This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer File: q2JivH0C7BrUi3HamLc9IqNi2vA.cer (raw, json) Hash identifier: 4IAAS8jqVyD1ll+9Ke7pntZJRV5AHH0ex5RtvbHg1oo= Subject key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A86 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 08:36:34 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 7544 AS: 17639 AS: 56207 IP: 103.93.220.0/22 IP: 111.125.64.0/18 IP: 120.29.64.0/18 IP: 121.58.192.0/18 IP: 123.253.136.0/22 IP: 202.69.160.0/19 IP: 210.4.96.0/19 IP: 2405:3200::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162438 (0x27a86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 08:36:34 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:30:b7:d7:32:fd:29:eb:9e:eb:80:69:8e:71: 2b:3c:84:be:8a:cb:e7:d0:cc:4a:8f:73:56:0c:fe: cf:8a:99:0a:06:d9:48:95:40:ff:f7:80:1e:b7:c5: 3c:fe:a2:2d:d4:43:ab:3b:1c:57:6d:c9:1f:5b:7e: 9b:2c:aa:01:e9:e4:48:e1:51:a8:dd:4c:e2:eb:24: 72:62:95:3e:65:de:9c:67:0e:11:b0:77:b4:4b:68: 6e:6c:e5:19:81:5c:ca:03:2d:4f:42:37:96:61:97: 2b:69:ac:02:6e:de:cd:48:32:80:db:a0:8e:ed:f8: a6:2a:ef:64:31:78:4c:57:6e:55:49:5b:f6:d5:a9: 22:55:d4:59:55:4b:25:70:80:95:f6:c7:f0:06:21: b7:7e:34:13:ba:2a:ef:f8:d9:c7:bf:8f:fa:c5:5e: 7f:8a:e7:3d:ec:20:98:f0:01:d8:7d:3c:ab:c1:ab: 41:cc:69:b8:24:c9:85:98:b9:14:ed:3b:04:e7:07: f8:35:c8:08:eb:98:74:53:6a:84:fa:29:58:4e:90: a1:da:b7:b4:c9:91:c6:b9:b5:52:d6:c7:f4:77:0a: a3:f7:39:5d:86:93:63:01:4a:d2:52:1f:5d:58:d8: 32:2a:6e:12:b6:02:ea:b2:cd:81:2d:36:7f:75:d8: 3c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 7544 17639 56207 sbgp-ipAddrBlock: critical IPv4: 103.93.220.0/22 111.125.64.0/18 120.29.64.0/18 121.58.192.0/18 123.253.136.0/22 202.69.160.0/19 210.4.96.0/19 IPv6: 2405:3200::/32 Signature Algorithm: sha256WithRSAEncryption c3:c7:b1:21:c2:0d:90:17:9a:bb:9a:ba:5f:41:43:66:a5:36: 81:8c:6e:84:a2:c6:fc:13:08:aa:07:6a:84:85:ef:3c:58:ba: 09:88:b0:39:2b:17:e2:6f:63:86:9c:69:db:d4:1e:1a:83:61: 2d:7a:04:55:6d:1c:10:e8:dc:93:66:4d:56:39:84:39:ae:d8: 39:c3:9e:f3:ab:fc:b1:21:5b:a1:28:33:60:54:a2:ba:a1:d5: e2:c0:91:02:86:9a:e9:c8:14:4b:0f:14:32:b1:52:64:9f:d2: fb:6c:13:16:b7:87:6c:d7:a3:18:a6:83:c0:b8:b5:43:4d:39: 65:88:31:97:e0:88:70:5e:8d:b4:0d:5b:02:54:97:70:99:99: e3:8f:0a:e0:9a:d3:a5:0c:dd:d0:73:f1:58:64:46:22:35:95: 24:04:f3:56:6f:a5:87:36:8d:e1:57:b5:c2:c2:40:aa:f9:2c: bc:0a:40:d1:41:17:1f:6c:07:b2:14:3e:9c:3e:bd:6b:8f:ae: 70:eb:9c:4d:d6:40:07:a1:46:ac:17:3e:99:d9:e0:98:d6:67: c0:c4:e7:be:ee:78:e9:73:8b:4d:e5:c5:14:e6:0c:55:1d:9e: b5:ed:8d:c3:ec:b1:2f:ff:72:81:b3:d3:51:15:33:94:33:b9: c0:24:cb:ee -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIDAnqGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjA4MzYzNFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFE QTk4QjczRDIyQTM2MkRBRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVMLfXMv0p657rgGmOcSs8hL6Ky+fQzEqPc1YM/s+KmQoG2UiVQP/3gB63xTz+ oi3UQ6s7HFdtyR9bfpssqgHp5EjhUajdTOLrJHJilT5l3pxnDhGwd7RLaG5s5RmB XMoDLU9CN5ZhlytprAJu3s1IMoDboI7t+KYq72QxeExXblVJW/bVqSJV1FlVSyVw gJX2x/AGIbd+NBO6Ku/42ce/j/rFXn+K5z3sIJjwAdh9PKvBq0HMabgkyYWYuRTt OwTnB/g1yAjrmHRTaoT6KVhOkKHat7TJkca5tVLWx/R3CqP3OV2Gk2MBStJSH11Y 2DIqbhK2AuqyzYEtNn912Dy5AgMBAAGjggNKMIIDRjAdBgNVHQ4EFgQUq2JivH0C 7BrUi3HamLc9IqNi2vAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUyNDU0L0Q0QzMwQjQyMUQ4NzExRTJBMTk4MjJFMDA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMjQ1NC9ENEMzMEI0MjFEODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgw QzdCclVpM0hhbUxjOUlxTmkydkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQgBAf8EEzAR oA8wDQICHXgCAkTnAgMA248wUgYIKwYBBQUHAQcBAf8EQzBBMDAEAgABMCoDBAJn XdwDBAZvfUADBAZ4HUADBAZ5OsADBAJ7/YgDBAXKRaADBAXSBGAwDQQCAAIwBwMF ACQFMgAwDQYJKoZIhvcNAQELBQADggEBAMPHsSHCDZAXmruaul9BQ2alNoGMboSi xvwTCKoHaoSF7zxYugmIsDkrF+JvY4acadvUHhqDYS16BFVtHBDo3JNmTVY5hDmu 2DnDnvOr/LEhW6EoM2BUorqh1eLAkQKGmunIFEsPFDKxUmSf0vtsExa3h2zXoxim g8C4tUNNOWWIMZfgiHBejbQNWwJUl3CZmeOPCuCa06UM3dBz8VhkRiI1lSQE81Zv pYc2jeFXtcLCQKr5LLwKQNFBFx9sB7IUPpw+vWuPrnDrnE3WQAehRqwXPpnZ4JjW Z8DE577ueOlzi03lxRTmDFUdnrXtjcPssS//coGz01EVM5QzucAky+4= -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:39 2025 by rpki-client