This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer File: m8FpAIAncr5ikmDEqu1fP-9-s-c.cer (raw, json) Hash identifier: OeVoWMcTHVvMR/CfKTKZP9FUKVw5xEA+QAyzzpipJG8= Subject key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A9F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 12:45:26 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 45474 IP: 27.126.192.0/18 IP: 45.116.40.0/22 IP: 103.3.24.0/22 IP: 113.21.192.0/19 IP: 180.233.160.0/19 IP: 2404:ae00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162463 (0x27a9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 12:45:26 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91F91EB, serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:0d:93:ae:15:fb:9b:8d:2a:51:23:a6:04: 9a:7f:e6:ea:a0:68:e2:fe:38:e2:27:21:7a:4d:76: 0d:1f:e1:f7:a2:38:95:37:d5:53:a3:55:90:95:20: 7c:44:2a:2c:3f:91:84:cf:1c:92:2b:ab:4f:b3:1c: 45:c4:6e:45:4f:8b:59:ec:1b:cb:95:45:27:b9:2f: cf:93:63:bd:aa:a6:b8:2d:86:22:b7:f3:c2:76:d3: 61:e4:15:8b:36:29:13:e2:3b:7e:8a:1e:4f:39:19: 8f:cd:da:fc:ce:0a:f1:12:88:a7:80:a2:aa:7b:06: d8:6b:af:da:de:99:f7:3f:17:99:40:97:2d:6e:e6: 9a:9b:96:91:86:cd:9e:3b:ad:f2:18:79:d4:66:20: 33:03:2e:f3:78:7f:e2:d1:3c:03:e0:44:12:ea:d8: 3f:b6:43:3e:fb:a5:bb:c6:fc:1a:e6:90:1a:ea:20: 04:55:66:dc:a8:d2:8a:d3:f8:e3:a1:1a:a1:29:3f: 22:ac:e9:21:6b:e1:2b:00:14:db:b4:3b:ee:30:69: 1a:89:ec:63:d6:e2:af:7e:d8:5d:15:cc:2b:48:ed: 0e:00:03:25:69:5b:ec:90:9b:e4:09:b8:30:54:a9: cf:cf:61:ef:8c:78:63:2b:4a:e1:db:30:38:5e:5e: 2a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45474 sbgp-ipAddrBlock: critical IPv4: 27.126.192.0/18 45.116.40.0/22 103.3.24.0/22 113.21.192.0/19 180.233.160.0/19 IPv6: 2404:ae00::/32 Signature Algorithm: sha256WithRSAEncryption ca:27:59:27:70:20:85:96:1a:50:c5:28:b2:ab:55:6c:42:3b: 73:2b:2d:2e:c0:f0:34:b8:f1:79:5b:6c:4d:37:4e:18:42:80: 1b:80:a6:f2:f6:12:78:b6:f5:7a:af:9c:48:8d:5b:58:5a:0f: d8:05:6a:f5:c6:dd:3d:49:b5:68:57:cc:58:d4:28:75:b6:23: 85:dd:9f:86:ae:97:51:9e:5d:cd:ba:9e:af:67:ce:e3:ca:63: 69:c5:54:aa:21:ac:8f:cc:b7:87:25:4f:cc:10:93:21:e8:d8: 98:67:49:f3:eb:09:ab:5a:16:4e:21:63:e7:aa:12:62:7a:76: 6b:90:20:04:fc:cd:fa:a3:ad:ef:3f:f5:9c:b0:96:80:0f:ab: 8c:19:95:1c:37:ae:e3:c2:c9:60:a7:1b:41:3a:b9:e3:b5:47: 4b:1a:26:f7:d5:a1:19:fa:50:38:a6:60:79:b1:7b:82:3d:7f: 88:38:ea:8e:80:45:59:fd:5c:63:d3:4a:9d:41:30:71:59:42: ee:24:eb:2b:97:e1:c4:15:49:e6:55:76:78:d2:7d:08:bc:c7: 3a:a5:d3:74:5d:1d:b7:c2:87:e3:56:b8:7c:94:0e:ed:f0:73: b2:71:36:7c:3b:c7:d5:6f:8e:89:d5:0f:ba:1c:b6:f1:61:2f: 4a:31:30:36 -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIDAnqfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjEyNDUyNloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjkxRUIxMTAvBgNVBAUTKDlCQzE2OTAwODAyNzcyQkU2MjkyNjBD NEFBRUQ1RjNGRUY3RUIzRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/HA2TrhX7m40qUSOmBJp/5uqgaOL+OOInIXpNdg0f4feiOJU31VOjVZCVIHxE Kiw/kYTPHJIrq0+zHEXEbkVPi1nsG8uVRSe5L8+TY72qprgthiK388J202HkFYs2 KRPiO36KHk85GY/N2vzOCvESiKeAoqp7Bthrr9remfc/F5lAly1u5pqblpGGzZ47 rfIYedRmIDMDLvN4f+LRPAPgRBLq2D+2Qz77pbvG/BrmkBrqIARVZtyo0orT+OOh GqEpPyKs6SFr4SsAFNu0O+4waRqJ7GPW4q9+2F0VzCtI7Q4AAyVpW+yQm+QJuDBU qc/PYe+MeGMrSuHbMDheXiprAgMBAAGjggM2MIIDMjAdBgNVHQ4EFgQUm8FpAIAn cr5ikmDEqu1fP+9+s+cwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY5MUVCLzUwRUZFMDc0RjcwNTExRTlBREJBNDUxRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGOTFFQi81MEVGRTA3NEY3MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlB bmNyNWlrbURFcXUxZlAtOS1zLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALGiMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQGG37AAwQCLXQo AwQCZwMYAwQFcRXAAwQFtOmgMA0EAgACMAcDBQAkBK4AMA0GCSqGSIb3DQEBCwUA A4IBAQDKJ1kncCCFlhpQxSiyq1VsQjtzKy0uwPA0uPF5W2xNN04YQoAbgKby9hJ4 tvV6r5xIjVtYWg/YBWr1xt09SbVoV8xY1Ch1tiOF3Z+GrpdRnl3Nup6vZ87jymNp xVSqIayPzLeHJU/MEJMh6NiYZ0nz6wmrWhZOIWPnqhJienZrkCAE/M36o63vP/Wc sJaAD6uMGZUcN67jwslgpxtBOrnjtUdLGib31aEZ+lA4pmB5sXuCPX+IOOqOgEVZ /Vxj00qdQTBxWULuJOsrl+HEFUnmVXZ40n0IvMc6pdN0XR23wofjVrh8lA7t8HOy cTZ8O8fVb46J1Q+6HLbxYS9KMTA2 -----END CERTIFICATE-----Generated at Sat Dec 6 14:20:34 2025 by rpki-client