This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer File: f2vh1aJzD8In-vyJbRNDMkF4MXk.cer (raw, json) Hash identifier: s2upe5O5whJnO4+44E5yv+sV3mSWf2NskObsbTDLe7w= Subject key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A77 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 06:37:53 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 9723 AS: 17899 AS: 18388 AS: 24473 AS: 38085 AS: 38309 AS: 38484 IP: 1.178.2.0/23 IP: 1.178.66.0/23 IP: 1.178.80.0/24 IP: 1.178.82.0 -- 1.178.85.255 IP: 1.178.96.0/22 IP: 1.178.175.0 -- 1.178.179.255 IP: 1.179.0.0/23 IP: 1.179.4.0 -- 1.179.13.255 IP: 1.179.16.0/21 IP: 1.179.48.0/22 IP: 1.179.62.0/23 IP: 1.179.96.0/22 IP: 58.87.0.0/20 IP: 110.238.21.0/24 IP: 110.238.24.0/23 IP: 110.238.144.0/21 IP: 110.238.240.0/23 IP: 110.239.0.0/21 IP: 110.239.15.0 -- 110.239.17.255 IP: 110.239.26.0/24 IP: 110.239.31.0 -- 110.239.35.255 IP: 110.239.128.0/20 IP: 110.239.176.0/21 IP: 119.12.80.0/21 IP: 119.13.0.0 -- 119.13.10.255 IP: 119.13.48.0/23 IP: 119.13.144.0/22 IP: 119.13.176.0/22 IP: 119.13.240.0/23 IP: 121.91.96.0/23 IP: 121.91.199.0/24 IP: 123.200.128.0/18 IP: 123.200.200.0/23 IP: 123.200.208.0/20 IP: 123.200.240.0/23 IP: 202.83.64.0/19 IP: 202.183.96.0/19 IP: 210.56.64.0/24 IP: 210.56.68.0/22 IP: 220.157.64.0/24 IP: 220.157.70.0/23 IP: 220.157.74.0/23 IP: 220.157.79.0 -- 220.157.87.255 IP: 220.157.90.0 -- 220.157.95.255 IP: 2407:6800::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162423 (0x27a77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 06:37:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d4:72:e5:1e:31:f8:4e:fd:eb:a1:08:8c:c5: 20:6f:6b:09:89:66:65:e8:a2:a3:13:db:43:31:e6: f1:56:8a:74:50:5a:d6:38:85:2f:0a:ee:cf:cc:fc: b0:a9:ca:51:50:22:e0:e0:dc:68:13:a7:c4:52:7a: e0:50:f5:14:e7:84:23:21:c2:c5:f1:37:7a:e2:40: 1e:fa:85:6b:2f:4b:2c:5a:ee:e7:01:f8:06:01:c4: 27:39:4c:e0:d7:b4:e3:96:22:b1:7e:5d:96:d7:4b: 05:96:86:24:42:48:6b:65:1f:65:b8:da:e9:c8:8b: ba:fc:c0:8a:6d:23:95:f3:fd:91:c7:71:02:db:79: ad:e9:d3:fb:55:14:13:bf:57:f6:6a:48:b1:4e:bd: 9b:d7:0d:03:9c:43:15:44:81:bc:e4:a3:fb:20:a4: 49:1f:04:07:0b:e2:b3:06:0b:0b:ac:8a:a3:1c:17: 62:cc:09:e1:4b:3c:1d:94:52:0f:04:c5:2f:d2:80: 64:9d:67:55:37:07:cc:7a:6b:9c:00:42:66:78:69: db:ba:cf:84:f3:19:5c:68:44:0a:55:3d:55:c9:3f: e1:54:1e:65:7e:47:d2:8f:92:04:d4:d5:a3:9e:53: c2:46:6e:91:8a:a2:c2:38:94:5d:38:f9:e1:22:95: d3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9723 17899 18388 24473 38085 38309 38484 sbgp-ipAddrBlock: critical IPv4: 1.178.2.0/23 1.178.66.0/23 1.178.80.0/24 1.178.82.0-1.178.85.255 1.178.96.0/22 1.178.175.0-1.178.179.255 1.179.0.0/23 1.179.4.0-1.179.13.255 1.179.16.0/21 1.179.48.0/22 1.179.62.0/23 1.179.96.0/22 58.87.0.0/20 110.238.21.0/24 110.238.24.0/23 110.238.144.0/21 110.238.240.0/23 110.239.0.0/21 110.239.15.0-110.239.17.255 110.239.26.0/24 110.239.31.0-110.239.35.255 110.239.128.0/20 110.239.176.0/21 119.12.80.0/21 119.13.0.0-119.13.10.255 119.13.48.0/23 119.13.144.0/22 119.13.176.0/22 119.13.240.0/23 121.91.96.0/23 121.91.199.0/24 123.200.128.0/18 123.200.200.0/23 123.200.208.0/20 123.200.240.0/23 202.83.64.0/19 202.183.96.0/19 210.56.64.0/24 210.56.68.0/22 220.157.64.0/24 220.157.70.0/23 220.157.74.0/23 220.157.79.0-220.157.87.255 220.157.90.0-220.157.95.255 IPv6: 2407:6800::/32 Signature Algorithm: sha256WithRSAEncryption 49:13:43:68:92:9d:02:1c:ed:cb:d6:82:0e:38:01:ba:55:db: 38:33:f4:8b:ae:2a:e2:6a:6f:6c:2a:12:18:02:5e:fa:4b:51: 46:cd:fb:dc:b3:b4:96:95:0f:f0:36:26:01:24:a4:5f:a7:ef: 0d:bc:54:8e:4f:3b:51:8f:85:23:6f:b6:94:50:00:e6:d9:08: 61:ab:5d:4c:a2:ae:ed:2b:f9:a9:e1:19:0e:48:39:4a:be:23: 87:d1:d2:73:e8:db:43:13:c6:1e:fb:02:22:1c:85:5d:cd:2d: 29:0a:f3:70:56:94:80:e9:0c:f1:bf:5c:3a:cd:56:8e:8e:cf: 37:c6:bb:fa:d4:b5:7e:76:23:75:c2:d7:a2:88:72:e9:07:8b: eb:87:5a:f3:c7:47:9d:f6:95:8c:dc:f4:57:9c:d9:d6:f1:2b: b6:d4:b0:a3:46:4c:ce:ba:a3:d0:75:a8:de:1c:ac:2e:81:30: 77:74:54:75:5e:44:38:dc:99:23:9a:16:d1:fc:9f:4c:d7:86: 56:22:51:08:fd:07:8c:b7:44:58:c5:90:35:80:d7:45:14:9b: a8:d8:56:09:23:d1:ef:49:43:74:f2:fd:3b:77:95:ad:09:8d: 1a:a4:62:d3:c0:12:9d:6a:e8:db:89:7e:5b:45:2d:41:c5:5a: 4a:37:28:01 -----BEGIN CERTIFICATE----- MIIHjjCCBnagAwIBAgIDAnp3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjA2Mzc1M1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxREI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4 OTZEMTM0MzMyNDE3ODMxNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf1HLlHjH4Tv3roQiMxSBvawmJZmXooqMT20Mx5vFWinRQWtY4hS8K7s/M/LCp ylFQIuDg3GgTp8RSeuBQ9RTnhCMhwsXxN3riQB76hWsvSyxa7ucB+AYBxCc5TODX tOOWIrF+XZbXSwWWhiRCSGtlH2W42unIi7r8wIptI5Xz/ZHHcQLbea3p0/tVFBO/ V/ZqSLFOvZvXDQOcQxVEgbzko/sgpEkfBAcL4rMGCwusiqMcF2LMCeFLPB2UUg8E xS/SgGSdZ1U3B8x6a5wAQmZ4adu6z4TzGVxoRApVPVXJP+FUHmV+R9KPkgTU1aOe U8JGbpGKosI4lF04+eEildMRAgMBAAGjggSDMIIEfzAdBgNVHQ4EFgQUf2vh1aJz D8In+vyJbRNDMkF4MXkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURCNEZFL0NGNEExMEVBODVFMTExRUJBRkI1MUU4NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEQjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFK ekQ4SW4tdnlKYlJORE1rRjRNWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQgBAf8EJTAj oCEwHwICJfsCAkXrAgJH1AICX5kCAwCUxQIDAJWlAgMAllQwggF3BggrBgEFBQcB BwEB/wSCAWYwggFiMIIBTwQCAAEwggFHAwQBAbICAwQBAbJCAwQAAbJQMAwDBAEB slIDBAEBslQDBAIBsmAwDAMEAAGyrwMEAgGysAMEAQGzADAMAwQCAbMEAwQBAbMM AwQDAbMQAwQCAbMwAwQBAbM+AwQCAbNgAwQEOlcAAwQAbu4VAwQBbu4YAwQDbu6Q AwQBbu7wAwQDbu8AMAwDBABu7w8DBAFu7xADBABu7xowDAMEAG7vHwMEAm7vIAME BG7vgAMEA27vsAMEA3cMUDALAwMAdw0DBAB3DQoDBAF3DTADBAJ3DZADBAJ3DbAD BAF3DfADBAF5W2ADBAB5W8cDBAZ7yIADBAF7yMgDBAR7yNADBAF7yPADBAXKU0AD BAXKt2ADBADSOEADBALSOEQDBADcnUADBAHcnUYDBAHcnUowDAMEANydTwMEA9yd UDAMAwQB3J1aAwQF3J1AMA0EAgACMAcDBQAkB2gAMA0GCSqGSIb3DQEBCwUAA4IB AQBJE0Nokp0CHO3L1oIOOAG6Vds4M/SLririam9sKhIYAl76S1FGzfvcs7SWlQ/w NiYBJKRfp+8NvFSOTztRj4Ujb7aUUADm2Qhhq11Moq7tK/mp4RkOSDlKviOH0dJz 6NtDE8Ye+wIiHIVdzS0pCvNwVpSA6Qzxv1w6zVaOjs83xrv61LV+diN1wteiiHLp B4vrh1rzx0ed9pWM3PRXnNnW8Su21LCjRkzOuqPQdajeHKwugTB3dFR1XkQ43Jkj mhbR/J9M14ZWIlEI/QeMt0RYxZA1gNdFFJuo2FYJI9HvSUN08v07d5WtCY0apGLT wBKdaujbiX5bRS1BxVpKNygB -----END CERTIFICATE-----Generated at Sat Dec 6 09:38:11 2025 by rpki-client