This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer (raw, json) Hash identifier: M+TwBF3kufiXhyV1nCnjllzaACDGqnRvn2rSXRzpR2I= Subject key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C48 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft caRepository: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 15:27:43 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 9258 AS: 9650 AS: 45837 AS: 153308 -- 153309 IP: 45.64.68.0/22 IP: 103.233.236.0/22 IP: 203.5.10.0/24 IP: 203.9.184.0/22 IP: 203.15.124.0/22 IP: 203.18.108.0/23 IP: 203.21.12.0/24 IP: 203.62.216.0/22 IP: 2406:3c00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162888 (0x27c48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 5 15:27:43 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b5:d8:68:68:c8:41:4f:60:d0:d1:91:fa:52: d1:e0:79:ac:88:07:d5:a7:d8:b7:bd:08:eb:3b:51: a0:ca:51:c7:45:13:5d:bd:12:7c:07:ba:96:0d:c1: 1e:a4:88:fc:7f:0c:ab:89:4e:cd:0c:0e:49:de:5d: c5:6d:2a:8f:c3:fc:29:1f:1a:8a:37:69:fd:f7:0d: 20:0e:71:e9:ab:fd:44:6d:64:3b:fc:93:64:f7:9f: 38:02:31:37:31:55:c0:0f:2a:d5:fa:71:4e:72:dd: a8:90:79:51:cc:b3:ee:48:36:6a:91:da:f0:5d:ce: d7:0f:b6:2a:9f:a8:dd:c6:fd:e6:96:bb:5a:7e:5c: 5a:ff:51:ae:57:00:e6:40:6f:30:96:e8:1d:ff:84: 75:0d:20:7c:d2:1b:d1:54:75:32:46:87:cf:a4:28: cd:e8:69:76:da:08:f7:60:d9:b9:54:21:af:92:6c: ac:b4:00:87:61:2e:da:51:4c:72:e8:84:70:e6:3c: 11:ed:3d:a6:ae:25:0e:f9:3b:39:e9:32:1d:9a:8e: e3:f1:44:ac:55:1f:c9:ee:d6:73:ae:00:b9:a2:ab: 6e:a3:f5:a4:41:c6:c4:8e:ba:81:ae:ca:60:f1:bb: 37:4f:6e:d7:68:57:4b:42:e4:c6:d4:7b:e6:53:cc: 87:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9258 9650 45837 153308-153309 sbgp-ipAddrBlock: critical IPv4: 45.64.68.0/22 103.233.236.0/22 203.5.10.0/24 203.9.184.0/22 203.15.124.0/22 203.18.108.0/23 203.21.12.0/24 203.62.216.0/22 IPv6: 2406:3c00::/32 Signature Algorithm: sha256WithRSAEncryption 6a:4d:ba:f3:00:22:89:98:0f:39:36:44:01:b6:90:c9:c2:24: a4:ae:a2:74:87:0a:37:03:e1:05:2c:09:28:85:3d:61:c9:6d: 6a:1c:0a:8e:51:5c:8f:62:bf:78:4e:de:e6:94:6c:bf:72:ca: e9:a9:4e:f2:b7:0e:d0:5a:cb:ba:3c:4e:f3:14:4b:fe:a6:73: 1b:f0:e4:a5:bd:93:51:4a:69:de:47:67:03:90:8c:ac:b5:5f: ca:0c:53:81:89:e3:53:78:56:58:9f:d1:d6:c3:4f:5e:c3:20: 0f:b9:95:05:b8:66:91:8e:74:6d:e9:eb:ea:fe:9c:85:ef:b4: ee:95:0c:55:52:05:5b:46:7a:4c:37:4b:60:a5:35:37:86:d3: 99:6d:e8:2c:e4:4b:ee:12:38:ec:7b:c1:e7:72:92:d8:96:7c: 08:1a:cd:49:6e:d0:19:5f:4e:32:8f:b6:58:37:19:af:04:22: 1c:a4:08:5c:c0:c6:fa:fd:d5:fb:47:8d:6f:dc:1f:3f:5c:b6: 7c:cc:fd:27:fe:87:c7:80:ab:92:f4:33:0c:aa:79:29:cb:bd: 34:98:c0:dc:bd:4f:84:8b:62:62:4e:a7:b6:db:93:36:a1:34: 6e:dc:48:71:d1:7d:97:42:1a:39:77:34:e9:a6:1e:83:a8:6c: 7d:6e:c2:0f -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIDAnxIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNTE1Mjc0M1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxN0U0QkExMTAvBgNVBAUTKEFBNDM2QUFGQzY4ODA0NUJGNTE0ODg2 MTU0NkZBM0ZEQ0E5ODQwOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDetdhoaMhBT2DQ0ZH6UtHgeayIB9Wn2Le9COs7UaDKUcdFE129EnwHupYNwR6k iPx/DKuJTs0MDkneXcVtKo/D/CkfGoo3af33DSAOcemr/URtZDv8k2T3nzgCMTcx VcAPKtX6cU5y3aiQeVHMs+5INmqR2vBdztcPtiqfqN3G/eaWu1p+XFr/Ua5XAOZA bzCW6B3/hHUNIHzSG9FUdTJGh8+kKM3oaXbaCPdg2blUIa+SbKy0AIdhLtpRTHLo hHDmPBHtPaauJQ75OznpMh2ajuPxRKxVH8nu1nOuALmiq26j9aRBxsSOuoGuymDx uzdPbtdoV0tC5MbUe+ZTzIc1AgMBAAGjggNcMIIDWDAdBgNVHQ4EFgQUqkNqr8aI BFv1FIhhVG+j/cqYQI4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdFNEJBL0QwNkJGMzI4NTJEQzExRUE4MjYwMUIwRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3RTRCQS9EMDZCRjMyODUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhh SUJGdjFGSWhoVkctal9jcVlRSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQgBAf8EHzAd oBswGQICJCoCAiWyAgMAsw0wCgIDAlbcAgMCVt0wWAYIKwYBBQUHAQcBAf8ESTBH MDYEAgABMDADBAItQEQDBAJn6ewDBADLBQoDBALLCbgDBALLD3wDBAHLEmwDBADL FQwDBALLPtgwDQQCAAIwBwMFACQGPAAwDQYJKoZIhvcNAQELBQADggEBAGpNuvMA IomYDzk2RAG2kMnCJKSuonSHCjcD4QUsCSiFPWHJbWocCo5RXI9iv3hO3uaUbL9y yumpTvK3DtBay7o8TvMUS/6mcxvw5KW9k1FKad5HZwOQjKy1X8oMU4GJ41N4Vlif 0dbDT17DIA+5lQW4ZpGOdG3p6+r+nIXvtO6VDFVSBVtGekw3S2ClNTeG05lt6Czk S+4SOOx7wedyktiWfAgazUlu0BlfTjKPtlg3Ga8EIhykCFzAxvr91ftHjW/cHz9c tnzM/Sf+h8eAq5L0MwyqeSnLvTSYwNy9T4SLYmJOp7bbkzahNG7cSHHRfZdCGjl3 NOmmHoOobH1uwg8= -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:27 2025 by rpki-client