This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer File: hpk8iGXMBr2Yu5T0pukGEieCgAA.cer (raw, json) Hash identifier: a4NOQoWiJrnUs1coF4mkjsFps7zn4Kw1kIFo7fAOK24= Subject key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0279B2 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 30 Nov 2025 21:38:49 +0000 Certificate not after: Mon 30 Mar 2026 00:00:00 +0000 Subordinate resources: IP: 103.143.82.0/23 IP: 2407:ac40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162226 (0x279b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 30 21:38:49 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=A91DC6AD, serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:7b:68:ba:85:cc:72:98:75:73:c7:3c:27: 7f:0f:94:65:c6:9c:03:3d:8e:7f:00:64:45:da:86: 3a:53:7e:c7:47:83:b6:cb:9b:74:03:9e:0d:7e:f3: 5f:e1:b8:5e:9a:3f:55:93:29:69:0c:14:37:8e:ab: 98:85:d2:67:a5:39:29:f1:d1:36:15:8a:ca:a6:55: c8:80:72:94:eb:30:b3:35:cd:ed:ee:e6:b3:f2:ed: 9e:a6:a2:d3:05:1e:65:34:62:b6:4d:ad:0f:58:51: 06:9d:46:d7:d2:af:9a:af:4b:1e:46:94:d7:7e:40: 5b:6b:06:7b:da:70:c9:10:9c:ae:d1:3e:ca:6f:ea: c0:04:21:e3:5f:bb:65:fa:0b:b2:97:34:84:f4:9f: d2:bd:13:d5:f6:e3:b5:8a:7c:e9:cd:32:54:ce:2d: 0e:54:ee:89:a2:b9:a9:1a:30:64:9d:38:09:9e:31: 95:1d:31:ec:d8:da:8b:6f:94:03:ff:71:1d:ba:1e: 2a:77:9d:0e:1f:01:78:0a:40:27:46:ee:d0:fb:75: 62:ff:ee:99:be:55:f2:dd:55:24:e9:d9:bb:46:69: 2b:7c:97:41:01:f5:28:83:0d:cf:14:ca:6c:13:4b: d0:74:2d:11:29:e0:fc:fa:d1:59:0a:7a:f5:00:64: 4e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.82.0/23 IPv6: 2407:ac40::/32 Signature Algorithm: sha256WithRSAEncryption a8:89:2d:6d:54:3b:14:82:61:c5:8b:81:16:f5:98:3b:96:e1: 42:65:14:5e:78:5d:fd:61:60:32:e1:e0:a0:4d:b7:d9:18:23: 73:b5:96:d8:dd:b3:d0:a1:af:c5:21:77:03:34:b7:c2:97:fd: 2a:9c:02:bf:59:fd:21:00:34:35:4b:51:50:95:5f:3a:68:b2: 7c:27:e5:b3:43:33:70:3a:e0:7b:ed:61:6c:49:7e:b4:27:44: 58:2a:f4:d2:e7:e8:64:29:54:7f:98:2b:76:63:cf:74:cb:71: c7:1f:75:83:98:f8:62:3d:7c:7a:ca:71:a3:d7:3b:80:7f:72: c7:2a:37:e6:74:5e:47:6f:b6:2d:9d:1d:9b:90:d5:f1:06:78: 2f:b7:8a:9a:ec:55:74:48:7e:0b:f9:16:90:9d:1a:81:27:7c: f8:a0:e8:1d:a1:da:23:d9:cb:b4:bc:7f:c5:d1:51:0e:dd:93: 02:2a:9e:3a:c1:76:78:03:9a:d5:d3:57:6f:05:ac:a9:e3:12: 2e:7e:01:73:d5:1c:55:78:64:d3:6a:05:4e:1f:09:2e:6d:3e: fa:7b:dd:7c:7f:de:1b:4a:78:03:d1:5f:7f:fa:d6:2b:ee:55: 19:14:54:ab:d9:33:50:0a:3c:2d:6a:3c:3e:aa:37:83:1c:ab: e3:c9:6e:3e -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIDAnmyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEzMDIxMzg0OVoXDTI2MDMzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxREM2QUQxMTAvBgNVBAUTKDg2OTkzQzg4NjVDQzA2QkQ5OEJCOTRG NEE2RTkwNjEyMjc4MjgwMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjnntouoXMcph1c8c8J38PlGXGnAM9jn8AZEXahjpTfsdHg7bLm3QDng1+81/h uF6aP1WTKWkMFDeOq5iF0melOSnx0TYVisqmVciAcpTrMLM1ze3u5rPy7Z6motMF HmU0YrZNrQ9YUQadRtfSr5qvSx5GlNd+QFtrBnvacMkQnK7RPspv6sAEIeNfu2X6 C7KXNIT0n9K9E9X247WKfOnNMlTOLQ5U7omiuakaMGSdOAmeMZUdMezY2otvlAP/ cR26Hip3nQ4fAXgKQCdG7tD7dWL/7pm+VfLdVSTp2btGaSt8l0EB9SiDDc8UymwT S9B0LREp4Pz60VkKevUAZE73AgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUhpk8iGXM Br2Yu5T0pukGEieCgAAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURDNkFELzUzOUYyM0NDNURGMjExRUU5QjA0NDMwRUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEQzZBRC81MzlGMjNDQzVERjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdY TUJyMll1NVQwcHVrR0VpZUNnQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBAFnj1IwDQQCAAIwBwMFACQHrEAwDQYJKoZIhvcNAQELBQADggEB AKiJLW1UOxSCYcWLgRb1mDuW4UJlFF54Xf1hYDLh4KBNt9kYI3O1ltjds9Chr8Uh dwM0t8KX/SqcAr9Z/SEANDVLUVCVXzposnwn5bNDM3A64HvtYWxJfrQnRFgq9NLn 6GQpVH+YK3Zjz3TLcccfdYOY+GI9fHrKcaPXO4B/cscqN+Z0Xkdvti2dHZuQ1fEG eC+3iprsVXRIfgv5FpCdGoEnfPig6B2h2iPZy7S8f8XRUQ7dkwIqnjrBdngDmtXT V28FrKnjEi5+AXPVHFV4ZNNqBU4fCS5tPvp73Xx/3htKeAPRX3/61ivuVRkUVKvZ M1AKPC1qPD6qN4Mcq+PJbj4= -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:55 2025 by rpki-client