This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer File: m8Zs_4CainEhIAXdnCcEerQYyKc.cer (raw, json) Hash identifier: TkcvHSL5QZ57Ts/1JzxsRLo2160usYmtLT5bpgfyYy0= Subject key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0273DF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft caRepository: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 07 Nov 2025 14:59:24 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 24479 IP: 203.3.167.0/24 IP: 203.28.212.0/24 IP: 203.30.192.0/24 IP: 203.170.0.0/20 IP: 2402:4d40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160735 (0x273df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 7 14:59:24 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9173780, serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:71:b0:8b:ef:61:51:1d:74:48:63:05:07:64: e5:ed:a1:84:3f:fa:4c:8a:3d:12:0c:39:19:95:d3: 8b:5d:4b:15:f4:67:11:31:63:32:99:c1:7a:c3:0a: 93:25:fb:17:79:2d:67:a3:ac:95:0c:66:6a:7e:c7: 34:f9:4b:3d:4e:cb:df:89:67:33:03:eb:50:db:1b: 0e:5e:ba:5e:b1:eb:0b:e7:11:c4:82:92:4f:56:9f: 85:cc:18:61:c3:8a:9b:b4:08:86:e5:a8:8e:35:45: 58:2e:86:f6:ef:0e:e0:94:25:b4:63:6c:de:bc:58: 88:3b:44:55:f1:bc:dd:b3:19:e0:c9:57:c6:19:1c: 69:f6:de:c6:11:97:39:1b:18:3a:e6:87:f2:cc:2b: e1:21:67:13:9c:36:c7:c0:cd:08:52:e7:bd:2c:77: 62:ea:e4:1f:41:9f:77:36:c7:0c:ff:3f:a6:15:3f: 70:41:98:2e:95:da:aa:a6:e8:b3:b0:cb:01:2b:0b: f1:f3:40:48:67:31:7b:3a:d3:60:6b:fe:98:89:7a: 86:f5:c6:a0:77:12:c2:03:75:09:82:3d:63:92:87: 04:6f:ae:5a:13:a1:0c:4c:35:9d:15:fa:65:50:a7: 6d:c4:a6:de:c3:24:d5:48:2a:17:ca:4e:2c:74:3f: 9b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24479 sbgp-ipAddrBlock: critical IPv4: 203.3.167.0/24 203.28.212.0/24 203.30.192.0/24 203.170.0.0/20 IPv6: 2402:4d40::/32 Signature Algorithm: sha256WithRSAEncryption 77:b5:01:77:35:c1:94:0c:2c:29:0a:da:f2:f5:19:2c:a3:ba: ec:7b:e4:a6:b8:a2:30:fd:7d:53:03:ad:5b:7c:c0:ff:a0:08: 1b:68:02:45:7a:3a:aa:db:af:95:05:cf:dd:98:5d:d7:a4:aa: 1f:72:a5:06:0f:5b:08:34:4b:98:03:9d:c1:ff:4c:c9:09:5a: b5:cd:c2:b3:c1:18:e5:ef:67:49:f7:34:bb:eb:bf:b9:9f:64: 0c:b7:e5:ac:ec:05:39:16:68:4d:09:cd:ac:3b:e6:c1:1b:98: 77:a1:a7:77:0b:bc:ac:99:50:3e:8d:2c:55:14:31:2d:9b:be: 55:09:f2:73:dd:6f:ca:55:f4:c3:94:c4:32:46:c2:f0:93:96: e0:96:e9:60:15:a1:8a:2f:69:0b:7d:c7:0a:93:1e:cd:4d:18: ea:24:65:08:0d:de:e7:5e:35:82:4f:77:e8:f2:5c:2f:20:02: b7:7f:83:bc:25:91:83:53:c4:e7:c2:46:95:5c:36:8c:76:d9: d7:9d:7c:84:c8:98:e8:8b:36:3b:0e:c1:9f:73:f2:4e:10:83: 32:54:90:d1:fe:a6:2b:eb:c9:75:f0:39:2e:a6:9e:a5:ee:e2: 2e:c2:a9:43:5f:48:a2:dd:fa:48:08:cf:f0:df:e7:66:7a:4a: fc:02:91:30 -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgIDAnPfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNzE0NTkyNFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVE RDlDMjcwNDdBQjQxOEM4QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzcbCL72FRHXRIYwUHZOXtoYQ/+kyKPRIMORmV04tdSxX0ZxExYzKZwXrDCpMl +xd5LWejrJUMZmp+xzT5Sz1Oy9+JZzMD61DbGw5eul6x6wvnEcSCkk9Wn4XMGGHD ipu0CIblqI41RVguhvbvDuCUJbRjbN68WIg7RFXxvN2zGeDJV8YZHGn23sYRlzkb GDrmh/LMK+EhZxOcNsfAzQhS570sd2Lq5B9Bn3c2xwz/P6YVP3BBmC6V2qqm6LOw ywErC/HzQEhnMXs602Br/piJeob1xqB3EsIDdQmCPWOShwRvrloToQxMNZ0V+mVQ p23Ept7DJNVIKhfKTix0P5v/AgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQUm8Zs/4Ca inEhIAXdnCcEerQYyKcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTczNzgwLzhFQjYyREZBNzdFRDExRUFBQTRDQzQyMkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRD YWluRWhJQVhkbkNjRWVyUVl5S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICX58wQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBADLA6cDBADLHNQD BADLHsADBATLqgAwDQQCAAIwBwMFACQCTUAwDQYJKoZIhvcNAQELBQADggEBAHe1 AXc1wZQMLCkK2vL1GSyjuux75Ka4ojD9fVMDrVt8wP+gCBtoAkV6Oqrbr5UFz92Y Xdekqh9ypQYPWwg0S5gDncH/TMkJWrXNwrPBGOXvZ0n3NLvrv7mfZAy35azsBTkW aE0Jzaw75sEbmHehp3cLvKyZUD6NLFUUMS2bvlUJ8nPdb8pV9MOUxDJGwvCTluCW 6WAVoYovaQt9xwqTHs1NGOokZQgN3udeNYJPd+jyXC8gArd/g7wlkYNTxOfCRpVc Nox22dedfITImOiLNjsOwZ9z8k4QgzJUkNH+pivryXXwOS6mnqXu4i7CqUNfSKLd +kgIz/Df52Z6SvwCkTA= -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:17 2025 by rpki-client