This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer File: p-wiWGgvb66fhDj6JicYnlQvTe8.cer (raw, json) Hash identifier: TnROClLIBB8eJRrCAm0XTyJjajhPs5GD32lTARjLX1g= Subject key identifier: A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027BCF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 08:43:04 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 59219 AS: 135666 IP: 43.230.208.0/24 IP: 103.78.111.0/24 IP: 103.78.116.0/23 IP: 103.252.84.0/24 IP: 2001:deb:8000::/48 IP: 2400:1440::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162767 (0x27bcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 08:43:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91FA92A, serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9d:a1:a0:50:7a:cc:43:a3:9e:c9:c0:1e:ab: 08:c1:02:4f:83:75:06:34:5e:cd:26:4c:47:53:8a: 7e:b5:2d:08:2e:aa:be:a3:96:dd:10:84:3d:9b:b5: 1a:23:9f:02:99:4e:98:c5:6e:4c:31:1d:d2:05:a3: 5e:6e:7b:b5:7f:01:b8:4f:0a:03:14:ee:2d:b2:c6: cf:87:8b:9b:dd:a9:61:09:91:8e:e2:47:c6:69:9c: cc:3b:09:3c:83:a6:1b:a7:19:29:e5:b2:b2:78:95: 7b:f3:ba:8d:67:c2:8c:8f:08:64:76:26:50:a1:5c: 5c:19:7a:63:69:2c:17:4a:26:0d:a0:f5:1e:30:b3: d8:b6:8b:a2:60:59:82:0a:f6:07:48:eb:68:98:4f: 74:f3:b6:c5:6f:a9:29:b0:be:6d:3a:c8:59:a0:56: 25:a8:5f:42:92:0f:b6:bd:7f:5d:f8:fa:f8:f3:77: cc:de:a0:ff:e4:37:c9:2b:f4:72:55:57:e5:96:3e: f0:b0:04:30:d8:99:70:b9:c3:2e:44:2d:02:75:b0: 51:64:1c:70:4f:b6:4b:2d:50:af:db:37:a1:a9:3a: 8e:98:6f:bb:fa:48:eb:86:09:4d:0c:f4:68:4e:99: 41:f5:eb:45:bb:ba:9f:93:f8:cc:f1:2e:7d:f5:94: df:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59219 135666 sbgp-ipAddrBlock: critical IPv4: 43.230.208.0/24 103.78.111.0/24 103.78.116.0/23 103.252.84.0/24 IPv6: 2001:deb:8000::/48 2400:1440::/32 Signature Algorithm: sha256WithRSAEncryption ba:df:d4:d2:4c:9b:19:51:42:46:95:07:32:d1:85:22:73:dd: df:86:4f:42:a6:d7:27:b4:36:e6:77:8f:88:55:19:52:74:58: f0:3b:c9:cb:5d:95:34:a5:a5:29:cd:bc:82:3c:32:c2:68:71: 98:a0:36:90:ad:af:7f:04:2b:c0:54:13:a9:16:a0:9a:34:65: 4f:00:de:37:82:78:3c:f4:0b:a7:be:15:98:45:c5:2a:34:4c: 4c:41:cd:70:88:c8:80:68:a9:71:29:90:84:01:1e:eb:91:f8: 8a:c6:6d:4b:35:a3:9d:79:52:e5:17:e5:0e:ec:b3:d8:bc:06: 17:a7:ca:46:44:1f:36:63:eb:e6:31:62:d3:2c:4a:b8:22:bb: 71:31:78:d1:b2:6e:82:17:b0:2e:43:58:28:8d:1d:8a:f8:53: ab:09:55:4f:cd:98:ac:c6:e7:35:5f:ff:6c:33:08:33:88:e6: d0:4b:ba:c7:af:80:b7:a4:50:3e:ee:54:58:b0:cc:d6:87:d2: 9b:9e:8c:58:12:91:51:6f:35:40:ce:c1:96:a4:fa:ed:45:4f: 53:5f:e1:74:35:ab:64:12:7b:95:38:d8:d2:0c:d7:5a:c2:ac: fd:5f:cb:17:de:b5:a7:d2:69:df:10:6f:a9:b1:6d:be:49:54: 51:e6:04:61 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIDAnvPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDA4NDMwNFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRkE5MkExMTAvBgNVBAUTKEE3RUMyMjU4NjgyRjZGQUU5Rjg0MzhG QTI2MjcxODlFNTQyRjRERUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3naGgUHrMQ6OeycAeqwjBAk+DdQY0Xs0mTEdTin61LQguqr6jlt0QhD2btRoj nwKZTpjFbkwxHdIFo15ue7V/AbhPCgMU7i2yxs+Hi5vdqWEJkY7iR8ZpnMw7CTyD phunGSnlsrJ4lXvzuo1nwoyPCGR2JlChXFwZemNpLBdKJg2g9R4ws9i2i6JgWYIK 9gdI62iYT3TztsVvqSmwvm06yFmgViWoX0KSD7a9f134+vjzd8zeoP/kN8kr9HJV V+WWPvCwBDDYmXC5wy5ELQJ1sFFkHHBPtkstUK/bN6GpOo6Yb7v6SOuGCU0M9GhO mUH160W7up+T+MzxLn31lN9FAgMBAAGjggM+MIIDOjAdBgNVHQ4EFgQUp+wiWGgv b66fhDj6JicYnlQvTe8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZBOTJBLzQ1Nzk3QzVDNUE0RDExRTc5OUY0NkI3NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGQTkyQS80NTc5N0M1QzVBNEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dn dmI2NmZoRGo2SmljWW5sUXZUZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAOdTAgMCEfIwSQYIKwYBBQUHAQcBAf8EOjA4MB4EAgABMBgDBAAr5tAD BABnTm8DBAFnTnQDBABn/FQwFgQCAAIwEAMHACABDeuAAAMFACQAFEAwDQYJKoZI hvcNAQELBQADggEBALrf1NJMmxlRQkaVBzLRhSJz3d+GT0Km1ye0NuZ3j4hVGVJ0 WPA7yctdlTSlpSnNvII8MsJocZigNpCtr38EK8BUE6kWoJo0ZU8A3jeCeDz0C6e+ FZhFxSo0TExBzXCIyIBoqXEpkIQBHuuR+IrGbUs1o515UuUX5Q7ss9i8BhenykZE HzZj6+YxYtMsSrgiu3ExeNGyboIXsC5DWCiNHYr4U6sJVU/NmKzG5zVf/2wzCDOI 5tBLusevgLekUD7uVFiwzNaH0puejFgSkVFvNUDOwZak+u1FT1Nf4XQ1q2QSe5U4 2NIM11rCrP1fyxfetafSad8Qb6mxbb5JVFHmBGE= -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:16 2025 by rpki-client