This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer File: l-vzSPN2uGf8drKyuRB4w91JSIM.cer (raw, json) Hash identifier: ScPpHnOd94UoeSExmGHdqxJmNW18eB5lzMRXVv6emig= Subject key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A6D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/notification.xml Certificate not before: Tue 02 Dec 2025 04:32:22 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 135630 IP: 43.224.144.0/22 IP: 103.21.240.0/22 IP: 240f:8000::/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162413 (0x27a6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 04:32:22 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:1b:aa:b2:08:6f:9c:11:86:55:48:82:43: 8c:0b:33:c3:1a:54:b1:73:1a:d9:1a:6d:03:18:ed: 1f:cd:e0:5c:a1:bc:b7:3d:50:7e:a6:18:ba:70:33: c4:57:39:2c:cb:c8:47:fb:3e:15:1f:a9:b4:de:0d: cc:08:be:0d:9a:7b:93:f3:5b:86:65:e4:00:f7:16: 12:53:3a:d7:c8:37:22:e9:28:27:fc:d6:2e:4d:61: ed:a6:f2:10:d7:24:0f:0d:38:a1:80:eb:7a:9d:39: f4:ff:66:c6:98:c6:39:4b:f3:2f:03:77:4e:1c:f9: b9:4b:cb:d0:51:fe:d0:15:1d:87:f3:17:68:ea:1d: b5:ee:a4:b6:98:c5:6b:31:f9:04:bb:7c:3c:db:8a: 46:2f:de:d5:ae:86:c8:0d:02:d8:c0:2c:c3:1e:a1: 9c:b9:ba:01:fe:fe:f4:39:4d:0a:eb:6a:25:41:d9: ab:67:94:35:f0:fc:3d:ce:58:bd:33:ba:5e:a8:48: 32:ac:4a:af:34:1c:d6:b5:a7:11:aa:28:9d:e0:5d: 9b:57:5c:ee:58:18:d2:d1:78:8b:19:8b:43:0b:dc: 74:f9:bd:cd:8d:7a:a4:ae:a4:55:17:cc:dc:1e:8e: bf:21:4e:2f:d0:c5:e7:ec:f9:8f:e9:a5:43:f7:ee: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135630 sbgp-ipAddrBlock: critical IPv4: 43.224.144.0/22 103.21.240.0/22 IPv6: 240f:8000::/24 Signature Algorithm: sha256WithRSAEncryption 40:08:2c:13:ae:55:de:a3:40:e2:71:67:6c:67:ae:84:e5:b7: 77:f7:da:7f:5b:3f:e5:dc:81:ba:93:0e:b6:ab:9d:b7:56:b2: 2e:e6:96:a7:d6:90:e0:09:73:4f:7f:d7:11:86:4e:df:30:53: 7d:03:a0:0d:7b:13:58:ef:4d:5b:ab:b0:19:c8:c1:c0:0b:12: 1a:d1:c5:7d:83:d6:a6:29:c9:e8:38:cb:24:f3:72:44:0e:76: 3d:e3:fe:8c:9f:c7:42:17:a4:fe:35:cf:eb:21:64:69:b0:83: d5:a5:84:47:6a:82:d6:6c:72:c5:e7:04:b9:7b:6a:d0:be:f7: 62:bd:67:f2:70:be:8f:a6:39:a7:93:28:c9:31:ce:35:77:e7: e9:ff:53:5f:b7:20:6d:a2:08:8e:78:b5:92:3f:62:57:bb:63: 5e:a7:9f:c9:26:77:72:5d:a3:b3:ad:56:99:2f:43:3c:be:75: ec:5d:a9:a7:98:24:46:96:ed:f2:82:68:fc:38:cb:e9:05:c6: 1e:13:22:06:ec:f6:21:7a:ca:98:2f:0d:e4:23:b2:5a:8c:64: da:a9:cf:26:ef:fc:11:06:14:32:7a:0b:7e:96:15:5b:f9:a1: a1:0e:6e:c4:aa:c7:5d:f3:0f:83:41:06:38:f7:5c:3e:54:f3: 49:58:d7:9a -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIDAnptMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjA0MzIyMloXDTI3MDEzMTAwMDAwMFowSjEVMBMG A1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYzNzZCODY3RkM3 NkIyQjJCOTEwNzhDM0RENDk0ODgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAuiIbqrIIb5wRhlVIgkOMCzPDGlSxcxrZGm0DGO0fzeBcoby3PVB+phi6 cDPEVzksy8hH+z4VH6m03g3MCL4NmnuT81uGZeQA9xYSUzrXyDci6Sgn/NYuTWHt pvIQ1yQPDTihgOt6nTn0/2bGmMY5S/MvA3dOHPm5S8vQUf7QFR2H8xdo6h217qS2 mMVrMfkEu3w824pGL97VrobIDQLYwCzDHqGcuboB/v70OU0K62olQdmrZ5Q18Pw9 zli9M7peqEgyrEqvNBzWtacRqiid4F2bV1zuWBjS0XiLGYtDC9x0+b3NjXqkrqRV F8zcHo6/IU4v0MXn7PmP6aVD9+7klQIDAQABo4IDVTCCA1EwHQYDVR0OBBYEFJfr 80jzdrhn/HaysrkQeMPdSUiDMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1 MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h cG5pYy5uZXQvUlBLSS9DUFMucGRmMIIBWgYIKwYBBQUHAQsEggFMMIIBSDBjBggr BgEFBQcwBYZXcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJiY2JiODVhZTYv MG8GCCsGAQUFBzAKhmNyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2MzY2Q3YzI0LTEyY2ItNGFiYy04ZmQyLTVlMmJjYmI4 NWFlNi9tYW5pZmVzdC5tZnQwcAYIKwYBBQUHMA2GZGh0dHBzOi8vcnBraS1ycmRw LnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3JyZHAvYzNjZDdjMjQtMTJjYi00YWJj LThmZDItNWUyYmNiYjg1YWU2L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAhHOMDMGCCsGAQUFBwEHAQH/BCQwIjASBAIAATAMAwQCK+CQ AwQCZxXwMAwEAgACMAYDBAAkD4AwDQYJKoZIhvcNAQELBQADggEBAEAILBOuVd6j QOJxZ2xnroTlt3f32n9bP+XcgbqTDrarnbdWsi7mlqfWkOAJc09/1xGGTt8wU30D oA17E1jvTVursBnIwcALEhrRxX2D1qYpyeg4yyTzckQOdj3j/oyfx0IXpP41z+sh ZGmwg9WlhEdqgtZscsXnBLl7atC+92K9Z/Jwvo+mOaeTKMkxzjV35+n/U1+3IG2i CI54tZI/Yle7Y16nn8kmd3Jdo7OtVpkvQzy+dexdqaeYJEaW7fKCaPw4y+kFxh4T Igbs9iF6ypgvDeQjslqMZNqpzybv/BEGFDJ6C36WFVv5oaEObsSqx13zD4NBBjj3 XD5U80lY15o= -----END CERTIFICATE-----Generated at Sat Dec 6 17:13:18 2025 by rpki-client