This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer File: slUrOLjFywk1yUD6YJgOpvUQz4Y.cer (raw, json) Hash identifier: 4a7U2u5lGwdhWamZ0uDDd3Rcc/6am1uyK9wbGlbNP0A= Subject key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027826 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 26 Nov 2025 02:42:38 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 134752 IP: 103.4.24.0/22 IP: 202.14.4.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161830 (0x27826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 26 02:42:38 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91F5786, serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:25:0d:44:09:12:74:fd:fd:18:ac:2e:c6:73: 5f:73:b0:9a:c8:51:16:16:45:b0:45:1f:b7:58:af: 99:70:9e:5b:b4:8b:e4:a9:0c:9c:84:91:37:81:10: c2:29:4d:76:cc:a9:f5:4d:80:c6:cb:29:09:b5:24: 03:f6:e5:d4:e9:d8:b3:d8:f2:99:ac:77:7d:03:1b: a3:cc:9a:d6:d0:85:5b:19:0e:78:44:e0:78:d0:c1: ae:51:a7:ff:f9:77:e9:d7:b5:5e:ee:64:7c:00:aa: 7a:8e:14:d0:fe:5c:0d:9c:68:a8:56:89:2d:b7:cd: 0b:d7:1a:ff:58:5e:03:4f:20:93:f2:f4:dd:a0:b8: 0d:d9:a1:b8:2f:00:c5:09:c3:de:25:cd:45:e6:21: 0f:99:ae:b0:25:58:c6:7a:4e:78:56:4b:7b:c7:78: e0:52:e0:b3:f2:c2:b7:d4:6c:97:0f:e9:01:d5:06: b1:fb:a6:1d:77:6c:9d:6e:92:53:89:c1:fc:73:44: 28:f1:76:b4:6f:c1:f9:37:68:9f:20:26:7e:5e:bb: f7:dc:7b:c8:97:41:a5:9c:a0:46:cd:81:25:0c:28: 7c:3c:0d:e4:07:e5:a4:82:3e:70:a8:7e:98:5d:11: 47:51:9f:a9:95:bf:69:1b:a7:dc:63:90:74:f0:98: 52:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134752 sbgp-ipAddrBlock: critical IPv4: 103.4.24.0/22 202.14.4.0/22 Signature Algorithm: sha256WithRSAEncryption 19:f2:60:7d:db:bf:6f:c3:f8:03:bb:5e:ea:16:f7:ea:bc:a6: 9a:2f:d3:dd:76:8b:36:18:26:50:b8:de:a3:d9:75:a5:b4:29: e7:6f:72:62:2c:1c:fd:a9:35:b5:c7:f1:44:3b:6f:31:c4:fc: 9d:a4:0b:b6:2a:1f:d9:6f:e6:58:1c:19:21:66:86:71:81:b9: e7:8f:26:2e:be:5d:0a:ed:4a:17:8f:7b:f1:95:78:a3:02:88: 1e:2f:5b:54:30:6e:d5:e4:1e:eb:6c:f8:c5:53:b4:33:da:36: 1d:ca:07:82:2d:6a:de:97:c4:b9:05:67:4a:94:9e:87:77:1c: 7c:29:15:1a:5f:9b:7b:a1:3b:f7:fe:14:76:ad:9f:aa:6f:23: 59:f0:14:e9:90:ef:52:f4:da:35:4b:4e:e6:eb:b5:f7:ab:af: 45:1e:8f:98:de:cc:85:95:db:20:95:c2:0a:5f:af:a6:e2:22: 93:bd:94:08:9a:60:ec:b5:83:54:22:d1:10:fc:72:0b:10:79: c3:28:2d:98:f2:e6:5f:f3:7d:87:e2:21:58:c7:54:2a:4a:62: 83:36:3b:d5:6a:cf:80:8a:2b:7c:ce:f1:04:b0:4a:c0:15:92: e1:06:4c:50:1a:5b:4d:32:7a:5b:21:64:9b:43:f3:a5:bb:62: 42:20:ca:7d -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAngmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNjAyNDIzOFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjU3ODYxMTAvBgNVBAUTKEIyNTUyQjM4QjhDNUNCMDkzNUM5NDBG QTYwOTgwRUE2RjUxMENGODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuJQ1ECRJ0/f0YrC7Gc19zsJrIURYWRbBFH7dYr5lwnlu0i+SpDJyEkTeBEMIp TXbMqfVNgMbLKQm1JAP25dTp2LPY8pmsd30DG6PMmtbQhVsZDnhE4HjQwa5Rp//5 d+nXtV7uZHwAqnqOFND+XA2caKhWiS23zQvXGv9YXgNPIJPy9N2guA3ZobgvAMUJ w94lzUXmIQ+ZrrAlWMZ6TnhWS3vHeOBS4LPywrfUbJcP6QHVBrH7ph13bJ1uklOJ wfxzRCjxdrRvwfk3aJ8gJn5eu/fce8iXQaWcoEbNgSUMKHw8DeQH5aSCPnCofphd EUdRn6mVv2kbp9xjkHTwmFIpAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUslUrOLjF ywk1yUD6YJgOpvUQz4YwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY1Nzg2L0U1NzcxMzgwNUFFMTExRUZCQjVDNTcyREM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGNTc4Ni9FNTc3MTM4MDVBRTExMUVGQkI1QzU3MkRDNEY5QUUwMi9zbFVyT0xq Rnl3azF5VUQ2WUpnT3B2VVF6NFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg5gMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZwQYAwQCyg4E MA0GCSqGSIb3DQEBCwUAA4IBAQAZ8mB9279vw/gDu17qFvfqvKaaL9Pddos2GCZQ uN6j2XWltCnnb3JiLBz9qTW1x/FEO28xxPydpAu2Kh/Zb+ZYHBkhZoZxgbnnjyYu vl0K7UoXj3vxlXijAogeL1tUMG7V5B7rbPjFU7Qz2jYdygeCLWrel8S5BWdKlJ6H dxx8KRUaX5t7oTv3/hR2rZ+qbyNZ8BTpkO9S9No1S07m67X3q69FHo+Y3syFldsg lcIKX6+m4iKTvZQImmDstYNUItEQ/HILEHnDKC2Y8uZf832H4iFYx1QqSmKDNjvV as+Aiit8zvEEsErAFZLhBkxQGltNMnpbIWSbQ/Olu2JCIMp9 -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:34 2025 by rpki-client