This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer File: 8RbpEqlQneSy1rPZPLwY9QA24Wg.cer (raw, json) Hash identifier: mjQYR2kLevXsMbziufFtXLVdLHWJKgxo8WA2/vjNoT0= Subject key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02769D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft caRepository: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 20 Nov 2025 14:29:00 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 3662 AS: 7577 AS: 7650 -- 7651 AS: 137207 IP: 43.251.248.0/22 IP: 103.43.28.0/22 IP: 175.159.0.0/16 IP: 202.40.192.0/19 IP: 202.45.32.0/19 IP: 202.75.64.0/19 IP: 202.125.192.0/18 IP: 202.189.96.0/19 IP: 203.188.64.0/18 IP: 2001:ce0::/31 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161437 (0x2769d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 20 14:29:00 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9156D54, serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:e9:b4:86:0d:f2:72:b4:68:5a:5a:67:4c: d2:c3:a2:57:80:49:76:41:c9:7a:b6:3d:0b:c5:87: b4:e6:bb:d6:96:ed:45:f5:d5:f5:6f:9c:78:bc:61: 66:84:c5:23:b7:79:01:b2:8c:bd:82:5c:76:36:d1: 4e:22:d4:35:0d:c1:08:da:67:e5:ce:21:2f:2a:e6: 03:f4:cd:b4:1c:50:11:d3:09:ba:ac:12:03:fb:5f: 92:b3:cb:24:aa:97:91:49:c8:cf:f6:14:3a:20:66: 5d:1d:8a:21:76:73:4a:9f:2d:d6:8a:ad:1a:3e:77: f9:ed:e5:a3:1a:8a:fa:19:d2:33:50:d1:22:62:23: 34:2e:17:30:58:95:47:26:76:e0:bc:8e:1e:78:eb: 2a:c3:46:c1:8f:99:ab:4f:29:c6:f9:90:8a:b8:8c: 82:a8:11:10:43:21:ea:aa:ce:3c:06:29:b4:98:f3: ff:87:45:f2:bb:35:aa:32:f0:be:7a:48:ba:01:5b: 98:24:60:60:74:e2:ae:7d:a9:93:f6:75:18:6b:6e: fb:94:88:4d:ab:93:76:c1:16:49:b5:43:dd:5b:17: df:fc:9f:2d:80:f8:ec:ba:d9:f0:17:56:db:91:ab: de:37:f1:64:f1:dd:3e:87:a9:10:b9:1d:31:b7:54: 57:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 3662 7577 7650-7651 137207 sbgp-ipAddrBlock: critical IPv4: 43.251.248.0/22 103.43.28.0/22 175.159.0.0/16 202.40.192.0/19 202.45.32.0/19 202.75.64.0/19 202.125.192.0/18 202.189.96.0/19 203.188.64.0/18 IPv6: 2001:ce0::/31 Signature Algorithm: sha256WithRSAEncryption a0:4c:4c:18:6e:bd:e7:69:df:3c:73:c4:74:87:24:c2:40:e2: 5b:fd:22:47:86:f8:4b:d8:eb:2e:02:c0:1d:c1:dd:7f:aa:f3: c2:71:65:00:2e:9f:ca:52:94:e5:bc:64:8b:56:ba:4c:44:46: 67:60:ab:bc:b1:b4:a8:4f:e4:cf:91:7a:27:11:b5:24:73:7f: d8:46:3d:3b:48:76:7f:8c:b7:0f:2d:b3:a4:d3:6e:39:48:04: c1:1c:1a:d3:78:be:a2:f8:5a:63:50:0b:89:9b:bb:d0:04:8f: bc:7f:bf:a6:5d:06:79:bb:43:38:c7:87:49:34:a1:e9:9d:e4: 46:8e:1c:c9:61:25:03:d7:fc:48:fa:29:68:56:dd:20:a7:15: 07:02:93:55:72:7a:55:27:17:de:57:dd:f0:21:8f:5e:12:d1: e5:39:9e:ec:8d:d2:b5:5a:7a:d0:25:b1:10:1a:98:e4:2d:79: 88:ca:f6:d9:89:cc:44:8c:28:fb:2f:1a:87:a0:8b:d2:a1:0e: f9:0c:a0:45:02:13:ca:5e:70:a7:49:1f:f0:6e:3b:b9:a6:92: 5d:53:a8:8f:78:99:db:2a:5b:94:13:56:aa:2c:2b:50:de:47: 5d:4a:20:46:45:88:4b:de:a6:8d:6c:e2:01:30:1a:b1:bc:b6: 37:3b:7a:54 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIDAnadMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMDE0MjkwMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTZENTQxMTAvBgNVBAUTKEYxMTZFOTEyQTk1MDlERTRCMkQ2QjNE OTNDQkMxOEY1MDAzNkUxNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbhum0hg3ycrRoWlpnTNLDoleASXZByXq2PQvFh7Tmu9aW7UX11fVvnHi8YWaE xSO3eQGyjL2CXHY20U4i1DUNwQjaZ+XOIS8q5gP0zbQcUBHTCbqsEgP7X5KzyySq l5FJyM/2FDogZl0diiF2c0qfLdaKrRo+d/nt5aMaivoZ0jNQ0SJiIzQuFzBYlUcm duC8jh546yrDRsGPmatPKcb5kIq4jIKoERBDIeqqzjwGKbSY8/+HRfK7Naoy8L56 SLoBW5gkYGB04q59qZP2dRhrbvuUiE2rk3bBFkm1Q91bF9/8ny2A+Oy62fAXVtuR q9438WTx3T6HqRC5HTG3VFezAgMBAAGjggNfMIIDWzAdBgNVHQ4EFgQU8RbpEqlQ neSy1rPZPLwY9QA24WgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU2RDU0Lzg1MjdFNEI2MEM5NDExRURCNzFCQzAyRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1NkQ1NC84NTI3RTRCNjBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFs UW5lU3kxclBaUEx3WTlRQTI0V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLAYIKwYBBQUHAQgBAf8EHTAb oBkwFwICDk4CAh2ZMAgCAh3iAgId4wIDAhf3MF0GCCsGAQUFBwEHAQH/BE4wTDA7 BAIAATA1AwQCK/v4AwQCZyscAwMAr58DBAXKKMADBAXKLSADBAXKS0ADBAbKfcAD BAXKvWADBAbLvEAwDQQCAAIwBwMFASABDOAwDQYJKoZIhvcNAQELBQADggEBAKBM TBhuvedp3zxzxHSHJMJA4lv9IkeG+EvY6y4CwB3B3X+q88JxZQAun8pSlOW8ZItW ukxERmdgq7yxtKhP5M+ReicRtSRzf9hGPTtIdn+Mtw8ts6TTbjlIBMEcGtN4vqL4 WmNQC4mbu9AEj7x/v6ZdBnm7QzjHh0k0oemd5EaOHMlhJQPX/Ej6KWhW3SCnFQcC k1VyelUnF95X3fAhj14S0eU5nuyN0rVaetAlsRAamOQteYjK9tmJzESMKPsvGoeg i9KhDvkMoEUCE8pecKdJH/BuO7mmkl1TqI94mdsqW5QTVqosK1DeR11KIEZFiEve po1s4gEwGrG8tjc7elQ= -----END CERTIFICATE-----Generated at Fri Dec 19 17:25:06 2025 by rpki-client