This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer File: aK5b6xu35ELO4KfgFAKf9y49tB8.cer (raw, json) Hash identifier: Ce2qIxHB1oUpzt3JpPZGsXgQAWQlFA9MR/rAkQ4zTV0= Subject key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0273CF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 07 Nov 2025 12:20:15 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 131686 AS: 153179 IP: 103.76.240.0/22 IP: 162.12.212.0/22 IP: 2407:7b80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160719 (0x273cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 7 12:20:15 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:37:77:b2:b0:f8:50:f6:58:0f:76:19:ed: dc:bb:ed:d8:b0:4f:ce:71:b0:7d:73:e1:34:ff:0f: 82:63:73:59:53:7b:45:bd:56:80:02:e0:7d:21:e5: 6c:6a:49:d2:e0:cb:f2:6e:96:27:72:72:e2:ea:84: 65:cd:0f:4e:d6:6e:23:70:a2:02:46:df:f6:bc:11: a5:65:69:8d:88:95:8a:1f:d1:c2:5b:56:5e:a7:e6: 83:49:40:e1:1c:6c:e2:62:d3:10:d3:98:e7:7a:1c: f3:45:f8:45:21:15:08:26:16:f9:6c:f7:dc:fb:da: e5:a7:70:22:f9:06:b8:ad:08:2a:b0:e6:55:21:04: d7:a4:30:ac:d9:61:c8:6c:13:2b:91:93:4d:62:e9: 48:d6:27:b0:fe:0e:f7:69:d6:17:20:04:1f:2c:fe: 3a:5b:bf:5f:94:05:4b:c3:88:7d:85:92:01:ce:14: e0:8f:79:43:51:5f:6f:d4:7c:42:b0:55:7b:30:54: 52:9a:7b:35:a1:66:33:b0:6b:47:65:5a:9d:90:6b: 56:c5:4b:6b:2d:b2:a2:cb:f8:70:1c:66:61:68:61: ca:f7:0e:17:70:34:6c:23:bf:fe:d2:e9:91:7b:2d: 38:df:bf:8f:85:be:06:e7:65:70:1d:6e:61:de:4b: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131686 153179 sbgp-ipAddrBlock: critical IPv4: 103.76.240.0/22 162.12.212.0/22 IPv6: 2407:7b80::/32 Signature Algorithm: sha256WithRSAEncryption 88:73:61:85:73:63:86:db:fd:e8:8d:43:e6:1c:61:19:24:86: 1f:a8:d3:1f:18:76:4e:40:f7:c5:8a:36:5a:7d:30:ae:a5:31: ce:8e:69:83:05:ba:d9:91:8e:e1:1d:29:3e:9b:23:9d:1d:3b: c8:6b:6b:1a:30:82:27:69:9f:a2:e4:ba:18:b6:3c:dc:54:98: aa:68:b4:87:9b:1e:e1:f2:d5:4e:a3:5d:ca:8c:22:8b:de:5b: 07:08:33:8a:11:b0:92:f2:f5:07:3f:d0:8d:23:64:3e:1f:65: 8b:8b:56:05:05:84:8f:9e:ba:eb:a4:78:e5:52:6c:7f:d3:50: 01:9e:2e:91:4c:fa:68:cb:99:51:d8:cc:75:59:6f:9a:0c:f2: ab:89:48:b4:d6:56:ea:20:f1:40:71:f2:26:ac:e6:2a:3a:d5: bf:b8:0b:b1:5d:c0:f3:27:da:c8:68:42:d2:aa:04:42:3d:f5: 09:d1:ba:a6:04:ff:7d:65:6a:6a:af:2d:37:83:dd:9a:81:86: e3:e3:b8:df:4b:12:7d:51:95:c6:80:af:d8:8b:fb:6d:ff:cf: ef:53:2f:fc:7c:73:19:c8:d2:11:28:24:ac:ae:a3:97:83:55: c5:14:d1:a6:39:d0:31:62:d2:ca:ec:ae:49:da:ec:56:17:3d: 44:b1:87:8f -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIDAnPPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNzEyMjAxNVoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxMTA0QzkxMTAvBgNVBAUTKDY4QUU1QkVCMUJCN0U0NDJDRUUwQTdF MDE0MDI5RkY3MkUzREI0MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+Kzd3srD4UPZYD3YZ7dy77diwT85xsH1z4TT/D4Jjc1lTe0W9VoAC4H0h5Wxq SdLgy/JulidycuLqhGXND07WbiNwogJG3/a8EaVlaY2IlYof0cJbVl6n5oNJQOEc bOJi0xDTmOd6HPNF+EUhFQgmFvls99z72uWncCL5BritCCqw5lUhBNekMKzZYchs EyuRk01i6UjWJ7D+Dvdp1hcgBB8s/jpbv1+UBUvDiH2FkgHOFOCPeUNRX2/UfEKw VXswVFKaezWhZjOwa0dlWp2Qa1bFS2stsqLL+HAcZmFoYcr3DhdwNGwjv/7S6ZF7 LTjfv4+FvgbnZXAdbmHeS0hRAgMBAAGjggMpMIIDJTAdBgNVHQ4EFgQUaK5b6xu3 5ELO4KfgFAKf9y49tB8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTEwNEM5LzJBQThCMzg4MTRDODExRUE4N0QxNTE2Q0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExMDRDOS8yQUE4QjM4ODE0QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1 MzVFTE80S2ZnRkFLZjl5NDl0QjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAgJmAgMCVlswNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJnTPAD BAKiDNQwDQQCAAIwBwMFACQHe4AwDQYJKoZIhvcNAQELBQADggEBAIhzYYVzY4bb /eiNQ+YcYRkkhh+o0x8Ydk5A98WKNlp9MK6lMc6OaYMFutmRjuEdKT6bI50dO8hr axowgidpn6Lkuhi2PNxUmKpotIebHuHy1U6jXcqMIoveWwcIM4oRsJLy9Qc/0I0j ZD4fZYuLVgUFhI+euuukeOVSbH/TUAGeLpFM+mjLmVHYzHVZb5oM8quJSLTWVuog 8UBx8ias5io61b+4C7FdwPMn2shoQtKqBEI99QnRuqYE/31lamqvLTeD3ZqBhuPj uN9LEn1RlcaAr9iL+23/z+9TL/x8cxnI0hEoJKyuo5eDVcUU0aY50DFi0srsrkna 7FYXPUSxh48= -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:52 2025 by rpki-client