This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer File: u6vT8W4QD9nJXUdIhOTanLb6do0.cer (raw, json) Hash identifier: MfpkLnn8zv7Nee8XwVVbUyPbMKumK/ucfG/j8I9WksI= Subject key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0274D8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 13 Nov 2025 00:21:38 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 103.21.220.0/23 IP: 2400:b820::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160984 (0x274d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 13 00:21:38 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:3f:af:13:9f:54:9b:cd:5a:59:24:75:ff: 09:28:5a:4b:64:e0:f5:42:f4:c0:16:22:2a:f7:b8: d7:fe:74:70:7c:31:00:73:05:36:0c:26:d4:15:f3: 25:98:6f:1a:e5:ba:17:8e:16:d2:19:de:2d:65:73: d4:1e:6d:45:55:fd:cf:d9:b6:98:7e:9f:54:93:78: 5b:15:96:15:18:fc:6e:1f:82:ce:34:74:f1:ea:75: 0c:14:83:5f:4a:73:08:cb:c3:3f:c7:29:05:f7:5f: c9:55:55:01:c6:d4:54:c2:5d:5c:82:b3:32:9f:1b: e5:40:05:e1:90:ef:9d:6d:ff:2a:33:a5:d2:da:e1: 99:02:c4:09:16:37:a5:05:1c:cd:f0:cc:fb:af:ed: d4:47:1a:8c:36:4c:b5:c5:f7:ca:d2:fe:23:cb:7e: 83:7c:2e:65:49:70:67:d4:1e:f6:15:ee:be:96:c8: ac:5f:7b:54:5f:18:6e:31:48:fa:38:01:23:b8:bf: c0:69:e3:63:62:c0:5c:c6:1e:d6:9f:04:69:64:12: 47:94:e5:75:f7:39:c5:3b:cd:65:fd:ff:50:a4:6f: 09:d3:b6:54:6f:dc:3b:39:0b:db:cc:44:8b:36:80: d0:23:5c:20:06:69:49:c7:6e:dc:d0:e3:ff:0c:eb: 83:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.21.220.0/23 IPv6: 2400:b820::/32 Signature Algorithm: sha256WithRSAEncryption c3:f1:eb:2d:e5:ee:d1:5c:73:e8:c3:d7:0c:ac:ff:0e:f4:71: a5:e6:9c:00:d8:62:11:a4:0f:bd:51:ba:fb:f2:18:95:82:76: 55:86:9e:2a:e1:70:8d:f0:40:e6:d2:9b:a8:9a:eb:bc:a3:a2: 88:75:2b:95:b2:0c:d2:c4:b2:88:be:84:bb:c7:9f:60:ee:50: c9:54:39:13:6d:f3:68:98:ad:77:5e:7c:71:db:c8:4c:31:51: ce:45:d4:e0:33:b0:c6:60:04:e4:28:cf:5a:ea:71:5a:46:e0: fb:87:ce:e6:6f:07:06:26:6e:24:68:74:8d:e9:0b:57:04:2d: 0c:92:ac:ce:85:7b:1c:7c:cc:c3:96:47:89:2a:83:d2:96:b6: 0d:ec:6c:31:06:d9:95:a0:78:e2:c6:24:26:ad:f8:16:14:17: a9:7d:af:ff:62:8a:c7:11:85:64:f8:0b:35:ec:9d:ad:c4:4c: 86:a4:96:ae:a2:7c:d7:6c:ff:61:f4:14:65:68:5f:6d:31:d3: ec:47:db:48:93:fb:df:bf:ae:d3:b8:ab:e9:60:32:62:f8:aa: 95:0e:35:ad:a9:37:2d:62:ed:5e:9c:31:b9:ee:de:b9:78:83: c3:3b:27:4d:5c:1f:02:83:14:ea:99:dc:3a:6f:b7:92:aa:74: 39:ca:ef:69 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIDAnTYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMzAwMjEzOFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxODg2RTMxMTAvBgNVBAUTKEJCQUJEM0YxNkUxMDBGRDlDOTVENDc0 ODg0RTREQTlDQjZGQTc2OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4Wj+vE59Um81aWSR1/wkoWktk4PVC9MAWIir3uNf+dHB8MQBzBTYMJtQV8yWY bxrluheOFtIZ3i1lc9QebUVV/c/Ztph+n1STeFsVlhUY/G4fgs40dPHqdQwUg19K cwjLwz/HKQX3X8lVVQHG1FTCXVyCszKfG+VABeGQ751t/yozpdLa4ZkCxAkWN6UF HM3wzPuv7dRHGow2TLXF98rS/iPLfoN8LmVJcGfUHvYV7r6WyKxfe1RfGG4xSPo4 ASO4v8Bp42NiwFzGHtafBGlkEkeU5XX3OcU7zWX9/1CkbwnTtlRv3Ds5C9vMRIs2 gNAjXCAGaUnHbtzQ4/8M64MvAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUu6vT8W4Q D9nJXUdIhOTanLb6do0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg4NkUzLzEyNDdCODYwNjY5MjExRUQ4MkJFNzEzM0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4ODZFMy8xMjQ3Qjg2MDY2OTIxMUVEODJCRTcxMzNDNEY5QUUwMi91NnZUOFc0 UUQ5bkpYVWRJaE9UYW5MYjZkbzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBAFnFdwwDQQCAAIwBwMFACQAuCAwDQYJKoZIhvcNAQELBQADggEB AMPx6y3l7tFcc+jD1wys/w70caXmnADYYhGkD71RuvvyGJWCdlWGnirhcI3wQObS m6ia67yjooh1K5WyDNLEsoi+hLvHn2DuUMlUORNt82iYrXdefHHbyEwxUc5F1OAz sMZgBOQoz1rqcVpG4PuHzuZvBwYmbiRodI3pC1cELQySrM6Fexx8zMOWR4kqg9KW tg3sbDEG2ZWgeOLGJCat+BYUF6l9r/9iiscRhWT4CzXsna3ETIaklq6ifNds/2H0 FGVoX20x0+xH20iT+9+/rtO4q+lgMmL4qpUONa2pNy1i7V6cMbnu3rl4g8M7J01c HwKDFOqZ3Dpvt5KqdDnK72k= -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:17 2025 by rpki-client