OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyOThEQS8zNEYzNjEyRTI2ODExMUVBOTAzRDcwNThDNEY5QUUwMi9fS29JWWli ZkFxLURsUHF5TFItNWJndDlaZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAOYPAgMCS04wgakGCCsGAQUFBwEHAQH/BIGZMIGWMIGEBAIAATB+AwQC JP9kAwQCK+WkAwQCK+ZcAwQCK+c8AwQCK/bgAwQCK/gMAwQCLXF8AwQCLXVoAwQC ZxhgAwQCZyPUAwQCZydQAwQCZzGIAwQCZzKcAwQCZzUsAwQCZzmoAwQCZ0ZUAwQC Z3WgAwQCZ8jEAwQCZ9FUAwQCdTUoAwQCloEEMA0EAgACMAcDBQAkABaAMA0GCSqG SIb3DQEBCwUAA4IBAQB91P3Ssomw5LFWlSIHMIEf2a5LECPZJ7tqSZS5y6Z7ADDq jiLiGdVSMa5PSoTPeq1YGQp8RMKGgPVgQopWCA0l+2/3keEac95beySUrl7VaXLn dvK0fyOgSIrd+fWd2EmNxKqJCOBXstkLA1mmQabS5jLRVspZMjSkKkn9KR2etJDc fJ97dvJd6/7q8C1Wm89HGe2UgFb0/oNLdqi3UszVEcQMZD6iOtvP2PcvfCyGP49l K9SrnJDwSOeoknugcjZLjbiyPUup5UT+BfN+7Je9DahoRLX0WKXt0pyp3aAVv3c6 kzhrWUaHul5UtX67sHHQorhmv04Dgr3JrVdnhBsg -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:30 2025 by rpki-client