This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer File: yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer (raw, json) Hash identifier: OleDgrkrqDwi3tfWWUxKVy3eeFZnW63hHSKmyRhCz+8= Subject key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0273DA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft caRepository: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 07 Nov 2025 14:01:49 +0000 Certificate not after: Wed 30 Sep 2026 00:00:00 +0000 Subordinate resources: IP: 103.212.186.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160730 (0x273da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 7 14:01:49 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:88:c8:de:f3:aa:57:84:50:2d:3d:39:b0: 45:7d:39:6c:ed:a7:b5:ba:95:6c:06:83:9b:eb:da: a3:0f:2f:09:bd:b8:cb:75:f7:24:1b:44:0b:3f:e9: 3e:35:97:fc:36:5e:2f:6c:6e:2e:40:a2:6c:c7:77: ae:c6:3a:b1:cb:5a:a5:89:38:7e:1f:6d:4a:96:d5: e7:5d:40:01:be:0a:52:5d:7f:c0:d1:28:0f:69:22: 0b:aa:d8:32:cf:bb:01:6d:72:12:f9:6e:f5:80:a8: 98:16:46:09:6a:26:b3:6f:01:5f:7b:be:79:a5:2b: fd:27:53:37:d9:1b:fe:b6:ae:28:1a:77:27:48:1e: 90:ca:87:a2:8d:e4:45:ec:f8:37:e1:9d:2f:78:b9: 2b:b2:bf:43:10:75:61:61:b1:16:74:7a:8c:12:b3: f0:0a:42:9d:5c:8c:f8:a1:0a:b0:db:ec:3b:48:50: d5:d9:97:30:72:7e:9d:d9:97:1b:0c:fe:e9:d9:e7: 69:db:48:9f:8f:f0:a3:14:72:ab:b8:32:28:c4:62: 71:bc:b6:b8:bf:78:18:89:46:03:52:ba:8d:c6:f5: 31:46:5b:e9:f4:15:3d:65:3f:32:46:04:39:44:c0: 65:56:d1:f9:1b:9f:02:b3:ab:82:56:8c:2b:6e:da: f4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.186.0/23 Signature Algorithm: sha256WithRSAEncryption 94:0b:21:04:2e:0e:e5:4a:de:54:b7:78:b6:76:fb:e8:3f:3d: ca:98:08:a7:4a:2f:db:ee:20:8d:92:e4:6e:6e:fd:4b:82:6d: 45:cd:ab:22:66:f8:e6:87:cc:a6:ad:55:19:97:9b:67:a0:66: e5:7a:5d:94:0c:ae:67:ec:1f:2a:14:14:b0:0a:f0:4c:0d:80: 6c:55:88:89:4c:c3:a4:c8:ca:6a:35:f0:9c:ac:9c:1d:09:3d: 46:fc:28:19:60:a9:0c:09:0f:0d:2c:8d:67:1e:15:42:97:ac: d5:ee:51:49:dd:81:bd:64:89:a9:da:11:8d:92:05:44:0f:6e: 71:ab:7a:81:a4:1a:d1:0c:92:10:64:9f:bd:c4:c5:38:9e:cd: dc:d8:12:f2:bd:1d:08:5f:8c:e6:75:6c:05:23:07:28:92:b8: 92:6d:e3:04:c0:aa:67:c7:51:cc:e7:46:4c:63:df:09:cd:15: 47:8e:00:dc:83:54:46:c8:69:18:a9:23:f2:da:22:f3:86:ed: 33:4e:97:5d:84:90:e2:da:c6:b8:01:55:93:1c:e6:64:2e:cc: 15:d9:84:9b:07:32:bc:41:d5:b3:90:2d:8c:2f:98:9f:25:df: 8d:c9:91:bc:ad:38:ca:b0:ce:2b:5a:69:f0:77:c0:11:43:64: 41:f9:1d:10 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAnPaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNzE0MDE0OVoXDTI2MDkzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNDdCNEIxMTAvBgNVBAUTKEM4NzdDREYyMkQyNUI2RTMzRkM1RTQ5 NUJFNTVFNTlEMEE5NDk4N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCntYjI3vOqV4RQLT05sEV9OWztp7W6lWwGg5vr2qMPLwm9uMt19yQbRAs/6T41 l/w2Xi9sbi5AomzHd67GOrHLWqWJOH4fbUqW1eddQAG+ClJdf8DRKA9pIguq2DLP uwFtchL5bvWAqJgWRglqJrNvAV97vnmlK/0nUzfZG/62rigadydIHpDKh6KN5EXs +DfhnS94uSuyv0MQdWFhsRZ0eowSs/AKQp1cjPihCrDb7DtIUNXZlzByfp3ZlxsM /unZ52nbSJ+P8KMUcqu4MijEYnG8tri/eBiJRgNSuo3G9TFGW+n0FT1lPzJGBDlE wGVW0fkbnwKzq4JWjCtu2vTNAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUyHfN8i0l tuM/xeSVvlXlnQqUmH4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ3QjRCL0UxNTZBMDRDQ0YzODExRUY4NDg0RTkyRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0N0I0Qi9FMTU2QTA0Q0NGMzgxMUVGODQ4NEU5MkZDNEY5QUUwMi95SGZOOGkw bHR1TV94ZVNWdmxYbG5RcVVtSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAFn1LowDQYJKoZIhvcNAQELBQADggEBAJQLIQQuDuVK3lS3eLZ2 ++g/PcqYCKdKL9vuII2S5G5u/UuCbUXNqyJm+OaHzKatVRmXm2egZuV6XZQMrmfs HyoUFLAK8EwNgGxViIlMw6TIymo18JysnB0JPUb8KBlgqQwJDw0sjWceFUKXrNXu UUndgb1kianaEY2SBUQPbnGreoGkGtEMkhBkn73ExTiezdzYEvK9HQhfjOZ1bAUj ByiSuJJt4wTAqmfHUcznRkxj3wnNFUeOANyDVEbIaRipI/LaIvOG7TNOl12EkOLa xrgBVZMc5mQuzBXZhJsHMrxB1bOQLYwvmJ8l343JkbytOMqwzitaafB3wBFDZEH5 HRA= -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:36 2025 by rpki-client