This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer File: i9h5ncunV8W0WNZuOcYMnKP3mms.cer (raw, json) Hash identifier: MQTlDc9SesLJ2hs0zk9xuwgRxtVej1Ats7mAw9f4A3o= Subject key identifier: 8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027349 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft caRepository: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 05 Nov 2025 13:02:01 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 133096 IP: 43.249.200.0/22 IP: 103.242.244.0/22 IP: 2400:1580::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160585 (0x27349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 5 13:02:01 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A912BCCF, serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f9:5d:e1:d9:88:1a:7c:3f:00:d5:f1:c8:82: 54:f6:6e:3a:7f:66:37:6e:7f:07:6d:0e:77:01:0c: 00:8c:9c:5d:d1:3b:45:4a:bf:69:ef:be:7e:80:35: 08:ff:08:fd:10:69:7e:6a:45:82:46:7f:3c:56:1d: 20:ac:59:ec:0d:3e:5a:d5:60:cb:63:45:61:f2:78: 90:a2:64:36:4d:4d:4d:f2:db:2e:ca:b6:0c:72:bc: 61:5f:c4:99:ab:b5:99:54:e0:b3:ba:a7:2c:90:35: 3d:ff:b0:a1:69:40:5c:f5:76:43:c5:20:1f:ca:3f: 49:ef:3b:d1:6d:00:eb:ed:36:0e:c1:da:0a:49:1a: 43:fa:d6:85:9f:9c:52:86:28:44:81:0a:81:cb:e2: 89:b9:23:0c:b6:3c:e5:a1:6e:9c:b9:ac:84:ed:c5: d8:cd:7e:b7:db:51:d7:7e:3b:2e:c5:34:53:5d:44: cb:73:ae:7e:f4:b7:02:d8:94:8b:6e:c8:3b:12:47: 15:07:e6:b6:4b:01:80:cd:87:b8:49:32:08:e1:87: e2:7a:53:bf:76:7c:52:c7:06:ae:b8:8e:59:01:08: 2b:7e:5d:4b:3f:5f:9f:ef:55:2e:7d:50:a6:72:ad: 1e:2e:8a:7b:d9:f7:de:69:bb:7f:bd:56:c9:36:9f: d1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133096 sbgp-ipAddrBlock: critical IPv4: 43.249.200.0/22 103.242.244.0/22 IPv6: 2400:1580::/32 Signature Algorithm: sha256WithRSAEncryption 9f:7a:4f:65:57:a3:0c:f5:4f:ec:0f:f3:57:df:66:c0:e8:2e: f0:62:e0:36:79:9f:df:ac:be:8a:23:16:36:43:d1:4f:52:72: b4:c6:e5:c2:33:cf:77:16:dc:63:7c:68:5c:d1:7c:1a:c6:21: ab:eb:e1:59:9e:a7:26:b9:17:ed:cb:5a:cb:49:23:4d:f7:e5: 8a:b7:4f:41:d4:53:f6:0c:a1:de:db:26:8b:41:38:88:8e:2c: 02:46:4c:60:6e:e9:37:1d:7c:e0:26:37:c5:b8:06:4f:aa:a2: 93:53:e6:c0:fb:6e:b5:34:2f:e9:29:af:41:5e:7b:fa:8a:ab: 3b:3b:3d:7a:ba:38:b6:d2:61:11:21:c0:da:2e:38:b4:56:e9: 32:08:70:2f:87:80:de:08:e4:92:de:9f:93:09:33:0f:6b:71: d8:b7:b7:f0:d3:4d:91:b0:7e:98:ce:1f:bf:90:74:64:2e:fd: 61:1f:9b:ca:c5:1f:df:4f:4d:45:52:31:28:1a:78:b5:4a:94: dc:70:5a:61:67:88:02:8b:24:32:42:b6:1a:be:4e:74:ad:5d: 88:d6:2c:27:7e:74:0d:d3:66:9b:8e:7f:5d:59:b3:42:55:c3: b0:7e:8c:45:af:b1:c8:2b:f8:1d:ed:15:c3:64:34:28:9d:85: 23:fe:bc:05 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAnNJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNTEzMDIwMVoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxMkJDQ0YxMTAvBgNVBAUTKDhCRDg3OTlEQ0JBNzU3QzVCNDU4RDY2 RTM5QzYwQzlDQTNGNzlBNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW+V3h2YgafD8A1fHIglT2bjp/ZjdufwdtDncBDACMnF3RO0VKv2nvvn6ANQj/ CP0QaX5qRYJGfzxWHSCsWewNPlrVYMtjRWHyeJCiZDZNTU3y2y7KtgxyvGFfxJmr tZlU4LO6pyyQNT3/sKFpQFz1dkPFIB/KP0nvO9FtAOvtNg7B2gpJGkP61oWfnFKG KESBCoHL4om5Iwy2POWhbpy5rITtxdjNfrfbUdd+Oy7FNFNdRMtzrn70twLYlItu yDsSRxUH5rZLAYDNh7hJMgjhh+J6U792fFLHBq64jlkBCCt+XUs/X5/vVS59UKZy rR4uinvZ995pu3+9Vsk2n9FZAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUi9h5ncun V8W0WNZuOcYMnKP3mmswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJCQ0NGLzY0MjRFMTYwMTkwNzExRUJBRjQ2OEQyQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyQkNDRi82NDI0RTE2MDE5MDcxMUVCQUY0NjhEMkJDNEY5QUUwMi9pOWg1bmN1 blY4VzBXTlp1T2NZTW5LUDNtbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgfoMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCK/nIAwQCZ/L0 MA0EAgACMAcDBQAkABWAMA0GCSqGSIb3DQEBCwUAA4IBAQCfek9lV6MM9U/sD/NX 32bA6C7wYuA2eZ/frL6KIxY2Q9FPUnK0xuXCM893FtxjfGhc0XwaxiGr6+FZnqcm uRfty1rLSSNN9+WKt09B1FP2DKHe2yaLQTiIjiwCRkxgbuk3HXzgJjfFuAZPqqKT U+bA+261NC/pKa9BXnv6iqs7Oz16uji20mERIcDaLji0VukyCHAvh4DeCOSS3p+T CTMPa3HYt7fw002RsH6Yzh+/kHRkLv1hH5vKxR/fT01FUjEoGni1SpTccFphZ4gC iyQyQrYavk50rV2I1iwnfnQN02abjn9dWbNCVcOwfoxFr7HIK/gd7RXDZDQonYUj /rwF -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:12 2025 by rpki-client