This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer File: qriBuCFHwwNrgPxnWTTcLkbOD38.cer (raw, json) Hash identifier: 553ixICqQ6Wvrw4hfBN3YeIbiiB+czoRY/1jxG1rlPI= Subject key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027BCD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 08:16:24 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 103.158.190.0/23 IP: 2001:df5:5f80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162765 (0x27bcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 08:16:24 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:dc:af:88:c4:81:09:af:c0:ea:f8:e0:6f: 65:d1:d4:9a:ab:9d:93:2d:ac:e9:24:42:01:ff:cf: 36:28:88:48:22:c9:7d:c9:50:7b:a9:61:87:01:82: 8d:7c:91:c9:37:c7:ed:06:3a:60:c1:e3:cd:c0:dc: 7e:6f:00:2f:c4:97:90:4a:4b:7b:72:c3:03:4e:68: e7:65:16:3e:a4:dc:ee:a2:9d:7c:0b:8f:9e:17:f0: ff:3c:02:c5:37:1b:23:8f:50:fc:c4:c7:63:ef:fa: 00:71:ef:d4:99:19:e7:ab:52:dd:30:86:f3:11:aa: 57:a6:ed:d4:b2:a2:4e:d3:20:09:f9:4e:06:cc:46: 2c:47:0b:4d:5c:b4:27:54:0e:28:ee:66:72:76:90: 9d:bb:af:46:ed:a2:e6:e0:d1:9b:31:a0:8e:7b:d8: ca:1b:eb:2a:aa:02:cc:f1:53:42:bd:22:67:cd:c8: 6c:51:ae:30:3f:6a:b7:c2:39:94:9b:9b:86:10:0a: 46:75:be:5f:1f:aa:5a:4c:00:41:c2:cf:4d:54:f5: d7:92:c0:16:31:0d:2e:7f:c9:b5:b5:49:d1:16:4e: e3:50:d9:9a:28:d6:ef:e6:4c:aa:58:01:38:11:2a: 31:d9:41:f6:19:c0:6e:34:82:5b:fa:ab:18:bf:0a: ba:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.190.0/23 IPv6: 2001:df5:5f80::/48 Signature Algorithm: sha256WithRSAEncryption 28:65:3d:49:38:32:16:05:9c:bd:19:b9:63:8e:3b:b2:7d:d6: 1e:a5:df:e5:df:ca:97:4f:59:6a:75:f9:6a:fd:f9:db:45:79: cd:fb:1d:13:05:8f:f3:89:08:a0:4d:bd:88:54:0d:b3:a0:26: ff:de:3b:20:00:79:fb:1b:af:0a:b5:60:cb:e6:c0:49:20:8d: 4f:85:f8:53:f1:5e:1b:d0:cd:e1:c7:b3:69:16:b6:95:40:09: cd:0a:79:0c:f1:92:76:74:00:76:fb:a5:52:65:96:44:9a:84: e1:71:09:b0:bb:a4:67:de:89:1e:ad:7c:ef:f5:a5:36:ec:df: 5f:c2:9d:da:13:1b:eb:3a:78:44:39:d6:f5:64:44:c2:c6:e0: 7d:f1:ac:78:fe:1b:be:a6:cd:af:75:4b:27:eb:b9:e2:c8:50: b4:48:d2:62:a7:7b:97:9b:d8:88:a4:55:82:1e:4e:d0:55:5d: ce:7f:75:3e:9c:41:44:52:6e:6e:b7:dc:52:56:48:9e:3e:9f: da:d5:c3:3f:db:ae:f0:57:65:d8:86:e6:53:15:d8:c2:ba:c7: 0a:21:bb:08:6e:ac:c7:be:00:19:6d:ad:a7:96:64:c1:82:73: 51:ff:69:8a:f4:64:64:e2:b5:5f:55:28:a7:dc:8a:cb:a5:1d: 73:e1:f1:4f -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIDAnvNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDA4MTYyNFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2 NzU5MzREQzJFNDZDRTBGN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLxNyviMSBCa/A6vjgb2XR1JqrnZMtrOkkQgH/zzYoiEgiyX3JUHupYYcBgo18 kck3x+0GOmDB483A3H5vAC/El5BKS3tywwNOaOdlFj6k3O6inXwLj54X8P88AsU3 GyOPUPzEx2Pv+gBx79SZGeerUt0whvMRqlem7dSyok7TIAn5TgbMRixHC01ctCdU DijuZnJ2kJ27r0btoubg0ZsxoI572Mob6yqqAszxU0K9ImfNyGxRrjA/arfCOZSb m4YQCkZ1vl8fqlpMAEHCz01U9deSwBYxDS5/ybW1SdEWTuNQ2Zoo1u/mTKpYATgR KjHZQfYZwG40glv6qxi/Crp5AgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUqriBuCFH wwNrgPxnWTTcLkbOD38wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY0RURFLzJDQjAzMjU4QkU3OTExRUI5NTExOEIxOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGNEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNG SHd3TnJnUHhuV1RUY0xrYk9EMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf MAwEAgABMAYDBAFnnr4wDwQCAAIwCQMHACABDfVfgDANBgkqhkiG9w0BAQsFAAOC AQEAKGU9STgyFgWcvRm5Y447sn3WHqXf5d/Kl09ZanX5av3520V5zfsdEwWP84kI oE29iFQNs6Am/947IAB5+xuvCrVgy+bASSCNT4X4U/FeG9DN4cezaRa2lUAJzQp5 DPGSdnQAdvulUmWWRJqE4XEJsLukZ96JHq187/WlNuzfX8Kd2hMb6zp4RDnW9WRE wsbgffGseP4bvqbNr3VLJ+u54shQtEjSYqd7l5vYiKRVgh5O0FVdzn91PpxBRFJu brfcUlZInj6f2tXDP9uu8Fdl2IbmUxXYwrrHCiG7CG6sx74AGW2tp5ZkwYJzUf9p ivRkZOK1X1Uop9yKy6Udc+HxTw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:31 2025 by rpki-client