This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer File: qelaQWvM7v2G6i-gGcJeTXa46dk.cer (raw, json) Hash identifier: 9J96mJHdIGoA5aMEmW3H5HQ+gOJBxm3KuD+VHfj9bpI= Subject key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027951 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft caRepository: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 30 Nov 2025 12:29:38 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 134094 AS: 138646 IP: 45.123.116.0/24 IP: 45.123.118.0/23 IP: 103.51.140.0/22 IP: 103.103.128.0/22 IP: 203.15.150.0/24 IP: 2401:f540::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162129 (0x27951) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 30 12:29:38 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:78:03:91:23:7e:9c:42:c7:6e:00:7f:c0:35: 28:41:e2:49:43:af:0c:83:cb:95:3c:ef:48:c3:1f: 3c:5b:94:e4:e9:22:72:b2:81:bf:fa:df:6b:31:77: 5f:35:ee:53:bb:6a:e3:fe:c1:2b:32:00:fc:be:8a: 73:9a:71:c0:be:f5:79:5e:87:c3:ab:b9:52:3a:8f: 4e:d7:3c:48:8e:10:66:d6:c4:7a:00:a5:95:e9:a2: 4a:57:72:30:9b:64:8f:17:5f:2f:c2:4d:a6:2b:66: b7:c3:aa:a5:e5:c3:6e:c6:5b:2c:49:c6:50:1d:2d: 3b:4c:30:b3:ba:38:77:c2:a9:4f:8e:30:4a:5a:d6: 12:d3:19:a2:6e:b9:42:6f:5e:48:56:c8:92:6d:a7: b4:39:f4:89:b9:3b:d5:0d:08:1a:b8:28:0d:b3:d8: 35:01:3b:10:08:97:e0:a4:66:a3:4c:69:52:c2:26: c5:db:0d:ca:9f:eb:ef:e4:86:26:3a:ff:47:c1:48: ad:e9:e5:a7:2f:f8:f8:b7:ff:5f:c4:55:d7:ad:f3: 1a:d1:db:b6:97:dc:f8:78:1c:37:65:6a:1e:3a:d3: 4e:68:e9:ea:c6:c1:51:63:bf:89:fd:c9:17:77:2a: 6d:db:9a:de:4b:67:a8:fa:be:46:ea:fb:16:ce:7f: 6c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134094 138646 sbgp-ipAddrBlock: critical IPv4: 45.123.116.0/24 45.123.118.0/23 103.51.140.0/22 103.103.128.0/22 203.15.150.0/24 IPv6: 2401:f540::/32 Signature Algorithm: sha256WithRSAEncryption 9e:07:9a:93:dd:41:07:9d:69:33:d7:a3:5e:d3:19:ed:37:a1: d0:fd:2f:d4:1a:c1:0d:22:90:95:8a:a4:bb:f6:83:97:4c:35: 0b:36:d1:63:bc:d5:70:57:97:08:1b:d8:e3:c8:f6:81:ff:9a: ed:e7:85:6b:6b:90:b3:ac:a5:9c:d1:54:be:eb:d6:64:8a:1f: c8:d5:bc:0d:74:8d:fc:c1:91:50:4b:ad:25:85:65:57:ee:55: 03:8a:83:de:e7:99:5d:87:00:bc:49:62:33:29:e0:74:6b:bd: 8a:8c:1b:6c:2e:4e:d7:04:19:9a:0d:a9:d7:8b:43:18:eb:2d: 2d:db:b4:63:2d:c8:16:c5:05:eb:ed:40:26:db:d3:ec:33:0c: 54:4e:18:53:21:41:fc:3f:b3:84:46:be:df:9c:37:c8:b8:2d: 61:3e:8f:4b:5c:c5:05:d9:35:4a:77:89:fb:64:e2:42:bf:f4: 13:86:86:64:66:97:df:9b:41:a4:2f:fc:2b:5d:76:33:8e:58: f6:96:f5:cb:c0:39:bc:62:73:7e:1c:37:60:05:85:ee:f0:98: 4d:c0:3a:b0:fe:91:fa:fa:e0:a7:83:68:42:82:e5:f0:99:e7: a7:82:97:3b:18:33:37:76:8f:d3:19:a6:11:a5:02:6e:89:32: e9:4e:9a:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIDAnlRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEzMDEyMjkzOFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZB MDE5QzI1RTRENzZCOEU5RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbeAORI36cQsduAH/ANShB4klDrwyDy5U870jDHzxblOTpInKygb/632sxd181 7lO7auP+wSsyAPy+inOaccC+9Xleh8OruVI6j07XPEiOEGbWxHoApZXpokpXcjCb ZI8XXy/CTaYrZrfDqqXlw27GWyxJxlAdLTtMMLO6OHfCqU+OMEpa1hLTGaJuuUJv XkhWyJJtp7Q59Im5O9UNCBq4KA2z2DUBOxAIl+CkZqNMaVLCJsXbDcqf6+/khiY6 /0fBSK3p5acv+Pi3/1/EVdet8xrR27aX3Ph4HDdlah46005o6erGwVFjv4n9yRd3 Km3bmt5LZ6j6vkbq+xbOf2wtAgMBAAGjggM7MIIDNzAdBgNVHQ4EFgQUqelaQWvM 7v2G6i+gGcJeTXa46dkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFDNjc2L0NEMzhBQjE2REREOTExRThBRjQ1MUYwQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExQzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2 TTd2Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAgvOAgMCHZYwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAAte3QD BAEte3YDBAJnM4wDBAJnZ4ADBADLD5YwDQQCAAIwBwMFACQB9UAwDQYJKoZIhvcN AQELBQADggEBAJ4HmpPdQQedaTPXo17TGe03odD9L9QawQ0ikJWKpLv2g5dMNQs2 0WO81XBXlwgb2OPI9oH/mu3nhWtrkLOspZzRVL7r1mSKH8jVvA10jfzBkVBLrSWF ZVfuVQOKg97nmV2HALxJYjMp4HRrvYqMG2wuTtcEGZoNqdeLQxjrLS3btGMtyBbF BevtQCbb0+wzDFROGFMhQfw/s4RGvt+cN8i4LWE+j0tcxQXZNUp3iftk4kK/9BOG hmRml9+bQaQv/CtddjOOWPaW9cvAObxic34cN2AFhe7wmE3AOrD+kfr64KeDaEKC 5fCZ56eClzsYMzd2j9MZphGlAm6JMulOmsU= -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:48 2025 by rpki-client