This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer File: d2KqgncCDQu1x1mX3l99ilFC3xQ.cer (raw, json) Hash identifier: iaNThMPaiku/Ozi/WLg/88zmUsvbjLmgPIVlDmHHA3c= Subject key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0275E2 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 12:31:14 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 63932 IP: 43.229.12.0/22 IP: 103.48.16.0/22 IP: 114.130.240.0/21 IP: 114.130.252.0/22 IP: 2401:ed80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161250 (0x275e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 18 12:31:14 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3f:1c:1a:86:2d:ec:13:1d:c0:9f:b2:fd:78: 77:fe:a6:c8:80:0c:a4:63:57:2f:60:f3:68:ae:e1: 9a:b3:25:97:03:a0:30:2e:c0:2c:d3:ae:f8:46:6e: c4:6d:aa:f2:a4:a1:31:ad:44:a8:66:bb:f1:db:b8: e0:f1:02:20:0d:99:9a:e0:18:af:35:85:47:3f:93: 68:5c:95:e6:0f:f4:f7:57:0b:6e:41:c6:8c:7f:45: 98:43:6d:63:27:80:b4:b2:b3:09:fd:c5:3d:4c:84: 4e:0d:aa:d2:17:82:83:27:ae:58:1a:cd:58:e2:db: 28:54:86:4a:0f:84:1f:72:8c:32:5c:81:49:a8:83: 77:55:68:08:b9:4b:2c:b6:e3:45:aa:28:74:59:74: 36:df:5e:17:a4:99:92:f9:46:47:7a:aa:4c:67:53: df:a2:b9:98:e4:29:7e:ed:68:4e:ef:15:3b:b7:ce: 62:5d:da:c4:c3:1a:6b:92:03:6d:5b:52:1e:66:d2: 91:33:46:3f:a6:97:32:5a:95:9b:d2:f6:16:9a:1e: 8f:85:56:20:c2:f6:23:64:b0:ec:1c:f3:01:eb:e5: 9a:ed:28:89:e6:0f:c4:34:ef:c3:73:db:6a:45:ae: 7e:92:cc:26:90:24:10:ce:76:20:fb:14:a5:fc:35: 81:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63932 sbgp-ipAddrBlock: critical IPv4: 43.229.12.0/22 103.48.16.0/22 114.130.240.0/21 114.130.252.0/22 IPv6: 2401:ed80::/32 Signature Algorithm: sha256WithRSAEncryption ba:91:59:96:a6:70:17:f5:d4:7e:bc:06:c9:08:e7:85:7e:21: e3:31:31:1b:ec:46:e3:a5:8c:55:f2:98:dc:a7:1d:ab:d5:ee: af:d6:4d:51:29:89:d1:d4:fd:fa:83:49:d2:19:ba:4e:02:a9: ef:c0:9f:87:d4:18:58:8d:9f:80:36:25:04:b2:5b:67:52:7e: a6:27:72:d7:30:d8:17:42:b7:23:d8:07:5d:84:f3:ef:01:86: fd:8e:89:4c:33:44:9d:97:72:65:26:0d:ed:f3:4c:c0:ba:ec: 69:6b:43:c2:00:b9:ed:32:5b:17:e7:cb:33:81:cf:d3:95:85: a3:30:e8:f8:e6:d4:c8:83:7b:d5:8f:07:49:3f:fe:58:f2:39: dd:83:94:1e:9d:b1:a2:2d:c2:da:ad:62:8e:38:5b:70:2d:1e: 5d:76:c7:e1:7f:da:99:12:02:8b:fe:e8:49:14:92:0b:eb:f9: e8:e2:c8:74:95:0b:d0:8e:4d:70:94:60:99:0a:6b:7c:56:71: c0:61:0a:ed:82:87:1c:11:42:6e:52:be:e1:4c:46:be:c3:8f: ff:63:b7:36:68:e5:4a:b8:67:6f:4a:b6:65:73:c4:c7:88:b0: bf:46:49:b6:1f:cb:b5:47:10:d5:c9:fe:6e:84:b2:e3:47:a1: 21:62:d8:fb -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIDAnXiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExODEyMzExNFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5 N0RFNUY3RDhBNTE0MkRGMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgPxwahi3sEx3An7L9eHf+psiADKRjVy9g82iu4ZqzJZcDoDAuwCzTrvhGbsRt qvKkoTGtRKhmu/HbuODxAiANmZrgGK81hUc/k2hcleYP9PdXC25Bxox/RZhDbWMn gLSyswn9xT1MhE4NqtIXgoMnrlgazVji2yhUhkoPhB9yjDJcgUmog3dVaAi5Syy2 40WqKHRZdDbfXhekmZL5Rkd6qkxnU9+iuZjkKX7taE7vFTu3zmJd2sTDGmuSA21b Uh5m0pEzRj+mlzJalZvS9haaHo+FViDC9iNksOwc8wHr5ZrtKInmD8Q078Nz22pF rn6SzCaQJBDOdiD7FKX8NYGFAgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQUd2KqgncC DQu1x1mX3l99ilFC3xQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFGQUMzLzdCODY4QzA4OURGNTExRTg5NTdBQjQxNkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExRkFDMy83Qjg2OEMwODlERjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25j Q0RRdTF4MW1YM2w5OWlsRkMzeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAPm8MEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCK+UMAwQCZzAQ AwQDcoLwAwQCcoL8MA0EAgACMAcDBQAkAe2AMA0GCSqGSIb3DQEBCwUAA4IBAQC6 kVmWpnAX9dR+vAbJCOeFfiHjMTEb7EbjpYxV8pjcpx2r1e6v1k1RKYnR1P36g0nS GbpOAqnvwJ+H1BhYjZ+ANiUEsltnUn6mJ3LXMNgXQrcj2AddhPPvAYb9jolMM0Sd l3JlJg3t80zAuuxpa0PCALntMlsX58szgc/TlYWjMOj45tTIg3vVjwdJP/5Y8jnd g5QenbGiLcLarWKOOFtwLR5ddsfhf9qZEgKL/uhJFJIL6/no4sh0lQvQjk1wlGCZ Cmt8VnHAYQrtgoccEUJuUr7hTEa+w4//Y7c2aOVKuGdvSrZlc8THiLC/Rkm2H8u1 RxDVyf5uhLLjR6EhYtj7 -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:48 2025 by rpki-client