This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer File: qvquPFcDs5M3_T16lmbFjLjDtQk.cer (raw, json) Hash identifier: EW+4GtqZuRZmz/6P7EciAaXI3KylhDlYohepjAR20JY= Subject key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A9B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft caRepository: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 12:24:19 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 9728 AS: 37997 AS: 45182 AS: 45512 AS: 45960 IP: 14.1.128.0/17 IP: 103.1.68.0/22 IP: 103.224.196.0/22 IP: 103.229.56.0/22 IP: 124.195.128.0/20 IP: 163.47.192.0/22 IP: 183.78.0.0/17 IP: 202.56.80.0/20 IP: 203.158.24.0/21 IP: 2402:b400::/32 IP: 2406:6000::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162459 (0x27a9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 12:24:19 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:81:7f:53:1a:9c:0d:fb:76:2e:73:68:70:bd: 3e:8f:45:28:c0:a2:3e:96:79:48:a1:5a:73:4e:b4: 51:2b:0e:13:76:85:98:27:29:6d:49:38:ec:00:a1: b9:1c:76:a8:c4:1d:ab:17:33:de:f4:ec:72:3e:18: 4f:a2:5c:b8:39:27:44:04:37:c2:ae:ae:b5:7d:cd: 4f:cc:94:78:45:ed:4f:c8:17:e2:36:a0:8c:55:42: dc:c5:47:f2:c9:76:7a:4e:c7:bc:96:dc:7d:89:c8: 26:03:c0:6b:12:e6:78:fd:08:ca:9b:db:cd:b6:94: a9:0f:4e:d3:00:b3:59:56:e0:62:d5:96:fd:5a:a6: 8c:9f:9e:12:2f:d2:1e:59:c7:64:ba:05:c6:4a:be: 03:1b:04:64:df:ab:27:d5:15:b5:19:a5:ef:23:40: 8d:8c:52:80:00:48:91:a2:3b:39:f0:71:75:f6:f4: 3c:aa:01:b4:7b:2b:35:c6:76:a3:e1:0e:08:22:ca: 93:a7:fe:13:e0:90:71:2e:5f:81:73:76:6f:ec:1a: c8:de:e7:70:0d:7b:44:91:50:30:6e:83:d3:b1:a2: 67:73:78:a5:23:3a:53:0b:39:ef:bc:b0:4f:88:11: a6:3a:7d:2d:5d:78:3f:11:40:84:2a:dd:a7:6a:cf: 08:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9728 37997 45182 45512 45960 sbgp-ipAddrBlock: critical IPv4: 14.1.128.0/17 103.1.68.0/22 103.224.196.0/22 103.229.56.0/22 124.195.128.0/20 163.47.192.0/22 183.78.0.0/17 202.56.80.0/20 203.158.24.0/21 IPv6: 2402:b400::/32 2406:6000::/32 Signature Algorithm: sha256WithRSAEncryption 73:9a:bf:fc:22:d7:fc:5c:b6:87:0f:b4:43:9c:7b:09:8b:6d: 83:fd:6d:e9:dc:42:57:94:1e:0b:3a:d2:22:d8:d4:2d:e2:b2: 6b:12:4e:fa:53:3a:16:a9:17:be:db:f8:90:42:05:75:bb:aa: 92:c4:fb:1a:2a:c7:a1:0f:02:46:a7:1b:c9:18:c7:9a:7d:e6: 37:0c:c6:b9:ac:d7:ec:b8:2f:91:e8:7f:94:a6:d1:76:f6:ad: 7a:93:08:fd:b3:9f:24:fc:c5:62:9f:3e:c4:39:84:0c:41:26: 01:a3:0e:29:55:7f:47:de:6e:06:e6:7f:85:79:f6:26:96:01: 44:a4:5f:71:51:9b:8c:2b:e8:5f:3a:78:59:d9:34:92:07:75: 96:c7:80:b3:89:23:14:5b:a6:db:9b:76:da:ff:42:21:8e:c3: b1:a3:68:be:2f:d5:84:b8:82:59:c5:e0:aa:23:c0:0d:63:0d: 11:f8:25:fe:a1:21:f2:10:e7:5a:01:e0:df:3b:23:69:c2:9b: df:60:61:34:29:0a:e9:db:ee:e5:f9:91:78:9d:0f:4c:c5:36: eb:a1:8f:50:80:71:e4:12:66:be:b1:2d:10:d3:02:b9:ad:dc: 46:e0:63:4d:ad:89:18:67:51:39:c3:8e:c1:84:05:a3:4b:82: 6f:a2:e2:76 -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgIDAnqbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjEyMjQxOVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMTczOTQxMTAvBgNVBAUTKEFBRkFBRTNDNTcwM0IzOTMzN0ZEM0Q3 QTk2NjZDNThDQjhDM0I1MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXgX9TGpwN+3Yuc2hwvT6PRSjAoj6WeUihWnNOtFErDhN2hZgnKW1JOOwAobkc dqjEHasXM9707HI+GE+iXLg5J0QEN8KurrV9zU/MlHhF7U/IF+I2oIxVQtzFR/LJ dnpOx7yW3H2JyCYDwGsS5nj9CMqb2822lKkPTtMAs1lW4GLVlv1apoyfnhIv0h5Z x2S6BcZKvgMbBGTfqyfVFbUZpe8jQI2MUoAASJGiOznwcXX29DyqAbR7KzXGdqPh DggiypOn/hPgkHEuX4Fzdm/sGsje53ANe0SRUDBug9OxomdzeKUjOlMLOe+8sE+I EaY6fS1deD8RQIQq3adqzwj5AgMBAAGjggNoMIIDZDAdBgNVHQ4EFgQUqvquPFcD s5M3/T16lmbFjLjDtQkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE3Mzk0LzRGNTkxODZBMUQ2RjExRTI5QjU0NDZCMTA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExNzM5NC80RjU5MTg2QTFENkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZj RHM1TTNfVDE2bG1iRmpMakR0UWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQgBAf8EHjAc oBowGAICJgACAwCUbQIDALB+AgMAscgCAwCziDBlBggrBgEFBQcBBwEB/wRWMFQw PAQCAAEwNgMEBw4BgAMEAmcBRAMEAmfgxAMEAmflOAMEBHzDgAMEAqMvwAMEB7dO AAMEBMo4UAMEA8ueGDAUBAIAAjAOAwUAJAK0AAMFACQGYAAwDQYJKoZIhvcNAQEL BQADggEBAHOav/wi1/xctocPtEOcewmLbYP9bencQleUHgs60iLY1C3ismsSTvpT OhapF77b+JBCBXW7qpLE+xoqx6EPAkanG8kYx5p95jcMxrms1+y4L5Hof5Sm0Xb2 rXqTCP2znyT8xWKfPsQ5hAxBJgGjDilVf0febgbmf4V59iaWAUSkX3FRm4wr6F86 eFnZNJIHdZbHgLOJIxRbptubdtr/QiGOw7GjaL4v1YS4glnF4KojwA1jDRH4Jf6h IfIQ51oB4N87I2nCm99gYTQpCunb7uX5kXidD0zFNuuhj1CAceQSZr6xLRDTArmt 3EbgY02tiRhnUTnDjsGEBaNLgm+i4nY= -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:15 2025 by rpki-client