This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer File: fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer (raw, json) Hash identifier: bAREJOaMSQTj0nGPpHvAVyIZBA2l5ZfuhWLAUkyBwuk= Subject key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02739B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft caRepository: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 06 Nov 2025 15:32:27 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 24016 IP: 103.197.164.0/22 IP: 115.84.128.0/19 IP: 202.21.176.0/20 IP: 220.158.220.0/22 IP: 2401:8300::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160667 (0x2739b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 6 15:32:27 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:9c:14:60:ea:64:12:e3:0c:9c:45:67:a6: 46:19:52:62:91:c6:b6:17:90:aa:e1:e8:b0:59:fb: 4f:5e:d0:0b:d7:5a:fc:c2:44:b1:d4:b6:22:1e:dc: ff:de:7d:77:6c:62:2c:7a:d7:4d:1d:e1:83:f7:a5: c5:09:b3:82:69:59:66:7f:7e:08:65:87:92:31:aa: 5b:6c:d7:67:62:23:4f:d6:15:62:5a:05:70:6e:88: 3e:08:1e:1b:3f:02:b4:01:ef:3d:95:a1:53:f8:c1: d7:2e:44:1e:1a:12:9e:1e:89:37:91:85:1a:e2:0a: 29:65:b2:30:e3:44:00:f6:b5:90:dc:50:c7:cd:cc: 17:99:1f:0a:05:12:b4:0b:3e:d1:35:2b:c2:9a:68: 7d:75:e2:76:3c:d4:be:a8:4e:5b:1c:51:9f:2c:15: 68:de:03:f7:f5:38:f6:dd:a8:94:f6:1a:e1:f7:49: 86:49:d0:65:82:e6:ea:d9:cc:66:e5:a8:b2:e3:99: 4c:d6:4f:83:d2:f8:99:f9:8a:2a:54:5c:0d:5e:13: ce:59:2b:ee:d7:22:d1:d0:b9:04:ff:3c:7c:c4:0c: 9d:0d:bb:ae:ba:0c:b3:2b:47:01:92:9b:3e:7d:a4: 9d:68:24:99:42:4a:f3:49:bf:af:97:3c:7c:b1:c8: 51:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24016 sbgp-ipAddrBlock: critical IPv4: 103.197.164.0/22 115.84.128.0/19 202.21.176.0/20 220.158.220.0/22 IPv6: 2401:8300::/32 Signature Algorithm: sha256WithRSAEncryption 7b:f3:19:3c:f2:3c:3d:66:07:91:8d:58:2c:50:3c:c7:5e:49: ed:50:14:bd:6e:05:da:c2:55:fa:19:17:12:eb:c9:74:15:51: f0:46:16:37:a2:07:f8:43:b0:ad:8a:ba:3d:56:cd:9e:aa:46: b5:d4:46:98:44:bc:5c:de:e0:43:46:02:38:ca:08:f9:98:02: a2:bc:68:95:c7:5c:59:c1:48:44:67:90:7a:4a:e5:85:9f:6c: 7c:c4:9a:d3:23:71:19:8d:35:ea:6e:76:41:13:7b:35:3b:cb: 20:3c:a8:51:bd:23:10:2f:62:09:52:97:0e:ba:3e:8e:94:34: ca:3f:59:8e:18:7f:0b:3b:18:cc:a3:16:a9:8e:85:e7:40:a9: 92:88:f1:79:7a:13:8e:f2:a1:ce:d9:05:f4:0c:3e:68:35:eb: f6:72:7c:d8:77:2b:5c:2a:53:55:08:8f:df:f0:bc:87:fc:f7: ed:f5:1a:e7:33:b9:98:6a:30:47:65:96:75:c3:9c:5d:25:7c: 0a:2a:74:d7:59:3e:1a:df:79:6a:ff:dd:4f:2d:5a:48:80:5b: 6b:97:70:c4:0a:79:ba:36:c4:9c:94:bc:c0:7e:f5:4a:18:44: 7f:12:cd:5d:be:03:67:67:a6:5c:63:4b:8d:c8:d0:94:b0:73: ab:e3:51:bf -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgIDAnObMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNjE1MzIyN1oXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2 Q0M1MTYzQTA3NDNFNDFDODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5f5wUYOpkEuMMnEVnpkYZUmKRxrYXkKrh6LBZ+09e0AvXWvzCRLHUtiIe3P/e fXdsYix6100d4YP3pcUJs4JpWWZ/fghlh5Ixqlts12diI0/WFWJaBXBuiD4IHhs/ ArQB7z2VoVP4wdcuRB4aEp4eiTeRhRriCillsjDjRAD2tZDcUMfNzBeZHwoFErQL PtE1K8KaaH114nY81L6oTlscUZ8sFWjeA/f1OPbdqJT2GuH3SYZJ0GWC5urZzGbl qLLjmUzWT4PS+Jn5iipUXA1eE85ZK+7XItHQuQT/PHzEDJ0Nu666DLMrRwGSmz59 pJ1oJJlCSvNJv6+XPHyxyFERAgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQUfFt0FOPM gEBZvKhsxRY6B0PkHIUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk0RDU2L0U1RDQwN0ZFODZCMzExRTU5OEYzN0YxQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9Q TWdFQlp2S2hzeFJZNkIwUGtISVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICXdAwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAJnxaQDBAVzVIAD BATKFbADBALcntwwDQQCAAIwBwMFACQBgwAwDQYJKoZIhvcNAQELBQADggEBAHvz GTzyPD1mB5GNWCxQPMdeSe1QFL1uBdrCVfoZFxLryXQVUfBGFjeiB/hDsK2Kuj1W zZ6qRrXURphEvFze4ENGAjjKCPmYAqK8aJXHXFnBSERnkHpK5YWfbHzEmtMjcRmN NepudkETezU7yyA8qFG9IxAvYglSlw66Po6UNMo/WY4Yfws7GMyjFqmOhedAqZKI 8Xl6E47yoc7ZBfQMPmg16/ZyfNh3K1wqU1UIj9/wvIf89+31GuczuZhqMEdllnXD nF0lfAoqdNdZPhrfeWr/3U8tWkiAW2uXcMQKebo2xJyUvMB+9UoYRH8SzV2+A2dn plxjS43I0JSwc6vjUb8= -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:03 2025 by rpki-client