This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer File: qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer (raw, json) Hash identifier: gsxigPSJICfMNxkN6wowmD/IbLmu4r+gyaXkONYYfdI= Subject key identifier: A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02760C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 17:39:12 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 45.122.156.0/22 IP: 103.224.120.0/22 IP: 202.150.12.0/22 IP: 202.158.240.0/24 IP: 223.27.164.0/22 IP: 2404:e00::/31 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161292 (0x2760c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 18 17:39:12 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9192A47, serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:29:76:e1:e2:aa:b0:44:1d:77:9e:62:ec:cb: 0a:9b:95:80:fa:3f:28:e3:08:3e:fb:ca:95:6f:04: d3:7a:ba:45:3a:64:17:2c:68:34:9a:c8:43:70:74: 67:e4:a7:8b:62:07:65:5b:ee:4d:70:b5:2d:c2:d0: f5:43:62:11:12:00:ab:fa:72:9d:89:22:7e:2f:e9: 7c:81:f6:83:ce:7f:98:78:64:7a:f2:1a:91:b6:44: 8d:25:5a:db:8e:1d:df:c8:ec:8c:de:ef:1e:eb:0f: be:5b:6d:10:cc:51:49:e3:e8:7d:66:7e:d5:e1:ca: 92:99:fb:07:82:f3:ed:6c:42:cf:b2:83:d6:96:4c: 71:49:08:47:e6:0c:b8:58:5a:6c:13:52:39:88:2d: ac:79:3e:30:c3:64:56:1e:dd:21:49:1b:00:6b:2b: d0:75:20:da:90:32:92:dc:a1:b6:23:fc:11:9b:cd: 11:bc:82:33:0a:b2:ec:f1:6e:45:0d:ca:26:b5:f1: f5:5e:cf:08:0c:1f:1e:c2:57:99:1f:7f:4f:ee:b4: c3:15:3e:a7:3d:ab:6c:d1:47:76:0e:8e:da:ce:96: 65:3c:b7:52:bd:a8:08:e8:3c:d7:65:25:a2:1c:bc: 32:8c:f0:c2:28:af:58:3c:3e:5e:4c:8c:ac:b0:a7: e6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.122.156.0/22 103.224.120.0/22 202.150.12.0/22 202.158.240.0/24 223.27.164.0/22 IPv6: 2404:e00::/31 Signature Algorithm: sha256WithRSAEncryption 3e:3f:71:f3:83:99:b0:63:b5:94:7b:1a:87:97:0a:39:f0:16: bc:81:ba:4c:df:59:7a:bf:7a:02:21:11:26:b0:aa:3c:18:d6: a4:06:5d:16:3f:cd:6d:ed:57:98:93:98:66:6e:1a:1f:c7:b8: 8f:e4:83:fc:11:6d:f6:ac:dd:bf:04:10:6f:50:93:16:2e:c3: df:ee:2f:66:49:d3:ef:ca:84:19:25:5d:91:55:ab:67:77:4c: 05:e1:c1:74:8f:7d:82:91:91:0b:7a:67:53:4a:aa:c3:8b:96: 7a:e2:98:10:4b:53:e0:36:8c:9e:af:2e:a5:c6:5d:9b:a4:9b: be:f1:b9:50:f1:ee:f3:af:2e:8d:ba:74:45:3e:7a:04:63:bb: 6b:45:33:a6:a1:46:84:05:7d:69:b1:09:25:d8:d6:3b:de:fa: 60:79:1a:24:0a:8f:39:6f:31:86:eb:88:f8:5b:b8:37:75:3b: 1e:90:1a:cd:fd:02:c9:d7:8f:3f:fe:84:d1:90:38:3e:9f:a7: b1:ca:67:ba:c5:5b:dd:61:8d:c0:1e:a2:01:c8:7e:fd:29:b8: 10:38:17:36:ec:da:10:c8:56:32:09:2e:1e:82:d8:96:33:bf: f6:b3:b4:ec:d6:c4:9c:7b:31:f3:74:4a:fc:cb:40:7a:e4:11: 31:ac:e4:41 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgIDAnYMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExODE3MzkxMloXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTJBNDcxMTAvBgNVBAUTKEE4NkU1RDQwQUExNTI5RDRGRjIyQjMy QzRFOTMwMDZEMEZBMkNBNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRKXbh4qqwRB13nmLsywqblYD6PyjjCD77ypVvBNN6ukU6ZBcsaDSayENwdGfk p4tiB2Vb7k1wtS3C0PVDYhESAKv6cp2JIn4v6XyB9oPOf5h4ZHryGpG2RI0lWtuO Hd/I7Ize7x7rD75bbRDMUUnj6H1mftXhypKZ+weC8+1sQs+yg9aWTHFJCEfmDLhY WmwTUjmILax5PjDDZFYe3SFJGwBrK9B1INqQMpLcobYj/BGbzRG8gjMKsuzxbkUN yia18fVezwgMHx7CV5kff0/utMMVPqc9q2zRR3YOjtrOlmU8t1K9qAjoPNdlJaIc vDKM8MIor1g8Pl5MjKywp+ZJAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUqG5dQKoV KdT/IrMsTpMAbQ+iynQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTkyQTQ3L0VFQjk0RDcyQjgyMDExRUZBQUU2RjU2N0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5MkE0Ny9FRUI5NEQ3MkI4MjAxMUVGQUFFNkY1NjdDNEY5QUUwMi9xRzVkUUtv VktkVF9Jck1zVHBNQWJRLWl5blEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8ENzA1 MCQEAgABMB4DBAItepwDBAJn4HgDBALKlgwDBADKnvADBALfG6QwDQQCAAIwBwMF ASQEDgAwDQYJKoZIhvcNAQELBQADggEBAD4/cfODmbBjtZR7GoeXCjnwFryBukzf WXq/egIhESawqjwY1qQGXRY/zW3tV5iTmGZuGh/HuI/kg/wRbfas3b8EEG9QkxYu w9/uL2ZJ0+/KhBklXZFVq2d3TAXhwXSPfYKRkQt6Z1NKqsOLlnrimBBLU+A2jJ6v LqXGXZukm77xuVDx7vOvLo26dEU+egRju2tFM6ahRoQFfWmxCSXY1jve+mB5GiQK jzlvMYbriPhbuDd1Ox6QGs39AsnXjz/+hNGQOD6fp7HKZ7rFW91hjcAeogHIfv0p uBA4Fzbs2hDIVjIJLh6C2JYzv/aztOzWxJx7MfN0SvzLQHrkETGs5EE= -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:45 2025 by rpki-client