This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer File: frs7Qcl_MxP654HvYzI8SvYrj7c.cer (raw, json) Hash identifier: Mk8liIh8UtJjiDTCm1QTyTX/3vrJZFeNiWlI1XG+sF4= Subject key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C63 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 20:03:03 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 133847 AS: 146993 AS: 148994 IP: 43.224.88.0/22 IP: 43.242.108.0/22 IP: 103.12.60.0/22 IP: 103.38.20.0/22 IP: 103.43.108.0/22 IP: 103.199.148.0/22 IP: 103.207.72.0/22 IP: 137.59.80.0/22 IP: 210.16.124.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162915 (0x27c63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 5 20:03:03 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91B777C, serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cb:7e:cf:24:c4:06:f9:86:72:44:d3:86:a3: 15:fe:2b:2d:06:ac:73:86:b5:3a:fe:37:0f:1d:79: b3:36:8b:b1:01:fa:e6:64:75:cb:a2:eb:46:c4:f5: 01:fe:91:64:2d:33:2b:75:f9:ad:fe:55:4b:60:89: 41:e4:75:e0:b6:94:91:0d:47:69:67:ee:a0:c2:90: d5:ef:c6:b0:4f:4b:fe:72:08:7b:15:49:4d:1f:b6: 1c:16:7e:f4:ad:57:f0:96:6e:5e:4b:0d:ff:76:ef: 2a:8f:18:3e:ab:d8:79:f8:41:c6:cf:5c:06:cc:ca: a8:b2:9b:b9:0b:9b:d6:6d:d7:1a:e2:1e:68:e3:60: 13:1b:6f:c4:3a:48:e2:6d:d1:6a:f7:ee:70:65:0f: 6c:d0:b3:45:78:5f:8b:f1:6b:ad:24:e1:c0:e9:df: 4a:9a:a2:74:fa:36:ca:fc:c2:2b:20:a7:cc:20:c1: a8:ca:38:ad:2c:1d:f5:ec:f2:ed:d5:44:9c:5f:d2: 8d:24:82:b6:fe:5c:4e:9d:dd:1c:dc:84:72:5a:7b: 7e:34:d5:53:1f:06:c0:5c:28:ee:ff:95:8d:27:4f: 4c:b0:a3:ff:d7:aa:60:b8:31:07:bd:26:04:21:9b: db:35:34:a2:3d:d5:b7:f5:52:8c:b2:39:06:52:9c: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133847 146993 148994 sbgp-ipAddrBlock: critical IPv4: 43.224.88.0/22 43.242.108.0/22 103.12.60.0/22 103.38.20.0/22 103.43.108.0/22 103.199.148.0/22 103.207.72.0/22 137.59.80.0/22 210.16.124.0/22 Signature Algorithm: sha256WithRSAEncryption 67:29:74:10:54:6e:1e:05:9a:96:04:7b:e5:72:00:2c:e0:b3: 18:ee:75:17:a4:8e:74:b3:1f:78:6a:41:e0:b5:1b:1b:a4:6c: 92:e0:d7:42:63:7a:e0:73:29:eb:68:eb:0d:6b:28:7d:3e:98: 1f:80:03:60:20:04:a9:5a:5a:33:12:1e:9a:5e:00:e4:01:e5: 65:02:13:40:3d:ae:42:e4:6b:5c:1a:c2:5b:8f:3a:41:ef:aa: f3:10:81:2f:da:30:ed:70:3a:87:72:73:32:c3:1d:1f:fd:23: 11:4b:8e:ba:67:ce:28:f6:a6:37:4b:cc:6c:e8:f5:8d:00:12: 50:a3:a4:9d:bc:24:fd:cb:3a:82:fa:fb:d7:58:d6:8d:c3:71: f4:1c:fc:69:d5:d6:c2:88:cc:e4:5b:66:54:9a:3f:7e:9d:ff: 5f:f5:12:4e:7e:7b:38:93:52:bd:07:93:8b:f4:19:e3:61:a9: b8:f9:87:af:1d:45:b0:a6:82:17:f2:3a:de:0c:40:08:1c:4b: 0f:9c:10:d6:8e:21:c9:61:1b:a6:42:36:c3:b5:35:2c:ec:0d: 6b:82:04:e2:e0:83:45:02:58:7b:2e:65:cb:0b:ef:9d:81:96: e4:93:a0:0c:1a:08:24:4b:18:21:b0:f6:55:c0:d4:f1:91:05: fc:d2:02:d7 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIDAnxjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNTIwMDMwM1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjc3N0MxMTAvBgNVBAUTKDdFQkIzQjQxQzk3RjMzMTNGQUU3ODFF RjYzMzIzQzRBRjYyQjhGQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCay37PJMQG+YZyRNOGoxX+Ky0GrHOGtTr+Nw8debM2i7EB+uZkdcui60bE9QH+ kWQtMyt1+a3+VUtgiUHkdeC2lJENR2ln7qDCkNXvxrBPS/5yCHsVSU0fthwWfvSt V/CWbl5LDf927yqPGD6r2Hn4QcbPXAbMyqiym7kLm9Zt1xriHmjjYBMbb8Q6SOJt 0Wr37nBlD2zQs0V4X4vxa60k4cDp30qaonT6Nsr8wisgp8wgwajKOK0sHfXs8u3V RJxf0o0kgrb+XE6d3RzchHJae3401VMfBsBcKO7/lY0nT0ywo//XqmC4MQe9JgQh m9s1NKI91bf1UoyyOQZSnEipAgMBAAGjggNJMIIDRTAdBgNVHQ4EFgQUfrs7Qcl/ MxP654HvYzI8SvYrj7cwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI3NzdDLzZDRDgxMzNDQjJEQTExRUI4QjM4NEE2MEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNzc3Qy82Q0Q4MTMzQ0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNs X014UDY1NEh2WXpJOFN2WXJqN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAgrXAgMCPjECAwJGAjBPBggrBgEFBQcBBwEB/wRAMD4wPAQCAAEwNgME AivgWAMEAivybAMEAmcMPAMEAmcmFAMEAmcrbAMEAmfHlAMEAmfPSAMEAok7UAME AtIQfDANBgkqhkiG9w0BAQsFAAOCAQEAZyl0EFRuHgWalgR75XIALOCzGO51F6SO dLMfeGpB4LUbG6RskuDXQmN64HMp62jrDWsofT6YH4ADYCAEqVpaMxIeml4A5AHl ZQITQD2uQuRrXBrCW486Qe+q8xCBL9ow7XA6h3JzMsMdH/0jEUuOumfOKPamN0vM bOj1jQASUKOknbwk/cs6gvr711jWjcNx9Bz8adXWwojM5FtmVJo/fp3/X/USTn57 OJNSvQeTi/QZ42GpuPmHrx1FsKaCF/I63gxACBxLD5wQ1o4hyWEbpkI2w7U1LOwN a4IE4uCDRQJYey5lywvvnYGW5JOgDBoIJEsYIbD2VcDU8ZEF/NIC1w== -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:24 2025 by rpki-client