This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer File: f5auCiLKk4vV-dmnMor1g2LrIsE.cer (raw, json) Hash identifier: xj7vmeG+7e8VRtrO0QjAYOEtvM6tA9JnzEn4YrnMSDg= Subject key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02736F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 05 Nov 2025 20:58:52 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 135577 AS: 138610 IP: 103.109.144.0/22 IP: 2405:4900::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160623 (0x2736f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 5 20:58:52 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91BFFBE, serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:94:7e:7f:be:cd:2d:20:ee:44:2f:26:c5: a4:3c:20:f1:32:a0:5a:d1:f7:fe:ea:4a:59:cf:1a: 26:66:10:e0:56:2b:db:1a:9f:5b:59:94:1f:73:e4: de:1b:20:48:5b:ac:c7:05:71:aa:07:5f:cc:9e:2d: d5:f1:f4:bb:46:b2:83:fe:18:75:b1:e5:bb:84:81: e3:6b:b0:28:73:a7:c3:da:ba:c7:94:9d:d9:34:b9: f8:4f:94:2a:e1:74:a4:e0:c6:ff:8f:14:48:4e:7a: 21:0b:d9:3c:f7:e3:ae:24:87:7b:e9:5c:17:c6:11: 21:a4:f5:c5:ec:3c:dc:11:6c:11:e9:01:d8:ed:6b: 0d:92:5b:8f:1a:c2:77:0c:44:a4:e0:ca:3c:a3:a3: 2b:49:8b:83:b1:4a:ea:6b:1c:cf:15:b4:8d:06:4a: ba:6f:1c:bb:72:ac:4a:a8:9d:8a:44:e1:26:a2:44: 8a:05:8d:73:95:e8:07:06:e7:ed:61:a4:db:68:5f: 56:0a:65:9e:d1:5b:f1:12:0b:1c:e9:8a:29:22:67: fb:55:44:47:84:fb:9d:99:ca:89:e3:38:64:fb:01: bf:f2:14:ba:c6:be:9b:0e:35:29:5b:89:56:52:17: db:88:ac:86:b3:51:c7:49:29:06:68:15:7c:5d:2e: 4f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135577 138610 sbgp-ipAddrBlock: critical IPv4: 103.109.144.0/22 IPv6: 2405:4900::/32 Signature Algorithm: sha256WithRSAEncryption ae:33:c6:f2:46:e2:26:19:61:17:d8:31:75:d6:c0:65:83:46: 22:9c:8a:d1:04:8b:a6:9f:4a:82:9c:07:bf:12:3d:c2:0c:f3: 2a:e1:26:b8:c7:1e:27:8d:12:bf:c5:73:7b:f4:73:bc:cd:70: 90:73:b8:42:cd:54:37:7c:4d:15:45:75:2d:5c:7c:35:fa:b8: c6:7b:0a:81:77:d6:de:e4:a9:90:98:5a:fb:d0:35:96:0e:40: 3c:03:fa:5e:fb:27:96:e5:d2:63:93:6a:6d:97:59:33:c9:81: 3c:b4:89:b9:22:97:a5:52:74:60:8a:b4:0a:ae:a8:ec:1c:28: f9:af:a9:43:e4:45:12:73:92:67:d8:dc:1a:18:60:3f:a3:d5: a9:38:41:40:cc:5d:e4:60:4f:e0:66:e5:38:78:f4:93:7f:23: 9d:9b:6c:d1:12:0d:31:fd:fb:6d:52:75:a0:ff:c3:c1:4a:88: 7a:ac:7d:50:57:6a:54:73:f5:81:c9:ed:27:e4:45:84:58:5b: b8:f6:f1:0b:df:51:d4:43:80:37:e1:7c:71:17:ca:7b:58:2a: 79:f6:5e:05:86:e9:ee:49:cb:51:2a:f0:81:4e:27:d9:cd:5f: b9:54:10:8d:c7:2f:f7:2f:f7:f8:b2:2b:4d:26:8a:d1:4d:a3: 56:fc:8f:14 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIDAnNvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNTIwNTg1MloXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkZGQkUxMTAvBgNVBAUTKDdGOTZBRTBBMjJDQTkzOEJENUY5RDlB NzMyOEFGNTgzNjJFQjIyQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+8JR+f77NLSDuRC8mxaQ8IPEyoFrR9/7qSlnPGiZmEOBWK9san1tZlB9z5N4b IEhbrMcFcaoHX8yeLdXx9LtGsoP+GHWx5buEgeNrsChzp8PauseUndk0ufhPlCrh dKTgxv+PFEhOeiEL2Tz3464kh3vpXBfGESGk9cXsPNwRbBHpAdjtaw2SW48awncM RKTgyjyjoytJi4OxSuprHM8VtI0GSrpvHLtyrEqonYpE4SaiRIoFjXOV6AcG5+1h pNtoX1YKZZ7RW/ESCxzpiikiZ/tVREeE+52ZyonjOGT7Ab/yFLrGvpsONSlbiVZS F9uIrIazUcdJKQZoFXxdLk9RAgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQUf5auCiLK k4vV+dmnMor1g2LrIsEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJGRkJFLzQyMTU5RjVBOUQwMjExRUY5OUNDODYwOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCRkZCRS80MjE1OUY1QTlEMDIxMUVGOTlDQzg2MDlDNEY5QUUwMi9mNWF1Q2lM S2s0dlYtZG1uTW9yMWcyTHJJc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAhGZAgMCHXIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJnbZAw DQQCAAIwBwMFACQFSQAwDQYJKoZIhvcNAQELBQADggEBAK4zxvJG4iYZYRfYMXXW wGWDRiKcitEEi6afSoKcB78SPcIM8yrhJrjHHieNEr/Fc3v0c7zNcJBzuELNVDd8 TRVFdS1cfDX6uMZ7CoF31t7kqZCYWvvQNZYOQDwD+l77J5bl0mOTam2XWTPJgTy0 ibkil6VSdGCKtAquqOwcKPmvqUPkRRJzkmfY3BoYYD+j1ak4QUDMXeRgT+Bm5Th4 9JN/I52bbNESDTH9+21SdaD/w8FKiHqsfVBXalRz9YHJ7SfkRYRYW7j28QvfUdRD gDfhfHEXyntYKnn2XgWG6e5Jy1Eq8IFOJ9nNX7lUEI3HL/cv9/iyK00mitFNo1b8 jxQ= -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:07 2025 by rpki-client