This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer File: giq84EQXvhV7KDO6OwIw3iOEwkA.cer (raw, json) Hash identifier: KTTZEYj66WwcHrPhOqutjsZrIrkyWjpkz519ZUoBH/0= Subject key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027690 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft caRepository: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 20 Nov 2025 12:31:11 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 138566 IP: 103.133.32.0/22 IP: 2404:46c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161424 (0x27690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 20 12:31:11 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A911FCC1, serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:dd:de:37:53:f7:c5:96:04:d8:d1:58:98: 34:45:66:fa:5d:fe:cc:6e:2c:d4:de:f6:fd:36:f7: 00:89:ef:0c:86:7a:6b:90:c7:4d:49:df:94:cf:d4: 61:fc:14:9c:f7:29:03:d7:e0:9c:83:6f:96:71:34: fb:0c:4b:8d:23:34:31:df:63:77:bd:5d:f8:95:6d: 6e:0e:55:90:70:d9:45:10:e8:d0:da:60:88:5d:e7: cc:c0:c8:7d:11:82:e4:85:e9:2d:f2:d3:67:36:83: cb:8c:c0:7f:ef:8d:05:35:ff:49:97:c7:03:6c:35: fc:ca:ff:40:be:3d:2a:a7:0d:4b:c7:91:19:35:e7: 2e:67:4f:a5:57:43:fb:9b:34:4d:f3:c6:a1:49:b6: f8:f4:b4:df:41:92:f3:ac:e0:8a:b7:2d:09:c9:76: 6f:57:a6:f9:da:88:1a:41:c0:e4:29:dd:7b:c0:8d: 35:18:cb:25:2b:5d:b2:bb:23:7b:22:54:ef:63:c6: 98:db:2d:af:f7:a4:88:6c:bc:10:63:d8:8e:e7:db: 20:e7:11:24:ca:73:49:41:93:db:a3:41:ca:de:11: ba:55:64:c9:35:11:5e:27:6a:1a:0f:4c:79:05:3a: 77:1f:05:32:24:7b:97:b7:ec:e4:2a:01:35:e7:cd: 60:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138566 sbgp-ipAddrBlock: critical IPv4: 103.133.32.0/22 IPv6: 2404:46c0::/32 Signature Algorithm: sha256WithRSAEncryption 33:ba:dd:3b:6b:d2:6e:e2:91:74:52:2e:19:73:59:c6:0b:74: 44:a9:09:fa:ae:3c:d0:09:69:f4:02:31:99:42:29:71:bd:67: 75:95:bd:42:75:24:aa:24:6e:27:1f:af:ef:2f:38:d1:6c:92: e7:fa:77:64:ed:79:56:21:22:a3:ef:f7:8e:78:62:3d:f8:70: 9e:f2:7a:f7:87:9f:2e:af:37:3d:b9:5b:c2:35:a7:2f:b7:ca: 60:84:34:11:49:9d:98:10:29:9a:43:5a:be:b2:92:f4:0a:77: 5c:77:ca:08:9e:7d:a8:42:e2:4b:ec:07:56:f1:9b:12:b1:ef: a1:56:2d:32:03:22:95:fe:fa:2e:27:59:83:4b:1d:1a:b1:33: 3c:11:fc:48:c0:ef:bd:d9:a7:f1:b9:a6:c5:b9:10:1f:0d:a2: a6:32:70:a8:99:d0:81:c3:c8:27:70:8b:45:0d:f4:c1:b0:6f: 6e:c6:1d:3a:d8:79:4c:4a:30:1e:38:b9:df:38:01:7b:be:5a: 5e:da:7a:cc:e6:3a:c9:38:5f:37:86:98:6a:9a:bf:b1:00:94: 07:78:1f:53:b0:63:79:19:ba:72:d0:f1:37:b3:43:9e:6e:0c: c4:8f:40:bc:fe:68:6d:aa:ac:03:a2:0d:ee:66:db:20:39:48: 8e:c5:03:fd -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnaQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMDEyMzExMVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNC QTNCMDIzMERFMjM4NEMyNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8Ed3eN1P3xZYE2NFYmDRFZvpd/sxuLNTe9v029wCJ7wyGemuQx01J35TP1GH8 FJz3KQPX4JyDb5ZxNPsMS40jNDHfY3e9XfiVbW4OVZBw2UUQ6NDaYIhd58zAyH0R guSF6S3y02c2g8uMwH/vjQU1/0mXxwNsNfzK/0C+PSqnDUvHkRk15y5nT6VXQ/ub NE3zxqFJtvj0tN9BkvOs4Iq3LQnJdm9XpvnaiBpBwOQp3XvAjTUYyyUrXbK7I3si VO9jxpjbLa/3pIhsvBBj2I7n2yDnESTKc0lBk9ujQcreEbpVZMk1EV4nahoPTHkF OncfBTIke5e37OQqATXnzWA1AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUgiq84EQX vhV7KDO6OwIw3iOEwkAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFGQ0MxLzE0OThGQzlFMzFFMDExRUE4MzdCREUzQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExRkNDMS8xNDk4RkM5RTMxRTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVR WHZoVjdLRE82T3dJdzNpT0V3a0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAh1GMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ4UgMA0EAgAC MAcDBQAkBEbAMA0GCSqGSIb3DQEBCwUAA4IBAQAzut07a9Ju4pF0Ui4Zc1nGC3RE qQn6rjzQCWn0AjGZQilxvWd1lb1CdSSqJG4nH6/vLzjRbJLn+ndk7XlWISKj7/eO eGI9+HCe8nr3h58urzc9uVvCNacvt8pghDQRSZ2YECmaQ1q+spL0Cndcd8oInn2o QuJL7AdW8ZsSse+hVi0yAyKV/vouJ1mDSx0asTM8EfxIwO+92afxuabFuRAfDaKm MnComdCBw8gncItFDfTBsG9uxh062HlMSjAeOLnfOAF7vlpe2nrM5jrJOF83hphq mr+xAJQHeB9TsGN5Gbpy0PE3s0OebgzEj0C8/mhtqqwDog3uZtsgOUiOxQP9 -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:38 2025 by rpki-client