This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LIDs03q4KEdAVCjDvK0opkdepg.cer File: 7LIDs03q4KEdAVCjDvK0opkdepg.cer (raw, json) Hash identifier: MGF5KmbxrDDG2tOKwvqdCrudIWwalzmufvYJr5NSUzs= Subject key identifier: EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F62 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft caRepository: rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 04:17:06 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 203.23.45.0/24 IP: 203.26.42.0/23 IP: 203.26.147.0/24 IP: 2001:df0:73::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163682 (0x27f62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 19 04:17:06 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9189529, serialNumber=ECB203B34DEAE0A11D0150A30EF2B4A2991D7A98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4f:a6:28:8a:95:0c:71:62:40:25:33:12:1b: 2e:13:65:e9:b9:3b:e3:d0:17:3a:e1:0f:b7:21:30: 68:02:31:4f:b5:f4:48:72:56:ec:df:f7:f1:3c:11: a3:5b:da:40:88:ee:78:85:54:49:0c:45:c7:81:e6: de:2f:c2:46:1f:36:29:e2:4d:19:e7:7d:0d:b2:e3: 2a:21:44:0b:8f:27:b8:d2:8c:a4:ba:d8:60:6a:e3: ef:bd:58:27:c1:52:e5:9a:24:8c:c3:24:dc:39:a8: 04:0d:5a:55:75:89:e8:0f:a6:40:07:bd:87:26:40: d9:f4:7f:da:2b:ce:13:ac:4e:db:10:80:42:55:2f: 6d:9c:8e:f4:4c:76:94:5d:77:51:7d:31:76:6b:81: 12:c9:91:8e:99:94:87:df:1f:df:cf:bf:6e:7e:0b: bd:08:56:5d:2b:e6:41:82:5f:92:a4:0d:24:11:32: 90:76:6e:54:d3:d6:fe:87:5f:3a:c3:51:f0:74:97: f3:cc:4c:28:7a:6f:a3:a0:94:8c:99:c2:52:13:fa: 21:61:c0:bc:92:19:9c:f6:2c:70:ef:e1:3e:a5:a0: 9f:d1:b6:5f:d6:6c:8a:40:5e:7f:1d:80:aa:69:c3: 59:e3:24:98:cd:e2:90:26:b9:0f:c1:1b:6a:7a:d6: 1d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B2:03:B3:4D:EA:E0:A1:1D:01:50:A3:0E:F2:B4:A2:99:1D:7A:98 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9189529/6929F2C25BBE11E78977E023C4F9AE02/7LIDs03q4KEdAVCjDvK0opkdepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.23.45.0/24 203.26.42.0/23 203.26.147.0/24 IPv6: 2001:df0:73::/48 Signature Algorithm: sha256WithRSAEncryption a8:a7:20:9c:be:e3:ed:dd:f1:2e:ef:c7:eb:66:14:5c:2f:f5: 0f:89:ce:6c:42:ba:e0:df:92:c9:3d:e7:1d:98:af:a8:a5:04: 32:71:93:48:c5:12:e4:c7:0c:42:94:8b:a3:29:3d:d3:76:da: 18:23:ca:db:8f:d1:73:45:2c:75:aa:c4:a9:c4:00:e7:64:fd: d0:3b:02:c1:2f:dd:ec:f0:7f:ee:b6:11:c3:ae:28:fe:d7:4f: f3:25:33:f4:a3:0e:4c:ef:2e:bf:31:a0:fc:62:7b:ae:38:c0: b9:94:4d:34:07:5f:d6:97:99:52:1d:25:2d:48:c7:e3:1c:0a: 42:7c:8f:4b:e2:d4:be:8c:91:6d:5d:b4:68:d9:94:5c:ec:02: 7f:60:12:33:79:a5:75:1c:f9:a7:da:e0:fe:d4:ce:86:92:81: b1:c3:c0:3c:a0:32:f2:c0:13:bf:cb:77:97:df:cf:ea:8c:b6: 66:52:90:0d:64:12:89:fb:da:17:04:69:de:82:74:e7:d4:c5: 7e:34:6a:89:02:86:7c:2e:90:d2:1d:14:08:d5:12:7d:64:3a: 4a:14:74:51:db:9b:a2:0b:93:27:0a:5a:83:f1:fa:7f:ed:5a: b7:b4:9c:f8:e8:88:1f:00:71:00:23:e2:c2:4a:f1:d0:5e:5e: 57:79:a9:b0 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAn9iMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxOTA0MTcwNloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxODk1MjkxMTAvBgNVBAUTKEVDQjIwM0IzNERFQUUwQTExRDAxNTBB MzBFRjJCNEEyOTkxRDdBOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUT6YoipUMcWJAJTMSGy4TZem5O+PQFzrhD7chMGgCMU+19EhyVuzf9/E8EaNb 2kCI7niFVEkMRceB5t4vwkYfNiniTRnnfQ2y4yohRAuPJ7jSjKS62GBq4++9WCfB UuWaJIzDJNw5qAQNWlV1iegPpkAHvYcmQNn0f9orzhOsTtsQgEJVL22cjvRMdpRd d1F9MXZrgRLJkY6ZlIffH9/Pv25+C70IVl0r5kGCX5KkDSQRMpB2blTT1v6HXzrD UfB0l/PMTCh6b6OglIyZwlIT+iFhwLySGZz2LHDv4T6loJ/Rtl/WbIpAXn8dgKpp w1njJJjN4pAmuQ/BG2p61h1HAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQU7LIDs03q 4KEdAVCjDvK0opkdepgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg5NTI5LzY5MjlGMkMyNUJCRTExRTc4OTc3RTAyM0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4OTUyOS82OTI5RjJDMjVCQkUxMUU3ODk3N0UwMjNDNEY5QUUwMi83TElEczAz cTRLRWRBVkNqRHZLMG9wa2RlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8ELTAr MBgEAgABMBIDBADLFy0DBAHLGioDBADLGpMwDwQCAAIwCQMHACABDfAAczANBgkq hkiG9w0BAQsFAAOCAQEAqKcgnL7j7d3xLu/H62YUXC/1D4nObEK64N+SyT3nHZiv qKUEMnGTSMUS5McMQpSLoyk903baGCPK24/Rc0UsdarEqcQA52T90DsCwS/d7PB/ 7rYRw64o/tdP8yUz9KMOTO8uvzGg/GJ7rjjAuZRNNAdf1peZUh0lLUjH4xwKQnyP S+LUvoyRbV20aNmUXOwCf2ASM3mldRz5p9rg/tTOhpKBscPAPKAy8sATv8t3l9/P 6oy2ZlKQDWQSifvaFwRp3oJ059TFfjRqiQKGfC6Q0h0UCNUSfWQ6ShR0UduboguT Jwpag/H6f+1at7Sc+OiIHwBxACPiwkrx0F5eV3mpsA== -----END CERTIFICATE-----Generated at Fri Dec 19 17:31:59 2025 by rpki-client