This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.cer (raw, json) Hash identifier: KshnINKOydtclF3TsfVImS1JEJ7oM0yY2+4l+EJU/JM= Subject key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C1D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 03:45:22 +0000 Certificate not after: Mon 02 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 59257 AS: 138423 IP: 43.243.132.0/22 IP: 45.116.232.0/22 IP: 103.255.4.0/22 IP: 111.119.168.0 -- 111.119.191.255 IP: 115.42.72.0/21 IP: 117.134.192.0/18 IP: 121.91.32.0/19 IP: 144.48.0.0/22 IP: 203.189.224.0/21 IP: 223.123.0.0/17 IP: 2402:ad80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162845 (0x27c1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 5 03:45:22 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:e6:60:77:bd:2d:39:95:65:00:a7:f5:7f: 59:2b:14:89:7f:a9:3f:e3:36:a4:77:70:67:04:76: 6a:5e:35:75:33:98:e8:cd:d7:87:52:56:b6:d6:c0: e9:66:fc:6c:47:d3:36:0d:2d:2a:f3:6f:2b:15:92: 03:6b:ba:fd:49:04:a9:d4:61:b2:d4:2e:07:aa:9f: 02:99:d3:fa:53:ff:8b:8e:d0:16:b6:af:51:c9:45: ac:37:05:0a:ab:ec:dc:7c:dd:36:7c:29:99:22:9a: d1:5c:c8:3c:40:f2:b7:c7:1d:ad:2d:7f:4f:30:d2: 0a:af:f3:54:68:df:8f:79:04:79:42:3c:ec:82:52: ea:eb:33:95:e3:cc:8b:c2:b9:f1:17:68:93:5c:c4: d3:63:07:10:a2:23:16:3e:fe:3a:b3:7a:ea:b9:16: 15:b5:bf:71:b3:05:9e:af:15:b1:80:d0:bd:98:a8: 90:6d:5f:e1:26:95:f0:e8:4a:39:70:41:0e:04:ce: ec:7c:e7:54:18:70:51:f5:86:1e:13:fb:72:5c:1f: 95:34:7d:87:d3:ff:14:fb:77:17:58:a5:4c:2c:1a: 48:58:35:aa:eb:53:60:81:fd:ed:1d:b4:b2:4e:61: 0e:58:19:65:72:23:c3:4f:42:86:5f:e2:42:44:43: 44:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59257 138423 sbgp-ipAddrBlock: critical IPv4: 43.243.132.0/22 45.116.232.0/22 103.255.4.0/22 111.119.168.0-111.119.191.255 115.42.72.0/21 117.134.192.0/18 121.91.32.0/19 144.48.0.0/22 203.189.224.0/21 223.123.0.0/17 IPv6: 2402:ad80::/32 Signature Algorithm: sha256WithRSAEncryption 4e:87:36:58:6a:53:74:fd:d7:79:c7:a6:93:6a:5d:eb:45:2b: a3:5c:62:a1:b2:95:e6:d4:e2:6d:72:6a:7f:f0:6d:05:69:e5: 1d:e3:9b:df:0f:b3:cb:7b:19:7c:77:d5:13:3e:c6:da:07:f9: a7:ef:79:74:f3:0d:cb:1d:15:74:8c:11:e1:95:d9:ac:0d:9d: c7:d8:e3:15:79:44:41:72:d1:5b:6f:6a:02:72:b5:11:a9:a2: e9:7f:19:8c:78:47:f6:c1:89:19:b4:fb:5a:43:81:9f:8d:d2: 98:c3:ca:b3:fe:73:1b:16:05:37:27:06:24:7f:b7:eb:de:3f: 41:77:c2:9a:95:c5:17:98:53:57:bb:33:e8:3b:ee:9e:a3:85: 61:74:8f:95:f0:e6:7f:51:b2:0d:bf:ac:94:4b:0f:45:08:32: c5:a1:90:8f:ad:bf:24:9b:cc:f5:05:ec:72:fe:4a:64:d7:96: 97:53:d2:c4:89:5d:e4:66:57:63:9d:0e:e8:df:5d:e4:75:d5: 6e:43:e2:d4:76:e0:56:28:7d:48:5d:8f:e4:31:57:70:38:c1: 0b:ee:7e:fa:32:8f:c1:cf:27:30:82:70:30:2a:c9:77:82:4d: ff:5b:a0:ac:69:eb:5c:e7:61:44:1f:e3:0d:3e:71:35:49:c5: 7d:5d:ba:1f -----BEGIN CERTIFICATE----- MIIGbDCCBVSgAwIBAgIDAnwdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNTAzNDUyMloXDTI2MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFB QTk0NkU2QzQxNzc4RDA2QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3weZgd70tOZVlAKf1f1krFIl/qT/jNqR3cGcEdmpeNXUzmOjN14dSVrbWwOlm /GxH0zYNLSrzbysVkgNruv1JBKnUYbLULgeqnwKZ0/pT/4uO0Ba2r1HJRaw3BQqr 7Nx83TZ8KZkimtFcyDxA8rfHHa0tf08w0gqv81Ro3495BHlCPOyCUurrM5XjzIvC ufEXaJNcxNNjBxCiIxY+/jqzeuq5FhW1v3GzBZ6vFbGA0L2YqJBtX+EmlfDoSjlw QQ4Ezux851QYcFH1hh4T+3JcH5U0fYfT/xT7dxdYpUwsGkhYNarrU2CB/e0dtLJO YQ5YGWVyI8NPQoZf4kJEQ0SdAgMBAAGjggNhMIIDXTAdBgNVHQ4EFgQU/vLBxOoJ ZEd1FMGqlG5sQXeNBr8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQyOThELzMzN0E2NDMyRjFBNjExRUFCOTVDMEUyRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEMjk4RC8zMzdBNjQzMkYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9v SlpFZDFGTUdxbEc1c1FYZU5CcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAOd5AgMCHLcwbAYIKwYBBQUHAQcBAf8EXTBbMEoEAgABMEQDBAIr84QD BAItdOgDBAJn/wQwDAMEA293qAMEBm93gAMEA3MqSAMEBnWGwAMEBXlbIAMEApAw AAMEA8u94AMEB997ADANBAIAAjAHAwUAJAKtgDANBgkqhkiG9w0BAQsFAAOCAQEA Toc2WGpTdP3Xecemk2pd60Uro1xiobKV5tTibXJqf/BtBWnlHeOb3w+zy3sZfHfV Ez7G2gf5p+95dPMNyx0VdIwR4ZXZrA2dx9jjFXlEQXLRW29qAnK1Eami6X8ZjHhH 9sGJGbT7WkOBn43SmMPKs/5zGxYFNycGJH+3694/QXfCmpXFF5hTV7sz6DvunqOF YXSPlfDmf1GyDb+slEsPRQgyxaGQj62/JJvM9QXscv5KZNeWl1PSxIld5GZXY50O 6N9d5HXVbkPi1HbgVih9SF2P5DFXcDjBC+5++jKPwc8nMIJwMCrJd4JN/1ugrGnr XOdhRB/jDT5xNUnFfV26Hw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:09 2025 by rpki-client