This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer File: lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer (raw, json) Hash identifier: 9jG7vbzG3sdd++BEvARdqhS2RxY3kNjft6ysKPq52U4= Subject key identifier: 94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A2C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft caRepository: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 18:36:29 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 18119 IP: 43.255.24.0/22 IP: 103.29.246.0/23 IP: 103.239.8.0/22 IP: 114.110.32.0/21 IP: 202.21.136.0/23 IP: 202.49.249.0/24 IP: 202.61.2.0/23 IP: 2001:4428::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162348 (0x27a2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 18:36:29 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A917D7F2, serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:f5:32:16:12:41:8d:40:6e:a2:e2:62:15: f8:1c:c6:14:24:05:75:24:5d:14:7a:4a:a2:cf:fc: 95:4b:d0:c5:af:8b:b6:8d:ce:e2:f0:b3:9f:c3:89: fa:d8:3e:24:87:27:d3:40:63:58:22:a3:d5:1a:73: 8c:ef:ec:e6:39:29:9b:ff:f1:25:63:59:53:77:02: 3b:43:81:82:08:a0:4e:e9:37:cf:32:b6:33:dd:45: 9c:2c:64:66:99:4b:5f:81:40:12:5c:df:4c:ce:1c: d7:6a:24:e9:f3:13:f1:04:07:a8:61:4b:84:35:e3: 6d:4a:14:2f:d4:92:07:32:87:c5:81:be:0d:7b:58: 8a:7f:ea:fc:df:5c:92:31:96:e8:b5:15:e8:e1:e3: c8:c9:3b:b2:95:14:37:ee:f1:f5:27:53:99:4b:ca: 15:1f:77:f7:a9:eb:2a:af:8d:c3:1b:1e:7e:b7:f9: fe:33:50:83:83:b2:57:0f:a1:e8:b9:5e:cb:30:19: 00:f1:74:4c:38:ff:ad:10:ed:d8:62:25:d5:f8:3e: 2f:37:ba:0b:43:bc:d0:b0:9c:a3:56:3c:3d:2e:69: 77:c3:1e:38:52:8b:da:8c:bc:92:e0:eb:c3:bf:53: 2f:09:21:06:9f:86:b3:c7:39:da:fe:ab:6b:48:8c: 36:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18119 sbgp-ipAddrBlock: critical IPv4: 43.255.24.0/22 103.29.246.0/23 103.239.8.0/22 114.110.32.0/21 202.21.136.0/23 202.49.249.0/24 202.61.2.0/23 IPv6: 2001:4428::/32 Signature Algorithm: sha256WithRSAEncryption b7:50:98:96:ed:3c:96:0a:7c:60:04:68:24:cb:e1:42:ed:87: 50:5a:f3:2a:82:52:f9:29:d2:8a:b0:53:73:d3:b6:b1:4b:96: 80:ec:cb:29:f0:94:04:30:8b:93:5f:cf:70:69:a7:97:c7:cb: d1:8c:93:cf:e6:a5:19:df:36:5f:55:c2:9f:4d:a3:48:65:af: b9:98:73:a2:8a:c9:b1:d1:1c:bf:2e:97:ae:37:36:77:ab:76: 3e:a4:f9:7c:0c:9e:a2:55:cd:58:6c:1c:7a:25:a3:1f:df:e2: 47:37:41:3d:2e:f1:a7:b4:d8:7b:95:1b:4e:19:cb:e2:b9:28: c0:c2:2e:a0:60:25:5b:87:79:9d:5d:29:8c:e0:7b:a9:fa:ab: ad:14:aa:c1:ef:06:c3:36:f3:e3:0b:3b:f3:c3:71:2a:6a:98: bd:3b:ea:d5:9a:95:d5:aa:10:b6:d6:78:36:83:12:bb:e0:15: 0e:4d:80:8f:6c:4b:a5:37:3b:9c:95:82:fe:22:af:ff:d1:5b: 22:51:f3:bc:06:4f:65:be:21:df:33:bb:17:aa:9e:e8:c0:93: b8:e0:a5:79:af:54:00:76:8c:ad:d1:b2:3c:bf:84:52:ad:5c: 06:d5:3c:41:71:d1:f1:da:24:45:ac:b1:fb:14:60:7c:cb:df: b3:65:c5:28 -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIDAnosMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTE4MzYyOVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxN0Q3RjIxMTAvBgNVBAUTKDk0MkQ1NDFERkU3OTgyRjZFMDFFNkJD Qzk3NkRDMENCODQxNEU4MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzn/UyFhJBjUBuouJiFfgcxhQkBXUkXRR6SqLP/JVL0MWvi7aNzuLws5/DifrY PiSHJ9NAY1gio9Uac4zv7OY5KZv/8SVjWVN3AjtDgYIIoE7pN88ytjPdRZwsZGaZ S1+BQBJc30zOHNdqJOnzE/EEB6hhS4Q1421KFC/Ukgcyh8WBvg17WIp/6vzfXJIx lui1Fejh48jJO7KVFDfu8fUnU5lLyhUfd/ep6yqvjcMbHn63+f4zUIODslcPoei5 XsswGQDxdEw4/60Q7dhiJdX4Pi83ugtDvNCwnKNWPD0uaXfDHjhSi9qMvJLg68O/ Uy8JIQafhrPHOdr+q2tIjDY9AgMBAAGjggNBMIIDPTAdBgNVHQ4EFgQUlC1UHf55 gvbgHmvMl23Ay4QU6DgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdEN0YyL0YwMjg5MDNDMUQ4QzExRTJCMTlENUZFQTA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3RDdGMi9GMDI4OTAzQzFEOEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1 NWd2YmdIbXZNbDIzQXk0UVU2RGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICRscwUgYIKwYBBQUHAQcBAf8EQzBBMDAEAgABMCoDBAIr/xgDBAFnHfYD BAJn7wgDBANybiADBAHKFYgDBADKMfkDBAHKPQIwDQQCAAIwBwMFACABRCgwDQYJ KoZIhvcNAQELBQADggEBALdQmJbtPJYKfGAEaCTL4ULth1Ba8yqCUvkp0oqwU3PT trFLloDsyynwlAQwi5Nfz3Bpp5fHy9GMk8/mpRnfNl9Vwp9No0hlr7mYc6KKybHR HL8ul643Nnerdj6k+XwMnqJVzVhsHHolox/f4kc3QT0u8ae02HuVG04Zy+K5KMDC LqBgJVuHeZ1dKYzge6n6q60UqsHvBsM28+MLO/PDcSpqmL076tWaldWqELbWeDaD ErvgFQ5NgI9sS6U3O5yVgv4ir//RWyJR87wGT2W+Id8zuxeqnujAk7jgpXmvVAB2 jK3Rsjy/hFKtXAbVPEFx0fHaJEWssfsUYHzL37NlxSg= -----END CERTIFICATE-----Generated at Sat Dec 6 09:38:05 2025 by rpki-client