This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer File: f_xaKedfnr4HnQUkfw3_DPmH8cI.cer (raw, json) Hash identifier: dld4408DDcGERJHS9KCPmiOvRnnoiitniLVRIRvtQbI= Subject key identifier: 7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02765D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 17:00:14 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 45930 IP: 103.4.104.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161373 (0x2765d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 19 17:00:14 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91B4C67, serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:07:7b:45:a8:77:a4:af:07:71:47:3f:12:dd: 1f:6b:65:24:92:44:65:93:a4:2e:f0:87:8a:54:5e: 94:79:0a:a5:cf:bf:cb:05:74:1b:de:dc:96:b2:83: d6:31:73:b4:08:97:94:c7:1d:d8:19:2e:23:85:ba: 3c:1e:a2:58:c0:75:91:e7:8b:3c:72:ff:34:47:2f: 2d:09:39:a1:7d:04:c1:8f:31:9e:b2:ac:56:de:84: cd:22:9f:15:7e:5e:05:0b:d9:82:3d:9f:5d:5b:87: 55:52:c7:c6:d1:17:85:bd:66:99:96:5a:b1:ce:27: c3:cf:ce:41:a1:89:4e:9a:ae:f0:a0:84:83:c6:17: d3:f3:69:47:ea:37:bf:cd:0b:40:b2:88:a2:5b:03: d5:6a:14:a3:d8:5f:47:ac:12:d6:de:9b:ad:bb:3c: 2e:5a:85:77:31:d3:e9:42:6a:52:96:34:22:ae:df: b5:ba:62:3b:22:f8:7e:07:79:b2:d0:77:b9:52:59: 31:96:ac:bb:18:42:66:e5:32:5f:3c:b9:01:5e:26: c4:54:b2:55:a5:46:84:3c:62:16:03:11:8b:25:6a: c8:73:93:4c:0d:f6:c6:96:c7:7c:e9:ff:33:21:68: ac:a7:6e:c0:53:4c:43:6e:2e:a5:74:02:27:9a:e6: 19:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45930 sbgp-ipAddrBlock: critical IPv4: 103.4.104.0/22 Signature Algorithm: sha256WithRSAEncryption 79:3d:8f:08:30:63:c9:7c:64:c5:12:33:57:2f:d8:60:92:ce: 7d:d1:2d:69:d9:cb:83:c6:16:c6:71:5b:86:0d:d3:7a:cb:24: 41:9e:a1:77:3a:7e:57:e7:16:65:ff:9c:cb:59:c4:f5:92:76: 3e:17:99:d4:77:a2:4d:5f:47:e3:56:74:23:42:aa:eb:e1:e4: 62:31:4a:73:ea:b1:05:c2:c7:8e:90:4e:32:c5:ad:a3:d1:69: b4:53:93:90:31:64:8d:5b:26:09:ed:57:8e:34:a0:97:d0:fd: 6e:15:a7:b1:72:fa:56:7e:40:54:5e:a6:60:57:57:f0:97:89: 03:7d:55:2b:24:fb:b2:7f:84:1d:82:e0:3a:22:87:88:27:54: 8e:91:2b:c6:79:46:94:56:11:ef:dc:ce:5d:de:1e:26:37:6b: dd:bb:c0:e5:f6:2d:41:74:d7:30:9e:37:72:41:22:a8:52:16: 26:7a:c4:b3:17:8d:3a:c9:c1:e5:9b:38:b0:8f:7f:44:d2:bd: 91:e1:61:89:3b:77:1c:bc:0c:5f:f1:ea:b6:fd:76:39:57:99: 6e:88:4a:db:cf:8e:be:a4:82:49:73:1f:4b:94:54:d0:79:70: a3:28:8f:cf:7e:dd:77:67:a5:02:eb:32:49:d3:32:66:a9:a1: fa:a3:19:ab -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnZdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExOTE3MDAxNFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjRDNjcxMTAvBgNVBAUTKDdGRkM1QTI5RTc1RjlFQkUwNzlEMDUy NDdGMERGRjBDRjk4N0YxQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoB3tFqHekrwdxRz8S3R9rZSSSRGWTpC7wh4pUXpR5CqXPv8sFdBve3Jayg9Yx c7QIl5THHdgZLiOFujweoljAdZHnizxy/zRHLy0JOaF9BMGPMZ6yrFbehM0inxV+ XgUL2YI9n11bh1VSx8bRF4W9ZpmWWrHOJ8PPzkGhiU6arvCghIPGF9PzaUfqN7/N C0CyiKJbA9VqFKPYX0esEtbem627PC5ahXcx0+lCalKWNCKu37W6Yjsi+H4HebLQ d7lSWTGWrLsYQmblMl88uQFeJsRUslWlRoQ8YhYDEYslashzk0wN9saWx3zp/zMh aKynbsBTTENuLqV0Aiea5hlDAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUf/xaKedf nr4HnQUkfw3/DPmH8cIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI0QzY3L0JGM0ZDMkZBMURBMTExRTJCM0VDMUY5NDA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNEM2Ny9CRjNGQzJGQTFEQTExMUUyQjNFQzFGOTQwOEIwMkNEMi9mX3hhS2Vk Zm5yNEhuUVVrZnczX0RQbUg4Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALNqMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZwRoMA0GCSqG SIb3DQEBCwUAA4IBAQB5PY8IMGPJfGTFEjNXL9hgks590S1p2cuDxhbGcVuGDdN6 yyRBnqF3On5X5xZl/5zLWcT1knY+F5nUd6JNX0fjVnQjQqrr4eRiMUpz6rEFwseO kE4yxa2j0Wm0U5OQMWSNWyYJ7VeONKCX0P1uFaexcvpWfkBUXqZgV1fwl4kDfVUr JPuyf4QdguA6IoeIJ1SOkSvGeUaUVhHv3M5d3h4mN2vdu8Dl9i1BdNcwnjdyQSKo UhYmesSzF406ycHlmziwj39E0r2R4WGJO3ccvAxf8eq2/XY5V5luiErbz46+pIJJ cx9LlFTQeXCjKI/Pft13Z6UC6zJJ0zJmqaH6oxmr -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:41 2025 by rpki-client