This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer File: 526yVsD8sH4pB5eDQ-mtndIf4gY.cer (raw, json) Hash identifier: iik8A8Jyhe3Y8jF2ACjgyCIpwrGi6qaq80zzu9q94+g= Subject key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D0E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft caRepository: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 09 Dec 2025 14:41:40 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 38616 AS: 38710 AS: 55414 IP: 103.246.108.0/22 IP: 111.88.0.0/17 IP: 111.88.132.0/23 IP: 111.88.136.0/22 IP: 111.88.164.0 -- 111.88.171.255 IP: 111.88.184.0/21 IP: 111.88.212.0 -- 111.88.239.255 IP: 115.186.0.0/17 IP: 117.102.0.0/18 IP: 203.81.224.0/20 IP: 2406:7000::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163086 (0x27d0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 9 14:41:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:c3:78:7c:1c:62:55:e2:dc:96:33:ef:d3: ef:37:71:9f:7b:68:89:bb:f0:35:40:a8:1b:3c:6b: e9:ce:69:bd:57:a3:35:40:b1:af:bd:74:c0:a1:e9: 8b:13:d8:e2:f8:28:12:94:a4:54:c3:5a:7a:7d:ae: 12:79:c7:94:ee:d7:58:41:60:1a:60:36:bf:a5:0d: e3:2c:e5:99:6a:17:36:28:a6:d9:db:b1:83:fc:0d: 90:6c:ac:5f:e7:b5:a3:35:10:ab:f8:2f:a2:14:df: 71:d2:a6:7c:96:6e:40:04:c9:69:78:e1:07:61:14: f0:14:b0:d6:8d:33:6a:46:0e:4b:03:3f:95:ff:45: c0:dc:9c:5b:0b:d6:18:0c:ee:d9:fc:5f:12:40:f9: 45:5c:46:8e:7a:a8:3a:5c:4b:66:da:3f:ae:e8:0f: 33:a6:66:b1:03:73:42:ec:6f:e2:40:0e:54:37:54: 30:55:2f:6a:1d:95:fe:df:5b:a6:8d:58:16:9f:b1: 01:1c:4c:db:dc:a7:61:3d:49:04:f5:ff:1b:17:02: 76:6a:69:d0:cb:b8:3b:1b:84:b6:52:4f:e4:bc:1c: ff:28:39:7d:db:d3:0b:7c:5c:29:f4:c0:8a:96:ae: cc:7b:30:4e:7b:a4:e7:9f:9a:f6:bb:54:af:aa:dd: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38616 38710 55414 sbgp-ipAddrBlock: critical IPv4: 103.246.108.0/22 111.88.0.0/17 111.88.132.0/23 111.88.136.0/22 111.88.164.0-111.88.171.255 111.88.184.0/21 111.88.212.0-111.88.239.255 115.186.0.0/17 117.102.0.0/18 203.81.224.0/20 IPv6: 2406:7000::/32 Signature Algorithm: sha256WithRSAEncryption 2e:d8:a8:35:73:68:af:89:ec:62:25:50:82:2c:c4:22:e6:f1: 8e:d1:8c:9a:60:02:a4:80:ed:20:e3:6f:ee:f7:1c:01:2e:e1: 61:71:46:c7:02:b3:34:a1:89:eb:58:64:73:09:3d:32:e8:9f: 83:37:47:95:2b:0a:40:90:29:d3:f7:ce:34:9c:07:1c:2d:3e: 94:c6:59:e7:cd:01:70:e3:eb:7a:cd:c2:5e:07:af:74:cc:e3: 90:87:9f:0c:cb:8b:fc:34:ed:00:4c:97:94:36:73:a9:db:e6: 15:10:64:28:42:ba:78:1e:b6:9a:8f:f5:42:8e:b8:a6:52:db: 9d:60:26:cf:e4:66:10:9e:91:58:94:0e:4a:80:01:a6:52:2f: 32:a5:60:d0:a4:57:d2:45:c5:6a:27:34:f2:3e:62:95:6d:cd: bb:10:6d:90:18:55:4e:25:a8:d1:b3:bf:72:fe:d4:a8:bd:8e: 89:45:04:0f:73:5b:61:ec:86:16:71:29:4a:d0:6e:68:2b:82: d5:06:8d:90:5a:9a:95:b5:81:b7:9c:0b:b5:f7:64:5a:d0:a3: 7a:64:dc:8f:23:0f:b9:29:df:58:88:9f:ef:9a:2a:0a:5e:d4: 9f:84:2d:e2:bb:f9:b3:6e:fc:55:9f:d3:e5:ad:3d:b4:0d:b0: c1:72:c0:1e -----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgIDAn0OMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwOTE0NDE0MFoXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4 MzQzRTlBRDlERDIxRkUyMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQIMN4fBxiVeLcljPv0+83cZ97aIm78DVAqBs8a+nOab1XozVAsa+9dMCh6YsT 2OL4KBKUpFTDWnp9rhJ5x5Tu11hBYBpgNr+lDeMs5ZlqFzYoptnbsYP8DZBsrF/n taM1EKv4L6IU33HSpnyWbkAEyWl44QdhFPAUsNaNM2pGDksDP5X/RcDcnFsL1hgM 7tn8XxJA+UVcRo56qDpcS2baP67oDzOmZrEDc0Lsb+JADlQ3VDBVL2odlf7fW6aN WBafsQEcTNvcp2E9SQT1/xsXAnZqadDLuDsbhLZST+S8HP8oOX3b0wt8XCn0wIqW rsx7ME57pOefmva7VK+q3RVXAgMBAAGjggNuMIIDajAdBgNVHQ4EFgQU526yVsD8 sH4pB5eDQ+mtndIf4gYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZDODNCL0U0RTEwQjRBMUQ4ODExRTJBMDEyQ0JFMTA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2QzgzQi9FNEUxMEI0QTFEODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNE OHNINHBCNWVEUS1tdG5kSWY0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAJbYAgMAlzYCAwDYdjB0BggrBgEFBQcBBwEB/wRlMGMwUgQCAAEwTAME Amf2bAMEB29YAAMEAW9YhAMEAm9YiDAMAwQCb1ikAwQCb1ioAwQDb1i4MAwDBAJv WNQDBARvWOADBAdzugADBAZ1ZgADBATLUeAwDQQCAAIwBwMFACQGcAAwDQYJKoZI hvcNAQELBQADggEBAC7YqDVzaK+J7GIlUIIsxCLm8Y7RjJpgAqSA7SDjb+73HAEu 4WFxRscCszShietYZHMJPTLon4M3R5UrCkCQKdP3zjScBxwtPpTGWefNAXDj63rN wl4Hr3TM45CHnwzLi/w07QBMl5Q2c6nb5hUQZChCungetpqP9UKOuKZS251gJs/k ZhCekViUDkqAAaZSLzKlYNCkV9JFxWonNPI+YpVtzbsQbZAYVU4lqNGzv3L+1Ki9 jolFBA9zW2HshhZxKUrQbmgrgtUGjZBampW1gbecC7X3ZFrQo3pk3I8jD7kp31iI n++aKgpe1J+ELeK7+bNu/FWf0+WtPbQNsMFywB4= -----END CERTIFICATE-----Generated at Fri Dec 19 12:05:37 2025 by rpki-client