This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer File: rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer (raw, json) Hash identifier: QV+hBgnhVnt5kBveOLFxeo4sCBVm1uCJn3KDHwtFr+s= Subject key identifier: AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0278C9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft caRepository: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 17:54:29 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 103.175.92.0/23 IP: 2001:df7:ef80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161993 (0x278c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 27 17:54:29 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A919F55C, serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7c:94:35:9d:bd:df:f8:5f:c7:0f:cf:55:51: 3c:df:1a:15:d6:da:70:c6:34:90:b9:9e:30:a1:19: cb:ec:95:91:a6:cc:a0:83:4b:1c:a7:f9:fc:1f:b2: b8:dd:4f:2c:6f:50:c6:38:89:e1:55:75:2f:87:8a: 13:f8:d0:65:db:4c:c2:e3:5e:60:39:91:bc:be:29: a4:99:a0:f0:d1:8b:8b:c6:5c:32:e9:97:d2:d5:fe: d4:43:e7:c7:a9:f3:d3:2a:7b:97:a4:26:3a:26:a6: c8:78:78:e4:ac:0f:e9:0d:2d:81:69:47:0e:ec:f0: f4:71:dd:22:02:2f:25:c2:b9:57:ec:cc:62:1c:0a: 38:be:3d:87:cc:db:10:69:50:4f:98:4a:e6:c9:68: e5:b0:f8:55:f1:8a:d9:52:d0:b7:29:2b:fe:5b:65: 9c:90:09:f0:72:1d:e6:89:0d:01:0c:e7:77:d2:08: f8:c0:4e:01:3a:4f:56:39:52:09:bb:09:c3:78:b5: 6c:72:5f:26:1e:53:a5:ef:44:c6:73:f9:e8:9e:55: 9f:b2:ad:54:87:41:7e:a8:46:47:c5:bc:c0:8d:01: f6:60:98:b5:cd:65:5a:7b:dc:b4:2c:be:1f:64:bd: 0b:53:2a:be:a9:ea:5c:82:c2:f5:34:94:8f:2f:9f: db:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.92.0/23 IPv6: 2001:df7:ef80::/48 Signature Algorithm: sha256WithRSAEncryption 1b:36:7b:f3:23:67:f9:57:88:7f:a0:0b:31:30:64:d5:23:1c: 4e:85:7b:7e:01:fc:46:e2:13:ab:8e:e6:bd:86:a9:f1:28:e5: a5:31:ca:3e:6c:3b:0a:be:d9:0c:5b:52:5c:ce:aa:20:2c:4d: 78:13:37:3e:8d:f8:94:63:7e:bb:3c:d6:85:0f:f8:7b:95:bd: f8:a2:e9:00:a6:a3:ec:5b:0b:9f:7a:ff:e5:46:84:d9:bd:e1: fe:12:ad:98:be:aa:53:5b:da:c6:35:9e:f9:77:be:13:75:fd: d6:cf:99:e7:24:5f:e5:f3:4a:6a:06:7a:fb:ac:94:9d:58:c1: ab:16:7d:65:e6:dd:6e:79:d7:6c:df:ca:5f:b2:2e:b6:a7:2d: a7:d9:85:72:25:8f:29:62:ca:c1:c0:c4:d2:fd:e3:b4:04:f7: 76:71:b5:4f:3d:bb:ec:19:34:f1:74:e6:44:a6:6f:21:07:a9: f0:48:de:9d:c0:bf:dc:f7:57:5a:7d:cd:0b:30:f2:83:15:f7: f3:e2:ae:b4:17:3b:e3:08:9b:37:c9:36:62:4c:55:bc:f0:d5: 4f:45:44:60:c7:6a:60:33:66:8a:56:2f:5e:c4:88:60:c7:45: 37:fa:4a:bf:6d:29:04:3b:76:ef:d2:97:d7:16:2b:c5:06:b0: 24:48:e5:10 -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIDAnjJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNzE3NTQyOVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOUY1NUMxMTAvBgNVBAUTKEFEMDZEQkNDNTMzNEM2RDc1MTM3MkZC MTc5NTRGNEFBQUREQzlDM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhfJQ1nb3f+F/HD89VUTzfGhXW2nDGNJC5njChGcvslZGmzKCDSxyn+fwfsrjd TyxvUMY4ieFVdS+HihP40GXbTMLjXmA5kby+KaSZoPDRi4vGXDLpl9LV/tRD58ep 89Mqe5ekJjompsh4eOSsD+kNLYFpRw7s8PRx3SICLyXCuVfszGIcCji+PYfM2xBp UE+YSubJaOWw+FXxitlS0LcpK/5bZZyQCfByHeaJDQEM53fSCPjATgE6T1Y5Ugm7 CcN4tWxyXyYeU6XvRMZz+eieVZ+yrVSHQX6oRkfFvMCNAfZgmLXNZVp73LQsvh9k vQtTKr6p6lyCwvU0lI8vn9uLAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUrQbbzFM0 xtdRNy+xeVT0qq3cnD8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlGNTVDLzlGMTlGOTZFMzcwRjExRUNCRUI3MkE0MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5RjU1Qy85RjE5Rjk2RTM3MEYxMUVDQkVCNzJBNDJDNEY5QUUwMi9yUWJiekZN MHh0ZFJOeS14ZVZUMHFxM2NuRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf MAwEAgABMAYDBAFnr1wwDwQCAAIwCQMHACABDffvgDANBgkqhkiG9w0BAQsFAAOC AQEAGzZ78yNn+VeIf6ALMTBk1SMcToV7fgH8RuITq47mvYap8SjlpTHKPmw7Cr7Z DFtSXM6qICxNeBM3Po34lGN+uzzWhQ/4e5W9+KLpAKaj7FsLn3r/5UaE2b3h/hKt mL6qU1vaxjWe+Xe+E3X91s+Z5yRf5fNKagZ6+6yUnVjBqxZ9ZebdbnnXbN/KX7Iu tqctp9mFciWPKWLKwcDE0v3jtAT3dnG1Tz277Bk08XTmRKZvIQep8EjencC/3PdX Wn3NCzDygxX38+KutBc74wibN8k2YkxVvPDVT0VEYMdqYDNmilYvXsSIYMdFN/pK v20pBDt279KX1xYrxQawJEjlEA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:24:22 2025 by rpki-client