This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer File: jQmbFr6Vddy0uwaFh5eZn1XmA18.cer (raw, json) Hash identifier: QWwWEn+af34UIH9harRBGHz55uIAcswcva/vZSMFN18= Subject key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027697 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft caRepository: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 20 Nov 2025 13:15:35 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 63961 AS: 132106 IP: 103.28.120.0/22 IP: 163.47.36.0/22 IP: 203.96.188.0/22 IP: 2402:f500::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161431 (0x27697) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 20 13:15:35 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4f:6d:96:17:36:05:1a:c0:13:ab:3a:d2:bc: 41:30:a0:79:63:e0:51:b5:d6:bf:59:d2:c4:e2:fb: 6e:60:65:72:c8:4f:94:05:37:25:1d:d9:d0:24:bf: 99:25:a3:6e:59:14:ca:77:9e:7e:34:43:cc:70:9f: 53:c8:81:d1:c9:84:22:1f:48:70:f8:44:a1:70:4c: c6:d9:f6:03:85:e0:62:b4:ae:b3:b9:a4:bc:31:ef: 78:08:17:2b:23:78:56:35:88:5f:69:8d:fa:e3:52: 56:aa:b4:6f:ad:19:d6:98:46:9e:f7:cc:b0:b0:6e: 1d:9f:ed:51:83:05:01:15:74:8b:87:ab:73:29:60: 41:93:0b:64:e2:a1:96:eb:1c:f3:31:a9:37:23:74: a5:e1:c3:88:2d:48:79:b6:10:fd:8b:59:fb:a0:5b: da:76:51:78:11:7d:3f:0a:e7:dd:77:90:97:85:6b: 23:52:4f:cb:c2:65:56:7e:6f:03:00:a5:d3:b6:40: 40:2f:28:21:d5:24:79:99:e0:1e:d8:94:3b:7f:e4: d9:c3:59:0b:60:e2:b6:b5:19:a9:72:2a:62:55:a9: 38:fe:3b:08:f6:f5:e4:8b:cd:47:73:c8:52:ce:f9: c9:0a:51:f9:5c:30:be:20:6e:d0:e9:21:96:8f:1a: 28:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63961 132106 sbgp-ipAddrBlock: critical IPv4: 103.28.120.0/22 163.47.36.0/22 203.96.188.0/22 IPv6: 2402:f500::/32 Signature Algorithm: sha256WithRSAEncryption 9e:73:a7:e5:fc:4b:01:41:1a:f2:84:63:df:9b:50:ac:02:eb: 54:32:6b:7a:28:23:01:15:a5:0a:70:3e:0f:62:ed:03:6e:da: 16:a1:ac:b4:b1:23:82:cf:65:80:b5:fe:26:d1:7e:99:4f:f2: 11:34:a2:ba:f4:66:77:62:6f:ec:52:d8:19:2f:7f:ae:8c:0a: c5:01:80:56:68:8b:36:5e:a6:5d:e7:de:33:88:ab:02:b6:32: 3e:78:04:a7:82:2f:d0:96:b0:93:08:1d:9b:ec:66:7c:d7:80: 3d:44:bb:7f:4c:ef:b4:2e:76:ac:16:29:5c:3f:b1:3a:f2:24: 95:cc:46:6f:97:4c:89:60:cb:6e:70:d1:02:93:3a:94:d4:f3: 20:60:48:0b:b5:53:b7:d7:a4:8d:37:9e:81:94:3e:99:2b:9f: e2:fa:45:b2:e4:b2:c7:8f:ea:ba:80:91:e3:bd:8c:77:0a:f1: 10:23:80:20:2f:79:c7:4d:7d:4a:5d:59:61:e3:98:5a:9b:18: b6:97:db:46:1b:d1:5f:b0:d1:3b:8a:04:cc:be:a9:88:2f:a3: 71:25:d0:d4:62:50:f4:ae:c9:1d:34:38:8a:04:02:6d:b3:f1: 13:32:21:b0:64:d3:20:e0:13:db:77:c4:55:b4:fa:17:cd:59: ca:7e:97:6b -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgIDAnaXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMDEzMTUzNVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxMkFFRkExMTAvBgNVBAUTKDhEMDk5QjE2QkU5NTc1RENCNEJCMDY4 NTg3OTc5OTlGNTVFNjAzNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbT22WFzYFGsATqzrSvEEwoHlj4FG11r9Z0sTi+25gZXLIT5QFNyUd2dAkv5kl o25ZFMp3nn40Q8xwn1PIgdHJhCIfSHD4RKFwTMbZ9gOF4GK0rrO5pLwx73gIFysj eFY1iF9pjfrjUlaqtG+tGdaYRp73zLCwbh2f7VGDBQEVdIuHq3MpYEGTC2TioZbr HPMxqTcjdKXhw4gtSHm2EP2LWfugW9p2UXgRfT8K5913kJeFayNST8vCZVZ+bwMA pdO2QEAvKCHVJHmZ4B7YlDt/5NnDWQtg4ra1GalyKmJVqTj+Owj29eSLzUdzyFLO +ckKUflcML4gbtDpIZaPGijPAgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQUjQmbFr6V ddy0uwaFh5eZn1XmA18wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJBRUZBL0M0QjU5MjY2MURBOTExRTI5NkJCRkVBNDA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyQUVGQS9DNEI1OTI2NjFEQTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2 VmRkeTB1d2FGaDVlWm4xWG1BMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAPnZAgMCBAowOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJnHHgD BAKjLyQDBALLYLwwDQQCAAIwBwMFACQC9QAwDQYJKoZIhvcNAQELBQADggEBAJ5z p+X8SwFBGvKEY9+bUKwC61Qya3ooIwEVpQpwPg9i7QNu2hahrLSxI4LPZYC1/ibR fplP8hE0orr0Zndib+xS2Bkvf66MCsUBgFZoizZepl3n3jOIqwK2Mj54BKeCL9CW sJMIHZvsZnzXgD1Eu39M77QudqwWKVw/sTryJJXMRm+XTIlgy25w0QKTOpTU8yBg SAu1U7fXpI03noGUPpkrn+L6RbLksseP6rqAkeO9jHcK8RAjgCAvecdNfUpdWWHj mFqbGLaX20Yb0V+w0TuKBMy+qYgvo3El0NRiUPSuyR00OIoEAm2z8RMyIbBk0yDg E9t3xFW0+hfNWcp+l2s= -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:40 2025 by rpki-client