This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer File: a4ZCQd8BLyOSegHA44bgeqtJxSI.cer (raw, json) Hash identifier: HQ/lIi6WBgjPYA/IMgTb9gGj+m1QZPO4OEuvWMkO/Ps= Subject key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027402 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 07 Nov 2025 20:28:52 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 136164 IP: 103.82.172.0/22 IP: 2400:86c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160770 (0x27402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 7 20:28:52 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:dd:84:4e:6f:c0:51:8a:7b:b4:2d:a3:d1: 68:fb:a6:ee:c1:a1:80:0a:7a:20:85:0d:f6:86:5f: a3:a1:4b:6c:7b:7b:2c:98:5b:15:4d:c4:d3:72:37: 3b:1f:e7:6d:0f:9f:36:a2:b8:4f:90:a5:4d:b4:a8: a1:ec:3d:86:f2:17:03:9b:73:3e:64:c9:4b:63:c9: ad:96:1a:7f:ce:fe:89:99:ba:cd:ce:65:db:e7:6b: 33:af:a7:94:df:b1:c2:95:01:d8:1d:00:79:3e:e5: 3c:dd:ff:81:ce:f0:01:58:60:8d:0e:7f:0a:2e:44: 20:7f:12:d3:42:00:0a:53:42:59:b5:f9:ac:99:f8: bb:7b:33:ba:f8:06:86:c0:8f:25:19:94:a5:fa:d9: 0a:35:17:f5:b9:63:5e:f1:3a:c3:ae:e2:da:97:4b: 88:c6:c9:76:14:bb:b5:05:61:5a:dd:77:b0:61:89: 9a:a2:e6:a2:6c:d7:cd:bf:96:5f:4c:37:65:8f:37: bd:2e:35:ee:34:b8:39:f8:ea:8b:6c:af:a3:27:51: 99:d3:96:5a:5b:e0:fa:9a:b5:cf:44:58:27:50:ad: 08:43:c2:f2:61:e4:2d:4a:fc:1d:af:48:09:7d:5a: 42:95:e4:14:38:12:1b:ba:77:26:a2:dc:c3:84:5f: df:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136164 sbgp-ipAddrBlock: critical IPv4: 103.82.172.0/22 IPv6: 2400:86c0::/32 Signature Algorithm: sha256WithRSAEncryption 04:51:c2:ea:3c:81:2a:aa:c6:cd:73:bd:7a:de:f9:41:9a:d2: 42:0f:f0:4c:57:dd:7e:c4:a2:ec:b8:8a:9a:02:04:c6:f0:24: 30:74:8d:7c:14:f6:cc:94:5f:d6:60:6f:78:ec:cb:33:fa:bc: f9:01:90:06:3b:29:78:ab:3d:2f:73:bc:29:e9:1b:d4:85:fd: db:51:6b:5a:e7:70:41:23:fb:84:54:cf:27:01:90:ef:fb:bc: 74:12:38:05:10:16:72:15:06:d7:84:f1:08:25:88:7a:8a:66: 81:56:33:70:a4:58:a7:81:5b:7e:ac:e5:95:11:c5:d7:32:bc: 1c:96:fb:31:7c:99:0e:18:71:06:3a:5f:0c:39:e4:f3:01:89: 90:52:bf:e5:9c:d5:0e:e8:18:bf:cc:49:88:da:f0:6f:70:c2: f2:94:1b:f8:e6:a3:76:84:0f:89:56:fb:e2:53:f5:78:10:ed: ed:fa:b5:74:a5:5b:e6:e3:29:78:5f:18:63:ff:b6:f1:1c:b2: 0e:f4:9b:2b:e9:eb:80:2f:4b:b9:de:8b:85:46:5a:a4:5b:1d: 49:50:66:3d:c9:7d:88:0e:e7:d1:03:d8:52:eb:64:7e:49:ac: c2:b2:d3:5f:72:e5:30:de:8a:2f:d8:90:bb:a3:13:b1:1f:84: bc:18:5e:02 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnQCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNzIwMjg1MloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRkFENkYxMTAvBgNVBAUTKDZCODY0MjQxREYwMTJGMjM5MjdBMDFD MEUzODZFMDdBQUI0OUM1MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0lt2ETm/AUYp7tC2j0Wj7pu7BoYAKeiCFDfaGX6OhS2x7eyyYWxVNxNNyNzsf 520PnzaiuE+QpU20qKHsPYbyFwObcz5kyUtjya2WGn/O/omZus3OZdvnazOvp5Tf scKVAdgdAHk+5Tzd/4HO8AFYYI0OfwouRCB/EtNCAApTQlm1+ayZ+Lt7M7r4BobA jyUZlKX62Qo1F/W5Y17xOsOu4tqXS4jGyXYUu7UFYVrdd7BhiZqi5qJs182/ll9M N2WPN70uNe40uDn46otsr6MnUZnTllpb4Pqatc9EWCdQrQhDwvJh5C1K/B2vSAl9 WkKV5BQ4Ehu6dyai3MOEX99TAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUa4ZCQd8B LyOSegHA44bgeqtJxSIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZBRDZGLzQ2Qzk0MDk0MTQ0QjExRTc4OEEyNzk1RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGQUQ2Ri80NkM5NDA5NDE0NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4 Qkx5T1NlZ0hBNDRiZ2VxdEp4U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhPkMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ1KsMA0EAgAC MAcDBQAkAIbAMA0GCSqGSIb3DQEBCwUAA4IBAQAEUcLqPIEqqsbNc7163vlBmtJC D/BMV91+xKLsuIqaAgTG8CQwdI18FPbMlF/WYG947Msz+rz5AZAGOyl4qz0vc7wp 6RvUhf3bUWta53BBI/uEVM8nAZDv+7x0EjgFEBZyFQbXhPEIJYh6imaBVjNwpFin gVt+rOWVEcXXMrwclvsxfJkOGHEGOl8MOeTzAYmQUr/lnNUO6Bi/zEmI2vBvcMLy lBv45qN2hA+JVvviU/V4EO3t+rV0pVvm4yl4Xxhj/7bxHLIO9Jsr6euAL0u53ouF RlqkWx1JUGY9yX2IDufRA9hS62R+SazCstNfcuUw3oov2JC7oxOxH4S8GF4C -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:29 2025 by rpki-client