This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer File: _ZFHrvajMNGN1MnP2GQvDtqnuQc.cer (raw, json) Hash identifier: JgzpUDD5ZuId1O914X3ZlDW2jTH5H/v+zFbQYyiYTWE= Subject key identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027438 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 09 Nov 2025 21:07:35 +0000 Certificate not after: Mon 02 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 133526 IP: 27.0.192.0/22 IP: 43.243.220.0/22 IP: 45.113.160.0/22 IP: 45.116.212.0/22 IP: 45.120.184.0/22 IP: 103.13.220.0/22 IP: 103.57.24.0/22 IP: 103.61.0.0/22 IP: 103.79.52.0/22 IP: 103.80.124.0/22 IP: 103.123.160.0/22 IP: 103.208.32.0/22 IP: 103.229.180.0/22 IP: 103.233.184.0/22 IP: 116.193.152.0/22 IP: 202.53.136.0/22 IP: 2400:5340::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160824 (0x27438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 9 21:07:35 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=A91E1853, serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:34:55:0d:dd:89:47:c7:7b:2b:c5:62:97:66: e1:fc:92:83:bd:b5:29:96:b0:c0:cd:1a:46:65:d9: c7:90:e5:ae:57:a5:34:56:49:19:26:50:a2:b7:27: 33:df:eb:4f:89:e8:61:0a:ea:bc:98:07:c0:c9:ef: 2d:e8:41:3f:d9:d8:8c:64:80:73:9d:4c:b6:6e:3c: 35:18:fc:78:f2:aa:18:49:7c:05:60:05:58:b3:25: 65:c7:8e:6b:76:dd:e1:67:d4:07:56:43:d9:be:e3: 35:34:cb:8e:18:89:67:7b:d1:fa:e7:5e:1f:93:b9: 70:36:a1:d3:43:98:fb:c3:74:6c:bd:81:6d:60:29: 5b:24:32:18:60:60:53:43:07:d9:f6:a7:2d:6a:a7: c7:99:f2:68:73:91:9f:e8:7b:1e:b8:5c:91:46:e7: 16:7b:92:b9:a7:a6:c3:43:a2:fb:8b:ee:03:38:d5: b5:d5:61:2c:82:85:e5:9d:7c:2c:9d:6e:3e:5c:3e: 54:3c:73:71:a3:9a:06:fa:16:e5:65:ce:e3:82:15: 9e:93:0f:e8:0e:1e:4a:57:93:28:9d:33:12:e3:3d: 5f:ff:97:20:90:20:fe:bc:a7:9b:ee:04:44:55:cb: 7b:ce:db:5b:67:1b:34:20:6a:e0:8d:ef:74:d2:43: 41:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133526 sbgp-ipAddrBlock: critical IPv4: 27.0.192.0/22 43.243.220.0/22 45.113.160.0/22 45.116.212.0/22 45.120.184.0/22 103.13.220.0/22 103.57.24.0/22 103.61.0.0/22 103.79.52.0/22 103.80.124.0/22 103.123.160.0/22 103.208.32.0/22 103.229.180.0/22 103.233.184.0/22 116.193.152.0/22 202.53.136.0/22 IPv6: 2400:5340::/32 Signature Algorithm: sha256WithRSAEncryption 22:cf:b0:07:5f:33:42:41:cf:b0:b0:e1:c8:c1:cd:a5:a4:4f: c0:d3:cd:2a:f0:ff:bc:55:1a:6b:ca:0b:e6:84:09:e2:5a:d8: d7:8c:c4:be:40:6b:d1:5f:8d:61:26:40:fa:0e:61:c5:da:80: df:f8:99:02:70:d6:a9:d3:16:db:cb:29:f0:43:51:52:80:28: 3a:e9:10:0b:d5:82:b5:52:28:db:79:57:85:33:5b:9e:0e:ff: c1:ec:09:4a:c0:ca:d1:22:7a:56:74:3e:b6:be:f1:fb:34:fa: 0f:e4:08:10:de:0c:34:87:c3:36:75:d5:a4:6e:ed:53:88:92: d2:e8:52:29:76:16:4d:23:fd:cb:87:da:e9:36:4d:32:8f:61: ad:e4:d8:be:9e:4d:98:5c:e3:66:0d:54:24:37:21:54:55:42: 0d:bc:46:04:cb:b2:ca:98:f8:68:f1:3e:c6:19:eb:68:9b:aa: 31:bc:9b:c4:ec:fa:71:f5:41:2a:c2:1c:65:90:df:91:c2:25: 73:ad:69:9b:57:6e:fe:de:00:99:6d:35:13:54:ac:87:b8:66: 71:86:3a:ef:ff:bc:f8:41:27:be:2b:e8:6a:5b:9c:e7:a7:88: 78:a9:51:77:ca:1b:3b:3d:a6:e9:45:17:5a:5c:ac:56:95:ca: af:12:16:c8 -----BEGIN CERTIFICATE----- MIIGhDCCBWygAwIBAgIDAnQ4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwOTIxMDczNVoXDTI2MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTE4NTMxMTAvBgNVBAUTKEZEOTE0N0FFRjZBMzMwRDE4REQ0QzlD RkQ4NjQyRjBFREFBN0I5MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvNFUN3YlHx3srxWKXZuH8koO9tSmWsMDNGkZl2ceQ5a5XpTRWSRkmUKK3JzPf 60+J6GEK6ryYB8DJ7y3oQT/Z2IxkgHOdTLZuPDUY/HjyqhhJfAVgBVizJWXHjmt2 3eFn1AdWQ9m+4zU0y44YiWd70frnXh+TuXA2odNDmPvDdGy9gW1gKVskMhhgYFND B9n2py1qp8eZ8mhzkZ/oex64XJFG5xZ7krmnpsNDovuL7gM41bXVYSyCheWdfCyd bj5cPlQ8c3Gjmgb6FuVlzuOCFZ6TD+gOHkpXkyidMxLjPV//lyCQIP68p5vuBERV y3vO21tnGzQgauCN73TSQ0EhAgMBAAGjggN5MIIDdTAdBgNVHQ4EFgQU/ZFHrvaj MNGN1MnP2GQvDtqnuQcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUxODUzLzFBQjE1QjhDQkRCMDExRjA4N0VERTkyOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMTg1My8xQUIxNUI4Q0JEQjAxMUYwODdFREU5MjlDNEY5QUUwMi9fWkZIcnZh ak1OR04xTW5QMkdRdkR0cW51UWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgmWMIGIBggrBgEFBQcBBwEB/wR5MHcwZgQCAAEwYAMEAhsAwAMEAivz 3AMEAi1xoAMEAi101AMEAi14uAMEAmcN3AMEAmc5GAMEAmc9AAMEAmdPNAMEAmdQ fAMEAmd7oAMEAmfQIAMEAmfltAMEAmfpuAMEAnTBmAMEAso1iDANBAIAAjAHAwUA JABTQDANBgkqhkiG9w0BAQsFAAOCAQEAIs+wB18zQkHPsLDhyMHNpaRPwNPNKvD/ vFUaa8oL5oQJ4lrY14zEvkBr0V+NYSZA+g5hxdqA3/iZAnDWqdMW28sp8ENRUoAo OukQC9WCtVIo23lXhTNbng7/wewJSsDK0SJ6VnQ+tr7x+zT6D+QIEN4MNIfDNnXV pG7tU4iS0uhSKXYWTSP9y4fa6TZNMo9hreTYvp5NmFzjZg1UJDchVFVCDbxGBMuy ypj4aPE+xhnraJuqMbybxOz6cfVBKsIcZZDfkcIlc61pm1du/t4AmW01E1Ssh7hm cYY67/+8+EEnvivoaluc56eIeKlRd8obOz2m6UUXWlysVpXKrxIWyA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:39:56 2025 by rpki-client