This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer File: yq3LrMUbKkZS3XMHTygsM00BAnc.cer (raw, json) Hash identifier: 2pXyAXBmJF5miFul3uNOJrBvc7XgSPY5Qid/lhWkaIU= Subject key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02786A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 26 Nov 2025 19:03:29 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 103.144.142.0/24 IP: 2001:df1:c580::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161898 (0x2786a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 26 19:03:29 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1c:79:72:78:6e:4f:a8:82:2f:8e:bc:f7:93: a1:df:14:b4:30:7e:32:af:45:1a:e3:66:aa:8d:19: 9e:f2:0e:75:05:62:14:a1:f5:b0:b5:e6:f4:d7:3d: f3:40:b6:a4:41:8b:a1:f5:f3:e8:8f:18:ec:17:5a: 9d:ef:99:a2:95:dc:e9:b6:17:08:49:88:16:8c:10: 6d:3e:b0:9a:78:c3:1d:a6:ad:f8:bb:40:a0:1c:4e: e3:e6:0c:45:ca:c9:5b:20:1a:ac:c0:27:59:67:30: 64:2d:70:03:68:07:aa:cb:e8:77:37:07:62:c0:ad: 90:ff:d6:95:1f:e6:00:70:39:17:79:f1:01:50:b7: 58:31:20:4d:93:65:27:40:86:f8:be:2c:60:7c:48: 80:e6:1f:ec:0b:e1:db:48:65:6b:da:f1:2b:60:f4: ac:de:b8:b3:cc:fa:80:5d:35:03:1c:41:dd:a3:b5: 3d:28:d2:6e:0b:d7:cd:ed:16:71:8e:f8:b1:2d:10: 98:2b:07:ea:56:35:6c:b4:7d:a3:dc:4e:6b:e2:57: bc:39:c5:4c:bb:dd:ed:cb:19:29:25:94:35:84:68: dd:3c:a4:06:fa:62:0b:4b:50:d8:b9:71:08:81:86: 8c:1d:95:5c:f5:26:53:c7:a5:e7:98:0a:7f:63:d0: 1a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.142.0/24 IPv6: 2001:df1:c580::/48 Signature Algorithm: sha256WithRSAEncryption 07:09:b7:ac:5e:2f:33:45:66:11:9b:13:cf:54:b9:c5:0c:cc: e7:8f:b0:01:95:3e:24:41:b3:8f:15:38:d6:0f:93:fc:7f:d2: ab:6a:dc:16:aa:75:e0:c3:8d:ef:80:11:be:b2:99:7d:69:a8: a6:14:d4:f9:b9:50:bc:2c:db:48:2b:da:11:0a:df:91:f2:78: 19:f8:ef:1b:3b:27:f6:75:ba:be:66:bf:d8:ee:4d:15:4d:7a: 11:bf:ce:45:70:39:e3:d6:6c:78:3c:d6:04:65:42:72:9d:dd: d7:7e:41:72:ea:12:af:2c:9e:db:eb:8e:67:f9:dc:1b:bf:68: 82:ed:73:72:3d:6f:cd:9d:df:09:85:2b:f7:db:e4:8d:05:ae: 63:6b:01:dd:49:73:54:d7:db:5a:fb:53:a6:19:53:3d:8b:b1: ee:92:40:73:e3:6c:f2:19:63:d4:95:7c:23:9d:fa:36:a2:b5: 53:bc:5b:87:f0:81:00:ae:4b:18:2f:d1:51:57:de:71:ba:f9: ad:d7:a3:ca:5d:f8:7c:b7:9c:97:5e:2a:ff:61:06:4f:3f:76: 0a:69:fa:e2:df:5a:29:de:83:89:5a:7e:64:ab:ad:00:25:b5: eb:f7:98:1a:92:7f:dd:75:e0:ec:ac:41:ba:d0:f4:ae:8d:fc: 1e:cb:87:18 -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIDAnhqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNjE5MDMyOVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRENDQjMxMTAvBgNVBAUTKENBQURDQkFDQzUxQjJBNDY1MkRENzMw NzRGMjgyQzMzNEQwMTAyNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDHHlyeG5PqIIvjrz3k6HfFLQwfjKvRRrjZqqNGZ7yDnUFYhSh9bC15vTXPfNA tqRBi6H18+iPGOwXWp3vmaKV3Om2FwhJiBaMEG0+sJp4wx2mrfi7QKAcTuPmDEXK yVsgGqzAJ1lnMGQtcANoB6rL6Hc3B2LArZD/1pUf5gBwORd58QFQt1gxIE2TZSdA hvi+LGB8SIDmH+wL4dtIZWva8Stg9KzeuLPM+oBdNQMcQd2jtT0o0m4L183tFnGO +LEtEJgrB+pWNWy0faPcTmviV7w5xUy73e3LGSkllDWEaN08pAb6YgtLUNi5cQiB howdlVz1JlPHpeeYCn9j0Bq5AgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUyq3LrMUb KkZS3XMHTygsM00BAncwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURDQ0IzLzQxRkQ2MDE2ODk1QzExRUE4OTBDNjM0M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEQ0NCMy80MUZENjAxNjg5NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1V YktrWlMzWE1IVHlnc00wMEJBbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf MAwEAgABMAYDBABnkI4wDwQCAAIwCQMHACABDfHFgDANBgkqhkiG9w0BAQsFAAOC AQEABwm3rF4vM0VmEZsTz1S5xQzM54+wAZU+JEGzjxU41g+T/H/Sq2rcFqp14MON 74ARvrKZfWmophTU+blQvCzbSCvaEQrfkfJ4GfjvGzsn9nW6vma/2O5NFU16Eb/O RXA549ZseDzWBGVCcp3d135BcuoSryye2+uOZ/ncG79ogu1zcj1vzZ3fCYUr99vk jQWuY2sB3UlzVNfbWvtTphlTPYux7pJAc+Ns8hlj1JV8I536NqK1U7xbh/CBAK5L GC/RUVfecbr5rdejyl34fLecl14q/2EGTz92Cmn64t9aKd6DiVp+ZKutACW16/eY GpJ/3XXg7KxButD0ro38HsuHGA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:11 2025 by rpki-client