This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer File: _eNrbpSTmOUtleidQL32CyXbabk.cer (raw, json) Hash identifier: xMEswdB5iFEpyPxi9HETMNKpYlmgJg3UFbznypLHA+A= Subject key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B67 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft caRepository: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 18:02:41 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 141391 AS: 152335 AS: 153356 IP: 27.49.0.0/16 IP: 61.9.0.0/19 IP: 61.9.64.0/19 IP: 103.240.120.0/22 IP: 113.19.0.0/16 IP: 124.158.32.0/20 IP: 202.8.224.0/19 IP: 202.81.160.0/21 IP: 202.128.32.0/20 IP: 203.76.200.0/21 IP: 223.130.16.0/22 IP: 2403:4c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162663 (0x27b67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 18:02:41 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:46:b8:59:e0:7f:e0:82:99:a1:91:70:c4: d0:88:bf:79:23:5d:eb:f6:7a:4a:a5:99:19:07:d8: ba:4b:c6:69:ba:69:15:0a:9a:a3:04:35:b8:ed:a2: 8e:61:f5:b4:4a:2f:fe:e1:39:67:53:4b:e1:14:17: 2b:37:4a:82:25:e4:a8:8c:44:d5:6c:7c:88:76:de: a8:8e:4b:13:5e:95:6f:c1:31:ac:2c:48:a4:8f:d5: 8f:18:ac:12:f9:d4:ac:2a:8c:11:9d:2e:4e:58:ef: 2f:23:e0:69:55:fe:d7:22:3a:61:88:27:ff:f5:00: c5:a1:06:88:bc:e3:51:9b:ea:b3:c0:a9:27:f3:4e: b6:26:d8:65:2e:68:9b:8c:0d:cb:7e:5e:56:b4:cf: 3f:c8:09:b6:96:5d:26:aa:17:8f:38:b1:93:0f:22: ad:fa:58:62:84:c3:08:e5:d4:36:22:0a:21:e3:d6: 49:78:73:5b:69:99:ca:63:12:cf:04:42:bf:86:ed: 9c:f9:88:f5:bd:16:ef:5c:13:d5:4a:a5:98:a3:65: e6:f9:10:c4:59:46:5e:f6:bc:69:3c:64:8b:3c:8c: 7f:ba:b7:f0:d7:40:b6:1a:6c:ca:f8:b8:01:11:66: ee:74:24:d4:48:dc:52:a9:9a:4f:0c:4a:b1:e9:97: 73:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141391 152335 153356 sbgp-ipAddrBlock: critical IPv4: 27.49.0.0/16 61.9.0.0/19 61.9.64.0/19 103.240.120.0/22 113.19.0.0/16 124.158.32.0/20 202.8.224.0/19 202.81.160.0/21 202.128.32.0/20 203.76.200.0/21 223.130.16.0/22 IPv6: 2403:4c0::/32 Signature Algorithm: sha256WithRSAEncryption 7f:02:3d:23:3f:9a:d1:9d:2b:d1:7c:68:6b:c5:24:05:92:55: 40:6a:cd:44:f8:73:14:71:17:53:df:7f:cb:8f:3b:7f:7e:ab: 48:bb:c4:e8:c0:5e:ee:9a:91:2b:d5:87:1f:91:f7:d1:c6:0e: fe:cb:e4:cd:1d:45:82:2b:1c:39:48:f3:e6:8b:62:a7:45:56: e7:cd:9a:73:ae:a4:ae:08:0f:6f:b0:a9:d4:0e:3c:6d:03:40: 54:e4:58:0a:6d:1c:2c:7b:cb:52:4e:f4:87:62:4c:77:6b:07: 4c:1c:4f:04:4a:54:58:96:2c:9f:13:77:c4:f1:69:b2:ea:99: 01:cb:33:9f:ec:16:60:16:1e:ef:8a:c0:9e:9b:68:17:10:35: c6:1f:7e:af:ef:2d:d8:88:9b:6c:ec:a0:64:45:ed:be:9b:09: 57:b1:a2:7b:30:e4:0b:3d:c6:02:a8:5e:72:de:f6:4b:f4:10: 95:b7:5a:ad:88:ed:33:88:22:0a:c6:b0:94:52:c3:c4:f1:9d: ae:6c:0f:e5:4d:6a:73:c9:0e:57:23:70:c5:fc:35:cd:ea:a1: 1a:23:ce:31:14:59:07:b1:cc:bb:bb:33:cf:0e:9a:b9:1f:03: 71:49:ba:70:fc:83:20:74:c5:36:eb:72:b1:dc:1b:c7:59:b9: 46:6e:15:c8 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIDAntnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzE4MDI0MVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNkIxOEIxMTAvBgNVBAUTKEZERTM2QjZFOTQ5Mzk4RTUyRDk1RTg5 RDQwQkRGNjBCMjVEQjY5QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC500a4WeB/4IKZoZFwxNCIv3kjXev2ekqlmRkH2LpLxmm6aRUKmqMENbjtoo5h 9bRKL/7hOWdTS+EUFys3SoIl5KiMRNVsfIh23qiOSxNelW/BMawsSKSP1Y8YrBL5 1KwqjBGdLk5Y7y8j4GlV/tciOmGIJ//1AMWhBoi841Gb6rPAqSfzTrYm2GUuaJuM Dct+Xla0zz/ICbaWXSaqF484sZMPIq36WGKEwwjl1DYiCiHj1kl4c1tpmcpjEs8E Qr+G7Zz5iPW9Fu9cE9VKpZijZeb5EMRZRl72vGk8ZIs8jH+6t/DXQLYabMr4uAER Zu50JNRI3FKpmk8MSrHpl3PfAgMBAAGjggNiMIIDXjAdBgNVHQ4EFgQU/eNrbpST mOUtleidQL32CyXbabkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZCMThCLzYyOERFNTAyREYyMzExRTc5NzIyNUQyRUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2QjE4Qi82MjhERTUwMkRGMjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBT VG1PVXRsZWlkUUwzMkN5WGJhYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAihPAgMCUw8CAwJXDDBoBggrBgEFBQcBBwEB/wRZMFcwRgQCAAEwQAMD ABsxAwQFPQkAAwQFPQlAAwQCZ/B4AwMAcRMDBAR8niADBAXKCOADBAPKUaADBATK gCADBAPLTMgDBALfghAwDQQCAAIwBwMFACQDBMAwDQYJKoZIhvcNAQELBQADggEB AH8CPSM/mtGdK9F8aGvFJAWSVUBqzUT4cxRxF1Pff8uPO39+q0i7xOjAXu6akSvV hx+R99HGDv7L5M0dRYIrHDlI8+aLYqdFVufNmnOupK4ID2+wqdQOPG0DQFTkWApt HCx7y1JO9IdiTHdrB0wcTwRKVFiWLJ8Td8TxabLqmQHLM5/sFmAWHu+KwJ6baBcQ NcYffq/vLdiIm2zsoGRF7b6bCVexonsw5As9xgKoXnLe9kv0EJW3Wq2I7TOIIgrG sJRSw8Txna5sD+VNanPJDlcjcMX8Nc3qoRojzjEUWQexzLu7M88OmrkfA3FJunD8 gyB0xTbrcrHcG8dZuUZuFcg= -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:04 2025 by rpki-client