This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer File: eHZtYCpA71cBQmhKcj6KNAxv84I.cer (raw, json) Hash identifier: H0Qb8wLD9YMtTSwYg0JeFm0m8irHYQlntmvxAMs6TTA= Subject key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C38 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft caRepository: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 13:01:09 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 103.177.46.0/23 IP: 2001:df0:1c40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162872 (0x27c38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 5 13:01:09 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A912A70D, serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4f:00:9a:c1:cf:17:db:59:42:39:f5:05:df: 11:08:d9:b8:48:08:03:9f:b4:c9:77:04:7a:23:29: d4:5e:bc:85:98:73:e0:13:4d:d9:9c:55:e7:a2:bd: 6a:67:be:c8:40:fd:b9:17:75:5d:7c:ed:4f:04:5f: 92:44:fc:27:b7:31:fb:e7:07:2f:39:2e:50:f5:8c: 68:cc:2f:f3:d5:ab:af:61:5d:5a:d2:ad:21:c8:80: 0a:1a:d3:f6:30:00:33:1b:e2:98:05:c8:e3:78:b9: c2:a1:da:86:7e:73:8a:15:cf:50:46:ca:bb:81:53: 53:bc:2e:19:64:84:77:08:42:8e:ab:b2:43:b6:e9: 9d:96:8e:68:79:87:7c:a5:f6:ae:59:4f:67:3b:b7: 2b:9a:12:56:a8:25:ca:50:8d:db:cb:49:68:e1:ee: 9b:89:bc:95:e6:37:b9:98:a7:69:60:82:5a:d8:78: 3d:71:11:76:ef:ea:f8:9b:b3:29:b9:e2:96:e9:d8: 7c:13:9a:6e:8a:0b:4c:8c:cc:75:0b:e7:6a:65:99: be:83:ce:9b:90:88:b2:f4:c0:fd:19:e5:cb:88:15: f6:c6:64:08:7f:95:64:51:e2:30:39:25:9c:25:57: ad:1a:8b:77:9e:61:75:2c:15:9e:c7:ab:b1:96:92: 53:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.46.0/23 IPv6: 2001:df0:1c40::/48 Signature Algorithm: sha256WithRSAEncryption b0:e9:4e:0a:9b:66:a3:73:30:5e:9c:68:85:90:f1:90:f6:7c: 04:02:98:45:6d:ec:99:ac:91:3a:b5:79:3a:a2:70:d3:ef:29: f9:4b:2c:9c:66:30:c4:f1:7a:d2:c7:52:55:95:29:88:13:b2: a5:19:f3:5a:d1:30:a1:2f:90:0d:0a:df:4f:d9:2d:7d:a7:11: 8f:da:d7:99:4b:41:92:a8:76:5d:df:cc:fe:0b:c2:35:e4:fe: c4:1d:d3:4e:63:21:25:de:89:a6:a6:d3:79:a1:07:fc:84:8f: 64:ea:bd:bb:81:a8:30:90:3b:67:10:5a:d6:5e:b6:83:48:7c: 22:ec:a2:fe:35:98:01:24:ec:60:80:87:2f:20:59:a7:8a:22: 22:5e:12:50:c2:46:77:14:f3:43:fe:08:22:42:3b:d5:67:be: 7d:0b:4f:71:ee:8c:e7:35:90:63:aa:39:c3:38:47:34:b0:e2: 73:16:39:50:d6:ab:29:bc:49:06:53:60:0a:e2:c0:9d:75:de: ef:11:f6:11:ee:76:e5:64:70:8e:b6:08:4f:a7:f8:c8:79:c0: bc:4e:55:36:34:00:fb:07:28:f3:a7:ca:5f:66:c0:c2:18:fb: 10:cc:b0:25:ca:88:ea:cd:49:a7:0d:6c:16:76:63:88:5e:6f: 40:aa:0f:5e -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIDAnw4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNTEzMDEwOVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxMkE3MEQxMTAvBgNVBAUTKDc4NzY2RDYwMkE0MEVGNTcwMTQyNjg0 QTcyM0U4QTM0MEM2RkYzODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrTwCawc8X21lCOfUF3xEI2bhICAOftMl3BHojKdRevIWYc+ATTdmcVeeivWpn vshA/bkXdV187U8EX5JE/Ce3MfvnBy85LlD1jGjML/PVq69hXVrSrSHIgAoa0/Yw ADMb4pgFyON4ucKh2oZ+c4oVz1BGyruBU1O8LhlkhHcIQo6rskO26Z2Wjmh5h3yl 9q5ZT2c7tyuaElaoJcpQjdvLSWjh7puJvJXmN7mYp2lgglrYeD1xEXbv6vibsym5 4pbp2HwTmm6KC0yMzHUL52plmb6DzpuQiLL0wP0Z5cuIFfbGZAh/lWRR4jA5JZwl V60ai3eeYXUsFZ7Hq7GWklONAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUeHZtYCpA 71cBQmhKcj6KNAxv84IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJBNzBELzExMTRDOUJBNTk1MDExRUNBRTA5MzI4MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyQTcwRC8xMTE0QzlCQTU5NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNw QTcxY0JRbWhLY2o2S05BeHY4NEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf MAwEAgABMAYDBAFnsS4wDwQCAAIwCQMHACABDfAcQDANBgkqhkiG9w0BAQsFAAOC AQEAsOlOCptmo3MwXpxohZDxkPZ8BAKYRW3smayROrV5OqJw0+8p+UssnGYwxPF6 0sdSVZUpiBOypRnzWtEwoS+QDQrfT9ktfacRj9rXmUtBkqh2Xd/M/gvCNeT+xB3T TmMhJd6JpqbTeaEH/ISPZOq9u4GoMJA7ZxBa1l62g0h8Iuyi/jWYASTsYICHLyBZ p4oiIl4SUMJGdxTzQ/4IIkI71We+fQtPce6M5zWQY6o5wzhHNLDicxY5UNarKbxJ BlNgCuLAnXXe7xH2Ee525WRwjrYIT6f4yHnAvE5VNjQA+wco86fKX2bAwhj7EMyw JcqI6s1Jpw1sFnZjiF5vQKoPXg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:40 2025 by rpki-client