This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer File: aHvrJ3oFne_qK-3WevsbgjiOXrE.cer (raw, json) Hash identifier: Yu1yHf5svGGoHFYoQ16EqTjhG3XaflpMu6FGaZpTSR0= Subject key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027926 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft caRepository: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 28 Nov 2025 20:07:32 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 141215 IP: 103.156.152.0/23 IP: 2001:df2:89c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162086 (0x27926) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 28 20:07:32 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ff:bf:ad:87:ec:ba:6b:63:8a:e1:6a:30:dd: d2:05:22:e9:3b:a0:0a:53:33:4f:d1:55:ea:1c:b4: 0b:bd:72:93:14:6d:85:c6:2e:67:fa:bd:c8:52:e8: 82:7e:1c:94:67:c8:24:59:53:f8:78:11:1f:4b:f7: 4d:f2:f2:aa:02:96:27:b6:15:80:1b:21:4a:3b:8f: ed:94:af:e8:27:48:52:e7:93:37:56:98:a0:12:b4: 1b:c0:93:dc:a9:2e:27:4b:83:cc:cc:79:58:bc:58: 89:b9:4c:24:44:34:64:f4:5b:a8:ca:46:a5:8e:18: 82:aa:34:4b:e4:07:e7:49:61:5a:06:55:3a:98:a9: 86:06:26:24:f0:da:23:bc:dc:8f:2e:64:6f:b8:69: e3:48:6d:f7:63:15:ac:d9:e4:33:c8:74:d3:65:f4: 91:2f:3b:af:8a:8f:0d:4e:92:6c:f6:d0:33:31:07: 1f:6d:4e:d6:01:b1:dc:eb:60:8e:ce:4c:15:2d:d4: 2d:0d:1b:28:92:a0:ae:25:3b:34:d7:1f:77:48:ce: f4:ed:81:cb:79:a0:b4:89:6e:a7:a7:db:e6:e4:1d: 42:eb:6d:62:18:d2:52:76:87:67:98:f0:91:6e:ab: e2:3e:e3:b8:35:59:a9:c3:8f:7b:2c:43:15:fc:64: 4b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141215 sbgp-ipAddrBlock: critical IPv4: 103.156.152.0/23 IPv6: 2001:df2:89c0::/48 Signature Algorithm: sha256WithRSAEncryption 2d:5a:d6:49:01:51:ff:0a:b2:60:83:2b:f9:49:11:45:69:b4: 2e:01:32:9c:cb:04:87:ae:ab:b0:f5:92:3e:c9:b6:58:ed:09: 73:db:fa:2f:45:4d:5e:b9:08:54:40:66:a3:c2:19:d4:c1:85: 59:b4:39:30:f2:f8:19:5e:96:78:07:ba:b0:bd:87:b8:29:e7: 52:ee:d0:e9:6b:44:4c:36:3f:27:25:80:de:22:08:da:aa:28: bd:a7:74:5e:b9:1f:2c:10:c7:4b:dc:5d:cc:a9:d3:d0:39:99: 58:e2:a5:24:1c:4d:2b:da:fc:eb:9e:c1:3a:ca:b0:b9:fd:5d: cb:e1:ff:3c:b1:90:8e:e7:b0:6c:54:a7:fa:8b:9f:5e:c0:f8: 01:b7:19:91:52:46:1d:22:9e:89:96:35:e1:bd:36:ce:4b:b5: 4c:5c:70:61:dd:ae:86:6e:cb:0d:f4:ab:df:26:07:ec:81:22: b9:66:1f:36:64:bd:ee:dc:52:29:d3:82:c0:65:d4:b8:eb:99: e7:f9:8b:04:21:1a:59:19:7a:1a:86:07:d7:30:13:14:dd:f2: 99:1e:91:75:9a:25:76:5f:ff:31:93:4d:a6:c4:72:97:3e:dc: 98:a1:71:55:c4:d9:38:5a:36:40:5f:9c:88:dd:c2:10:37:d8: b0:44:ac:a4 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnkmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyODIwMDczMloXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURE NjdBRkIxQjgyMzg4RTVFQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY/7+th+y6a2OK4Wow3dIFIuk7oApTM0/RVeoctAu9cpMUbYXGLmf6vchS6IJ+ HJRnyCRZU/h4ER9L903y8qoClie2FYAbIUo7j+2Ur+gnSFLnkzdWmKAStBvAk9yp LidLg8zMeVi8WIm5TCRENGT0W6jKRqWOGIKqNEvkB+dJYVoGVTqYqYYGJiTw2iO8 3I8uZG+4aeNIbfdjFazZ5DPIdNNl9JEvO6+Kjw1Okmz20DMxBx9tTtYBsdzrYI7O TBUt1C0NGyiSoK4lOzTXH3dIzvTtgct5oLSJbqen2+bkHULrbWIY0lJ2h2eY8JFu q+I+47g1WanDj3ssQxX8ZEsBAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUaHvrJ3oF ne/qK+3WevsbgjiOXrEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY1RkFEL0E0RDc4OTlFMDg2NjExRUI4QTJEMTUzNUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2NUZBRC9BNEQ3ODk5RTA4NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNv Rm5lX3FLLTNXZXZzYmdqaU9YckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiefMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5yYMA8EAgAC MAkDBwAgAQ3yicAwDQYJKoZIhvcNAQELBQADggEBAC1a1kkBUf8KsmCDK/lJEUVp tC4BMpzLBIeuq7D1kj7JtljtCXPb+i9FTV65CFRAZqPCGdTBhVm0OTDy+BlelngH urC9h7gp51Lu0OlrREw2PyclgN4iCNqqKL2ndF65HywQx0vcXcyp09A5mVjipSQc TSva/OuewTrKsLn9Xcvh/zyxkI7nsGxUp/qLn17A+AG3GZFSRh0inomWNeG9Ns5L tUxccGHdroZuyw30q98mB+yBIrlmHzZkve7cUinTgsBl1Ljrmef5iwQhGlkZehqG B9cwExTd8pkekXWaJXZf/zGTTabEcpc+3JihcVXE2ThaNkBfnIjdwhA32LBErKQ= -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:45 2025 by rpki-client