This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer File: hav4SAyQlji9zKZTrx5pD1crI-E.cer (raw, json) Hash identifier: rLZcYiksMvPoKpn1yAJrW07WAd+0xGJtUL3WETEg738= Subject key identifier: 85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A45 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 21:57:42 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 24107 IP: 202.49.120.0/23 IP: 202.164.28.0/22 IP: 2406:3d00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162373 (0x27a45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 21:57:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91A03CB, serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:aa:fb:c8:83:f3:5e:89:9b:6a:9f:d2:75: c5:44:78:c3:85:4c:0a:07:55:8a:6f:b8:07:6a:28: 80:3f:d4:97:0a:58:06:e0:9c:3c:69:af:19:fd:c1: 40:0f:9a:94:cb:31:12:08:62:46:65:58:8f:2d:fe: c6:f9:0a:a4:08:6e:be:55:f0:f3:f6:45:be:fa:b5: d3:01:bb:46:e8:4e:a4:9a:7a:7a:c6:03:f6:ad:21: 5c:6c:20:3f:9e:cc:77:4a:4c:a3:49:4b:98:34:b4: 89:d2:90:39:61:a3:1a:24:a2:3c:61:1b:eb:83:df: c3:5d:af:55:ba:61:42:a6:b2:0f:90:f9:03:6c:5e: dd:df:91:b2:15:87:9d:83:da:3c:91:b7:24:5a:2b: 7b:f9:32:c1:04:32:7b:19:46:06:5d:7f:be:68:36: 80:b6:09:91:a4:90:1f:7a:bc:bb:f0:cc:0c:47:80: 3a:22:de:44:86:f2:90:cd:57:20:c3:85:c3:aa:89: 7f:8d:ba:63:db:83:ce:c7:0e:1b:b8:15:ee:9a:0a: 1e:cc:c3:48:a7:76:48:04:81:0a:8a:b4:56:61:74: d5:ba:99:1c:88:1c:a8:a3:94:57:b9:ff:30:fe:db: 82:df:56:f8:46:02:e1:c2:1c:35:24:6c:1c:91:a6: 93:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24107 sbgp-ipAddrBlock: critical IPv4: 202.49.120.0/23 202.164.28.0/22 IPv6: 2406:3d00::/32 Signature Algorithm: sha256WithRSAEncryption 0a:07:bc:51:bf:01:b7:e8:87:56:c3:4c:6b:0f:1a:fc:10:99: a4:66:83:f2:f0:5c:85:12:2b:de:46:14:19:c5:89:35:d7:73: 1f:e1:65:ea:f3:12:63:13:53:79:b4:f7:08:1b:52:34:a0:f3: 7a:3e:55:81:36:31:29:d7:59:5b:25:a2:15:cc:d0:ee:3c:1d: 75:da:34:0c:17:70:11:bd:eb:be:32:fc:53:ce:d3:d1:4d:4b: 9e:ff:7b:96:e6:11:07:39:58:0b:7f:cb:ce:f3:c7:c2:bc:0e: f7:46:02:e1:2b:5d:47:c2:9b:7d:0e:18:1c:6e:90:1a:b9:11: 07:18:aa:0a:b6:9f:29:93:dc:ca:f5:91:3c:8d:dd:c8:fa:65: e8:dd:3b:68:75:00:e0:b2:fb:75:64:47:ac:8e:cd:a0:47:35: 7a:ac:93:33:d8:be:64:80:f8:bb:90:f3:67:d3:8b:6c:dc:eb: 4a:66:27:05:4b:49:36:b6:f7:59:a3:90:8e:8a:c4:f4:ba:86: f9:21:4a:48:fe:9e:36:d8:b2:e0:14:87:43:da:08:3c:1d:bc: 6e:e6:52:f5:fd:70:b4:30:4b:b7:d6:df:99:a2:86:38:a6:93: f6:d7:ee:98:89:7e:ee:ed:80:42:10:9b:45:94:fc:44:6b:73: 73:9a:5e:35 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIDAnpFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTIxNTc0MloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQTAzQ0IxMTAvBgNVBAUTKDg1QUJGODQ4MEM5MDk2MzhCRENDQTY1 M0FGMUU2OTBGNTcyQjIzRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIEar7yIPzXombap/SdcVEeMOFTAoHVYpvuAdqKIA/1JcKWAbgnDxprxn9wUAP mpTLMRIIYkZlWI8t/sb5CqQIbr5V8PP2Rb76tdMBu0boTqSaenrGA/atIVxsID+e zHdKTKNJS5g0tInSkDlhoxokojxhG+uD38Ndr1W6YUKmsg+Q+QNsXt3fkbIVh52D 2jyRtyRaK3v5MsEEMnsZRgZdf75oNoC2CZGkkB96vLvwzAxHgDoi3kSG8pDNVyDD hcOqiX+NumPbg87HDhu4Fe6aCh7Mw0indkgEgQqKtFZhdNW6mRyIHKijlFe5/zD+ 24LfVvhGAuHCHDUkbByRppPzAgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQUhav4SAyQ lji9zKZTrx5pD1crI+EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUEwM0NCLzgxRDlFNEEwMUQ5NjExRTJBQUMyMTQ3RjA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBMDNDQi84MUQ5RTRBMDFEOTYxMUUyQUFDMjE0N0YwOEIwMkNEMi9oYXY0U0F5 UWxqaTl6S1pUcng1cEQxY3JJLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICXiswNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAHKMXgDBALKpBww DQQCAAIwBwMFACQGPQAwDQYJKoZIhvcNAQELBQADggEBAAoHvFG/Abfoh1bDTGsP GvwQmaRmg/LwXIUSK95GFBnFiTXXcx/hZerzEmMTU3m09wgbUjSg83o+VYE2MSnX WVslohXM0O48HXXaNAwXcBG9674y/FPO09FNS57/e5bmEQc5WAt/y87zx8K8DvdG AuErXUfCm30OGBxukBq5EQcYqgq2nymT3Mr1kTyN3cj6ZejdO2h1AOCy+3VkR6yO zaBHNXqskzPYvmSA+LuQ82fTi2zc60pmJwVLSTa291mjkI6KxPS6hvkhSkj+njbY suAUh0PaCDwdvG7mUvX9cLQwS7fW35mihjimk/bX7piJfu7tgEIQm0WU/ERrc3Oa XjU= -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:17 2025 by rpki-client