This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUKJrUDufmJvXNgvzsVAbbkeHnE.cer File: iUKJrUDufmJvXNgvzsVAbbkeHnE.cer (raw, json) Hash identifier: AW2OBb/TOKHfnCvfXUN3vakYWXpw9gsiiXeBn+7tLXE= Subject key identifier: 89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C0B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 18:54:33 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 134805 IP: 103.199.244.0/22 IP: 203.82.28.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162827 (0x27c0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 18:54:33 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91B9790, serialNumber=894289AD40EE7E626F5CD82FCEC5406DB91E1E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:3b:6f:c4:bd:69:4c:80:e6:4a:2c:6e:80: e3:02:d0:1f:63:f0:4e:ac:58:07:4d:7d:21:67:da: cf:ee:f1:1d:32:04:ae:66:36:3b:08:9c:64:fc:5f: 2d:36:af:17:6b:6a:a4:72:5f:e9:8a:27:cd:69:10: f2:02:25:76:86:6c:1d:0b:de:44:b6:ee:f2:47:c0: 11:81:e7:76:6a:cb:08:8d:93:9f:f7:f6:60:6f:29: de:9d:9b:8c:b8:dc:54:73:5a:c1:a1:ef:cb:e1:3e: 91:96:0d:cf:60:66:85:f1:c0:de:52:a8:53:1b:af: ee:15:77:86:47:0c:f6:75:4b:fa:a2:58:a9:dc:4a: 62:d4:fc:99:aa:7c:29:a4:20:21:59:06:d9:bf:0a: 2f:56:2d:73:23:69:42:3f:42:c5:57:48:8d:88:1c: c5:ac:0f:3a:ae:77:8f:d8:58:4e:b1:1e:b9:b7:53: 94:33:ce:f2:d3:28:ea:6e:ba:fe:2a:27:12:75:0d: f8:16:f9:a8:f1:47:df:77:82:85:b8:2e:0d:44:af: e4:b0:89:fb:f2:31:c3:a9:9c:7d:d8:4f:91:a7:8e: 0c:24:00:40:aa:31:f0:37:0c:57:b0:34:fe:54:d2: cd:41:41:3e:85:6a:c9:a5:91:63:69:4f:4b:03:10: cb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:42:89:AD:40:EE:7E:62:6F:5C:D8:2F:CE:C5:40:6D:B9:1E:1E:71 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B9790/71805BAC5AE211EFAEB0312EC4F9AE02/iUKJrUDufmJvXNgvzsVAbbkeHnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134805 sbgp-ipAddrBlock: critical IPv4: 103.199.244.0/22 203.82.28.0/22 Signature Algorithm: sha256WithRSAEncryption 20:26:79:7a:0a:69:93:a1:7f:3f:82:89:5d:f7:43:32:cc:61: 9b:ed:c1:1f:85:02:8e:77:f4:d8:8e:17:8d:5c:86:f5:f9:ad: 6d:46:14:b9:27:73:12:f4:70:ef:d9:99:4c:3a:a4:5b:f1:b8: 06:1a:f1:07:33:4e:23:9f:49:53:c4:75:22:ca:ef:fb:47:55: 4c:fe:1c:ca:21:21:e4:e4:6f:ce:bc:80:f4:22:f9:88:9a:15: 67:9c:32:d2:a5:61:7a:40:2e:2c:a8:83:f7:e0:e3:48:39:ab: 74:f1:1e:72:36:ab:fc:f8:74:ee:c6:12:24:27:96:71:20:4a: 0c:38:96:27:99:b2:37:9a:3d:ef:94:2b:2c:90:d0:b3:6c:12: 66:11:23:90:f4:01:5d:98:a7:28:e0:ab:36:16:e4:a1:17:11: 0b:1f:5d:de:0b:00:b4:d4:7c:b1:ad:01:d6:f8:dc:6d:02:c9: 82:9b:83:51:53:7f:72:60:cd:33:a6:11:38:a7:66:1e:18:a6: e2:19:f3:f5:f1:c5:87:89:c6:cf:7f:b7:12:c6:aa:c1:c9:6d: 70:ea:24:c0:f3:8c:98:20:86:a4:d8:41:47:ee:8e:eb:5a:02: a6:71:a5:6f:7d:b8:e0:c8:aa:a4:51:62:59:89:4e:62:45:a7: 10:7e:cc:37 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAnwLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDE4NTQzM1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjk3OTAxMTAvBgNVBAUTKDg5NDI4OUFENDBFRTdFNjI2RjVDRDgy RkNFQzU0MDZEQjkxRTFFNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDhTtvxL1pTIDmSixugOMC0B9j8E6sWAdNfSFn2s/u8R0yBK5mNjsInGT8Xy02 rxdraqRyX+mKJ81pEPICJXaGbB0L3kS27vJHwBGB53ZqywiNk5/39mBvKd6dm4y4 3FRzWsGh78vhPpGWDc9gZoXxwN5SqFMbr+4Vd4ZHDPZ1S/qiWKncSmLU/JmqfCmk ICFZBtm/Ci9WLXMjaUI/QsVXSI2IHMWsDzqud4/YWE6xHrm3U5QzzvLTKOpuuv4q JxJ1DfgW+ajxR993goW4Lg1Er+SwifvyMcOpnH3YT5GnjgwkAECqMfA3DFewNP5U 0s1BQT6FasmlkWNpT0sDEMulAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUiUKJrUDu fmJvXNgvzsVAbbkeHnEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI5NzkwLzcxODA1QkFDNUFFMjExRUZBRUIwMzEyRUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCOTc5MC83MTgwNUJBQzVBRTIxMUVGQUVCMDMxMkVDNEY5QUUwMi9pVUtKclVE dWZtSnZYTmd2enNWQWJia2VIbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg6VMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZ8f0AwQCy1Ic MA0GCSqGSIb3DQEBCwUAA4IBAQAgJnl6CmmToX8/gold90MyzGGb7cEfhQKOd/TY jheNXIb1+a1tRhS5J3MS9HDv2ZlMOqRb8bgGGvEHM04jn0lTxHUiyu/7R1VM/hzK ISHk5G/OvID0IvmImhVnnDLSpWF6QC4sqIP34ONIOat08R5yNqv8+HTuxhIkJ5Zx IEoMOJYnmbI3mj3vlCsskNCzbBJmESOQ9AFdmKco4Ks2FuShFxELH13eCwC01Hyx rQHW+NxtAsmCm4NRU39yYM0zphE4p2YeGKbiGfP18cWHicbPf7cSxqrByW1w6iTA 84yYIIak2EFH7o7rWgKmcaVvfbjgyKqkUWJZiU5iRacQfsw3 -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:05 2025 by rpki-client