This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer File: y7Nb36Nai-snCaTbsy49IWLsH6g.cer (raw, json) Hash identifier: fO29ckPXiUMiTnvcT4vLACyszCVZRChyquku4A7ru2s= Subject key identifier: CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0277B6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft caRepository: rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 04:57:20 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 59246 IP: 203.0.103.0/24 IP: 203.12.84.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161718 (0x277b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 04:57:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A919130F, serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:34:fa:68:be:a2:e4:2b:2c:d3:87:8e:4a: 96:2e:95:a9:90:dd:46:45:94:8c:5c:65:d8:b0:6d: 5c:81:15:3d:75:cc:6d:b8:c9:d1:93:ec:45:ad:b7: 80:2c:ba:f7:87:19:fe:6c:62:73:81:be:c7:32:ba: bc:bc:71:bc:00:94:59:f9:a4:a0:ed:48:6a:ee:19: e4:32:c9:36:67:44:d0:23:b6:9d:b2:40:4f:f0:57: 26:58:81:98:63:b9:d2:b8:d2:f3:ea:6b:65:67:1c: e0:6d:6d:e2:7f:8c:9b:e4:76:97:03:46:6e:39:86: 01:ff:78:b3:12:3a:4f:dc:30:22:2a:3d:dd:00:77: 08:85:5c:0d:93:14:ff:25:2b:5b:e2:66:56:30:dd: 5b:ee:b8:cd:16:e0:12:b4:53:05:60:25:cc:e3:f6: 7c:03:6d:2e:a1:b1:0c:f2:f1:86:2a:7a:b1:e8:86: 8b:02:9b:ee:3d:8a:2b:d4:e2:46:f9:fb:2e:06:df: ae:48:8e:89:1e:2d:f0:5f:ce:6c:c4:5f:7e:0d:f4: d7:f7:24:17:9a:de:dc:ec:5e:9a:81:13:f4:0d:b3: aa:4d:ae:f5:51:ce:ab:3e:9e:8d:41:be:8d:15:23: 3c:1b:cf:4e:00:3e:ec:4b:59:d6:2d:d1:4b:1c:9d: 61:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59246 sbgp-ipAddrBlock: critical IPv4: 203.0.103.0/24 203.12.84.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:21:50:41:27:81:59:f2:0b:c0:57:f2:e1:09:b7:26:f8:90: 7b:23:b7:41:5a:0f:ff:50:ac:3d:44:23:84:13:b3:99:eb:06: 5c:40:65:8c:f9:b9:b9:bb:fc:c8:ab:09:4b:4f:1f:e6:df:1b: 49:43:f8:65:dc:7f:00:59:42:77:d8:ba:f6:64:02:e7:8c:03: 3f:4d:07:f2:ef:fe:a8:ec:17:b5:71:22:99:6b:fd:90:c2:9c: 93:07:97:67:88:9e:da:b9:c9:93:15:4b:b6:0f:32:3e:d9:51: 54:fa:4a:08:c5:f0:47:3c:37:d8:1b:de:6f:29:25:db:ff:91: 87:fd:e1:42:02:c2:5d:1b:45:06:96:e8:71:00:28:1e:33:67: c3:5c:85:a0:cd:ac:9b:5d:b2:90:33:99:ed:44:26:fe:7d:a0: c9:b8:fc:81:1d:93:b0:79:91:88:04:46:4a:0c:97:50:23:f2: 33:de:c1:c9:3e:ba:d2:b5:3e:b1:c1:24:86:55:66:ec:42:da: 19:c8:79:47:c3:ee:04:0e:ad:08:41:ae:fa:f2:6e:64:c7:39: 89:d0:67:d4:d2:bb:f3:3b:a2:66:61:c0:63:d5:62:c4:70:94: 08:db:37:3d:21:f5:53:97:b8:a3:34:fc:14:7f:fd:2d:a0:8d: 45:9b:b8:dd -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAne2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTA0NTcyMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTEzMEYxMTAvBgNVBAUTKENCQjM1QkRGQTM1QThCRUIyNzA5QTRE QkIzMkUzRDIxNjJFQzFGQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWMTT6aL6i5Css04eOSpYulamQ3UZFlIxcZdiwbVyBFT11zG24ydGT7EWtt4As uveHGf5sYnOBvscyury8cbwAlFn5pKDtSGruGeQyyTZnRNAjtp2yQE/wVyZYgZhj udK40vPqa2VnHOBtbeJ/jJvkdpcDRm45hgH/eLMSOk/cMCIqPd0AdwiFXA2TFP8l K1viZlYw3VvuuM0W4BK0UwVgJczj9nwDbS6hsQzy8YYqerHohosCm+49iivU4kb5 +y4G365IjokeLfBfzmzEX34N9Nf3JBea3tzsXpqBE/QNs6pNrvVRzqs+no1Bvo0V Izwbz04APuxLWdYt0UscnWFVAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUy7Nb36Na i+snCaTbsy49IWLsH6gwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTkxMzBGLzcyRTJDNDI0MkE0MTExRjA4MzIxOTM0Q0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5MTMwRi83MkUyQzQyNDJBNDExMUYwODMyMTkzNENDNEY5QUUwMi95N05iMzZO YWktc25DYVRic3k0OUlXTHNINmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAOduMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAywBnAwQBywxU MA0GCSqGSIb3DQEBCwUAA4IBAQA7IVBBJ4FZ8gvAV/LhCbcm+JB7I7dBWg//UKw9 RCOEE7OZ6wZcQGWM+bm5u/zIqwlLTx/m3xtJQ/hl3H8AWUJ32Lr2ZALnjAM/TQfy 7/6o7Be1cSKZa/2QwpyTB5dniJ7aucmTFUu2DzI+2VFU+koIxfBHPDfYG95vKSXb /5GH/eFCAsJdG0UGluhxACgeM2fDXIWgzaybXbKQM5ntRCb+faDJuPyBHZOweZGI BEZKDJdQI/Iz3sHJPrrStT6xwSSGVWbsQtoZyHlHw+4EDq0IQa768m5kxzmJ0GfU 0rvzO6JmYcBj1WLEcJQI2zc9IfVTl7ijNPwUf/0toI1Fm7jd -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:20 2025 by rpki-client