This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer File: cM0ClgpxFOH9f9syrJqj6NKuv0E.cer (raw, json) Hash identifier: JUpAxl2AvTgbt9dk/wWC+39tC7RhHLHcgtZHkJFUMU0= Subject key identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0275A8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft caRepository: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 17 Nov 2025 14:16:11 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 103.99.168.0/24 IP: 2401:b140::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161192 (0x275a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 17 14:16:11 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A916EF5E, serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:07:96:1d:8b:2f:de:3f:61:9a:6c:98:1e: 2f:17:8e:68:93:89:95:28:af:f4:23:b9:52:a8:e1: dd:0c:cf:8b:81:46:55:27:2d:fa:0e:12:50:6a:a9: ab:74:b4:67:b0:23:49:f7:cf:1a:fe:6a:cf:a4:ba: 07:4b:5d:d2:6e:d5:7c:2b:ed:64:db:44:99:ce:91: ba:77:8c:7c:5f:11:75:de:37:3a:0e:75:27:b2:29: 3d:69:a6:d8:40:db:a6:87:4a:13:0d:50:93:8a:f6: 43:d7:88:54:68:60:fc:46:c5:51:7c:ce:eb:86:9e: 4b:a4:9c:38:e8:2b:25:f9:b4:8a:de:28:3d:20:54: ac:ae:d9:cd:06:23:83:3b:67:cf:fd:83:da:43:00: 26:1a:70:10:a7:25:37:8a:78:a3:62:26:d8:41:6a: ca:69:1c:28:1d:30:59:f1:10:9e:5a:59:ff:1a:8a: 7b:91:38:5b:47:a7:6d:91:d8:ae:76:ad:2c:c3:8b: bb:4e:d3:2f:aa:c8:67:ca:f4:55:a8:4a:13:44:b6: a3:e2:5d:e9:cf:49:21:2f:e2:15:0c:63:35:61:4b: 48:90:02:08:66:ac:d6:6d:c0:90:4f:99:b2:e4:b2: 52:20:f5:e9:82:db:1c:78:b4:13:a8:f4:e9:3e:09: 86:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.168.0/24 IPv6: 2401:b140::/32 Signature Algorithm: sha256WithRSAEncryption cb:fb:48:4a:ee:75:4d:3e:ba:a3:f4:88:9a:8a:f0:b5:bf:f6: 97:db:fb:1f:ef:db:0c:f1:27:f3:48:cb:ef:61:37:95:a9:4a: d8:a0:18:68:bd:c4:15:8e:70:d0:32:ee:f0:25:08:11:e3:59: c5:1d:7f:06:4e:41:68:7e:c3:ea:51:dd:bd:06:c2:4e:4d:89: 01:8d:bd:b0:0b:e9:2d:99:25:0d:82:4c:72:91:53:fc:70:ca: dd:03:41:15:36:7b:70:9a:e5:55:7d:00:82:d9:b4:43:5f:60: 39:49:28:8d:fd:0f:35:93:da:ad:d7:42:7d:fe:cb:eb:ce:95: 4e:a5:4e:05:ff:ce:05:ed:e8:53:9d:36:84:46:a1:49:1c:a4: 7d:c6:89:bb:83:93:d7:f1:b3:79:3b:8a:1b:6a:0b:51:f3:20: 80:79:f1:c4:51:6f:fc:8c:ec:02:43:9a:7b:d6:98:3c:fc:bf: 5e:84:7f:25:10:43:ff:2b:0c:5f:e8:3b:8f:19:82:96:86:57: 9a:93:14:88:83:f7:df:be:4c:10:86:11:99:38:d5:28:d4:73: 5c:5b:84:de:95:e0:4f:d5:08:c0:54:a0:74:d0:3f:68:3b:6e: e6:92:f9:af:de:cb:c4:fd:2a:d2:8a:e0:10:5a:09:f5:b1:b0: fd:cd:62:2b -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIDAnWoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNzE0MTYxMVoXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNkVGNUUxMTAvBgNVBAUTKDcwQ0QwMjk2MEE3MTE0RTFGRDdGREIz MkFDOUFBM0U4RDJBRUJGNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNgQeWHYsv3j9hmmyYHi8XjmiTiZUor/QjuVKo4d0Mz4uBRlUnLfoOElBqqat0 tGewI0n3zxr+as+kugdLXdJu1Xwr7WTbRJnOkbp3jHxfEXXeNzoOdSeyKT1ppthA 26aHShMNUJOK9kPXiFRoYPxGxVF8zuuGnkuknDjoKyX5tIreKD0gVKyu2c0GI4M7 Z8/9g9pDACYacBCnJTeKeKNiJthBasppHCgdMFnxEJ5aWf8ainuROFtHp22R2K52 rSzDi7tO0y+qyGfK9FWoShNEtqPiXenPSSEv4hUMYzVhS0iQAghmrNZtwJBPmbLk slIg9emC2xx4tBOo9Ok+CYY1AgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUcM0Clgpx FOH9f9syrJqj6NKuv0EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZFRjVFL0YzOERDRjhBMTA2QjExRThCOENBMDIwQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdw eEZPSDlmOXN5ckpxajZOS3V2MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBABnY6gwDQQCAAIwBwMFACQBsUAwDQYJKoZIhvcNAQELBQADggEB AMv7SErudU0+uqP0iJqK8LW/9pfb+x/v2wzxJ/NIy+9hN5WpStigGGi9xBWOcNAy 7vAlCBHjWcUdfwZOQWh+w+pR3b0Gwk5NiQGNvbAL6S2ZJQ2CTHKRU/xwyt0DQRU2 e3Ca5VV9AILZtENfYDlJKI39DzWT2q3XQn3+y+vOlU6lTgX/zgXt6FOdNoRGoUkc pH3GibuDk9fxs3k7ihtqC1HzIIB58cRRb/yM7AJDmnvWmDz8v16EfyUQQ/8rDF/o O48ZgpaGV5qTFIiD99++TBCGEZk41SjUc1xbhN6V4E/VCMBUoHTQP2g7buaS+a/e y8T9KtKK4BBaCfWxsP3NYis= -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:07 2025 by rpki-client