This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer File: nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer (raw, json) Hash identifier: z4HvGtFkKDAM3ldOilT5TnfG7/2aX1N7lMTdk6xNO+s= Subject key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027335 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft caRepository: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 05 Nov 2025 06:10:32 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 63842 IP: 43.250.24.0/22 IP: 103.41.156.0/22 IP: 203.22.100.0/22 IP: 2402:10c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160565 (0x27335) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 5 06:10:32 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A9154840, serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3d:d3:4e:9f:b9:e2:55:06:f1:1d:0c:67:1e: e9:21:28:b6:06:f2:08:9e:a9:e9:90:9f:ab:c4:27: c0:eb:d4:f8:11:47:67:4a:89:e4:b4:17:53:0e:32: a5:b5:65:79:2c:60:fd:79:bd:c7:d1:58:7e:05:9f: a1:13:35:61:8c:d4:11:65:08:e9:8e:91:7d:54:35: f1:31:b8:14:67:97:c4:e9:16:e1:39:51:f8:1a:ba: f1:d4:1e:65:e4:a2:73:66:9d:e3:66:d2:dd:a3:82: 9b:67:36:b9:3a:20:1f:1e:b2:4b:da:41:c8:fe:fe: 67:5b:07:88:6e:b7:03:2b:f6:44:f3:dc:4b:2b:4a: dd:67:f6:65:fd:97:3a:22:f4:c5:b9:1f:52:ce:dc: eb:41:d8:39:25:a5:4a:4b:11:84:9e:f7:98:fc:bd: bc:bb:d3:e2:8b:37:df:57:e9:40:68:2c:12:03:a7: 87:f8:5d:6e:5b:28:12:c1:f7:99:e9:b3:2e:66:d2: cf:e8:99:50:90:c5:29:41:1b:83:79:91:49:40:b1: f5:93:74:e2:cc:41:08:4b:2a:c0:7b:3e:0e:c6:5d: cd:62:37:37:8b:eb:a4:3a:c9:68:c7:f8:cf:21:88: e8:f4:ec:20:e2:fa:f4:d3:37:ed:fb:8b:dc:73:01: 5e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63842 sbgp-ipAddrBlock: critical IPv4: 43.250.24.0/22 103.41.156.0/22 203.22.100.0/22 IPv6: 2402:10c0::/32 Signature Algorithm: sha256WithRSAEncryption c4:cc:a8:73:63:25:86:26:a2:02:ef:6d:ac:73:4e:28:c9:f3: e9:c4:09:01:5c:fe:9a:60:d1:51:55:26:20:18:ad:6c:e9:dd: 4b:ec:ed:3c:54:e3:ed:a5:f0:9e:c9:97:16:89:f3:f4:01:4c: 32:29:b5:27:04:d4:5d:4a:86:e3:e3:75:fe:25:c7:32:a9:26: 9e:a0:78:7a:15:f9:8b:35:2b:4b:99:cf:87:f3:98:bc:a3:ea: dd:7b:25:e2:03:25:68:9a:8b:ce:0b:95:f3:79:31:09:dc:ce: 25:2a:17:1c:3c:f8:6e:b8:1d:9c:4a:fd:ea:96:0c:59:bd:02: 7e:ff:e5:fa:a6:30:f2:ba:2f:55:81:81:44:be:d8:45:1e:e9: 7c:d3:7d:c2:d9:5f:05:e0:ff:a0:2b:ac:17:84:f2:1c:61:ac: e8:d6:e9:c5:f1:b9:65:59:97:80:30:c3:6a:af:42:26:9b:41: 36:99:9c:8f:c6:6b:5d:81:12:c5:0c:cf:56:1d:7e:45:81:3d: 7d:d3:83:a6:b7:58:85:80:79:dd:d9:7a:6f:c2:a8:a4:9f:20: 00:4c:7f:5f:9e:3b:b7:ad:b0:97:5e:7b:6a:0f:91:72:b2:5b: 1d:d4:f4:45:fb:e2:b9:71:23:ba:02:f2:a4:be:68:55:21:f2: 9d:39:ea:13 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIDAnM1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNTA2MTAzMloXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTQ4NDAxMTAvBgNVBAUTKDlDRjcxNDc4QkY1OUIwMDhCMUI1NDJG QTkzQTdDMTBFRkI3RjRENjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlPdNOn7niVQbxHQxnHukhKLYG8gieqemQn6vEJ8Dr1PgRR2dKieS0F1MOMqW1 ZXksYP15vcfRWH4Fn6ETNWGM1BFlCOmOkX1UNfExuBRnl8TpFuE5UfgauvHUHmXk onNmneNm0t2jgptnNrk6IB8eskvaQcj+/mdbB4hutwMr9kTz3EsrSt1n9mX9lzoi 9MW5H1LO3OtB2DklpUpLEYSe95j8vby70+KLN99X6UBoLBIDp4f4XW5bKBLB95np sy5m0s/omVCQxSlBG4N5kUlAsfWTdOLMQQhLKsB7Pg7GXc1iNzeL66Q6yWjH+M8h iOj07CDi+vTTN+37i9xzAV5dAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQUnPcUeL9Z sAixtUL6k6fBDvt/TWIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU0ODQwLzM0MkY4MEQwOUZDNDExRUY5NjMxRjgzNkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1NDg0MC8zNDJGODBEMDlGQzQxMUVGOTYzMUY4MzZDNEY5QUUwMi9uUGNVZUw5 WnNBaXh0VUw2azZmQkR2dF9UV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAPliMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCK/oYAwQCZymc AwQCyxZkMA0EAgACMAcDBQAkAhDAMA0GCSqGSIb3DQEBCwUAA4IBAQDEzKhzYyWG JqIC722sc04oyfPpxAkBXP6aYNFRVSYgGK1s6d1L7O08VOPtpfCeyZcWifP0AUwy KbUnBNRdSobj43X+JccyqSaeoHh6FfmLNStLmc+H85i8o+rdeyXiAyVomovOC5Xz eTEJ3M4lKhccPPhuuB2cSv3qlgxZvQJ+/+X6pjDyui9VgYFEvthFHul8033C2V8F 4P+gK6wXhPIcYazo1unF8bllWZeAMMNqr0Imm0E2mZyPxmtdgRLFDM9WHX5FgT19 04Omt1iFgHnd2XpvwqiknyAATH9fnju3rbCXXntqD5Fyslsd1PRF++K5cSO6AvKk vmhVIfKdOeoT -----END CERTIFICATE-----Generated at Sat Dec 6 22:11:47 2025 by rpki-client