This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer File: AgVW-X1UVDTSyFQSHcXcZGNKZKw.cer (raw, json) Hash identifier: uOzLYO3WZk3FhjmUfWD4RoR2LTgCWR2ut1Xe2wu8M1w= Subject key identifier: 02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E4E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 15 Dec 2025 13:57:07 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 134732 AS: 137985 IP: 59.153.100.0/22 IP: 103.119.100.0/22 IP: 103.198.136.0/22 IP: 2401:f40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163406 (0x27e4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 15 13:57:07 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9142BCC, serialNumber=020556F97D545434D2C854121DC5DC64634A64AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:0d:c0:49:e4:67:0c:c4:f9:b4:30:4f:71: c2:e6:f7:18:43:e9:59:f4:2c:e8:ee:f6:53:f7:fd: 1a:37:cb:5d:35:b6:51:ed:37:c4:64:27:6d:ce:88: e0:b1:dc:64:71:04:de:d3:5b:f0:b8:73:3f:f4:df: e2:19:c0:28:0b:86:48:8c:63:38:fb:80:fa:61:a8: ce:38:cb:8d:26:c1:cf:5f:1e:13:f1:5f:ad:62:66: aa:33:9d:45:5a:93:da:39:67:46:02:1a:dd:16:af: 36:75:6a:ee:d1:4c:ac:55:5a:fa:62:d1:f8:26:6b: e1:e5:e7:98:a2:fb:a3:c6:c8:dc:67:d3:a2:8b:8e: 05:7c:0a:f8:36:77:7d:fe:de:24:f5:5a:0f:44:14: 78:96:96:69:68:db:6c:a2:a0:99:fe:c6:83:7f:93: 4b:d5:8f:cb:e9:16:75:28:d3:be:79:fa:85:7d:36: 9f:2f:22:3a:36:2f:9f:d1:45:b8:fa:3f:ce:29:6e: d3:18:37:37:e6:e1:53:1e:4e:59:22:98:d0:e1:c3: 75:48:f5:c3:3a:e2:30:2a:01:e8:95:3b:0a:a0:23: b4:d4:41:3b:9f:fb:37:b1:b8:c4:26:29:a9:03:5c: 8e:9e:b1:49:54:d8:8a:94:a8:15:cb:8b:7d:5e:9c: 43:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:05:56:F9:7D:54:54:34:D2:C8:54:12:1D:C5:DC:64:63:4A:64:AC X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142BCC/8A56C09E983E11E7B47DE57AC4F9AE02/AgVW-X1UVDTSyFQSHcXcZGNKZKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134732 137985 sbgp-ipAddrBlock: critical IPv4: 59.153.100.0/22 103.119.100.0/22 103.198.136.0/22 IPv6: 2401:f40::/32 Signature Algorithm: sha256WithRSAEncryption 57:ff:59:81:a0:bb:81:a8:e5:dc:76:88:5d:95:0a:4d:d9:48: 4d:0e:0a:f5:e2:c3:fe:8e:d5:4c:9a:9a:62:b2:bd:35:8a:f3: 18:43:0c:8c:7f:d8:96:87:78:39:18:8b:03:ac:ba:1b:7b:e9: 0e:8c:b2:eb:e8:0a:2a:92:eb:a2:4e:7a:31:60:c5:cd:77:34: 60:fb:c6:ae:c9:3f:a9:16:7c:c9:b1:a2:fc:73:ce:d6:16:26: 68:ed:63:63:3a:8b:2c:ed:52:32:4e:e5:dc:14:5d:56:3b:92: 5f:90:f4:99:e3:a0:58:60:f8:f8:7c:b8:4e:fc:56:d1:e8:03: 1a:9d:e8:c3:d1:80:26:29:76:f5:46:0a:c0:59:d1:54:28:fd: 42:70:02:82:5b:b6:d3:8e:ed:ec:bb:8d:f8:73:b7:61:23:12: 2f:71:11:ca:22:fe:0e:f3:73:91:4e:7f:11:a9:4f:75:02:34: 54:e9:bc:a6:c8:d8:2e:7b:8a:ac:72:3c:d4:c0:33:e7:16:e5: f9:10:7e:7a:d6:ce:c9:10:21:1f:89:a8:62:56:ca:59:66:e5: 93:94:6d:a6:3f:97:70:48:a0:8a:bb:a9:50:05:5c:a8:ae:2f: fc:f0:23:e0:3d:a0:ec:fe:49:cf:74:b8:24:e5:5a:46:85:2a: 23:5e:28:62 -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgIDAn5OMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNTEzNTcwN1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNDJCQ0MxMTAvBgNVBAUTKDAyMDU1NkY5N0Q1NDU0MzREMkM4NTQx MjFEQzVEQzY0NjM0QTY0QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC48A3ASeRnDMT5tDBPccLm9xhD6Vn0LOju9lP3/Ro3y101tlHtN8RkJ23OiOCx 3GRxBN7TW/C4cz/03+IZwCgLhkiMYzj7gPphqM44y40mwc9fHhPxX61iZqoznUVa k9o5Z0YCGt0WrzZ1au7RTKxVWvpi0fgma+Hl55ii+6PGyNxn06KLjgV8Cvg2d33+ 3iT1Wg9EFHiWlmlo22yioJn+xoN/k0vVj8vpFnUo0755+oV9Np8vIjo2L5/RRbj6 P84pbtMYNzfm4VMeTlkimNDhw3VI9cM64jAqAeiVOwqgI7TUQTuf+zexuMQmKakD XI6esUlU2IqUqBXLi31enEMfAgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQUAgVW+X1U VDTSyFQSHcXcZGNKZKwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQyQkNDLzhBNTZDMDlFOTgzRTExRTdCNDdERTU3QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0MkJDQy84QTU2QzA5RTk4M0UxMUU3QjQ3REU1N0FDNEY5QUUwMi9BZ1ZXLVgx VVZEVFN5RlFTSGNYY1pHTktaS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAg5MAgMCGwEwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAI7mWQD BAJnd2QDBAJnxogwDQQCAAIwBwMFACQBD0AwDQYJKoZIhvcNAQELBQADggEBAFf/ WYGgu4Go5dx2iF2VCk3ZSE0OCvXiw/6O1UyammKyvTWK8xhDDIx/2JaHeDkYiwOs uht76Q6MsuvoCiqS66JOejFgxc13NGD7xq7JP6kWfMmxovxzztYWJmjtY2M6iyzt UjJO5dwUXVY7kl+Q9JnjoFhg+Ph8uE78VtHoAxqd6MPRgCYpdvVGCsBZ0VQo/UJw AoJbttOO7ey7jfhzt2EjEi9xEcoi/g7zc5FOfxGpT3UCNFTpvKbI2C57iqxyPNTA M+cW5fkQfnrWzskQIR+JqGJWyllm5ZOUbaY/l3BIoIq7qVAFXKiuL/zwI+A9oOz+ Sc90uCTlWkaFKiNeKGI= -----END CERTIFICATE-----Generated at Fri Dec 19 17:32:21 2025 by rpki-client