This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer File: M2YXmy18l7gmb5tDGASoxtLQkOs.cer (raw, json) Hash identifier: fw+uFhIjf2VcQSW9ThtbzmVFtTNlrmAhp7oVW4Mibp4= Subject key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027ECE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 17 Dec 2025 01:46:01 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 17491 AS: 63830 IP: 43.243.21.0/24 IP: 103.94.93.0 -- 103.94.95.255 IP: 123.253.142.0/24 IP: 2001:dee:8000::/47 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 12:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163534 (0x27ece) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 17 01:46:01 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:98:30:55:86:7c:24:43:41:06:ed:b5:35: 59:4f:95:5e:21:e0:37:80:d9:a0:0c:61:c1:e0:29: 8e:4a:8d:f5:f3:97:c2:da:19:e0:5a:48:8b:f5:67: 15:a3:bd:b4:50:cf:b0:fd:9d:a2:71:b1:53:64:d9: fd:ac:1a:63:5b:ea:c6:04:7b:ea:c5:b1:ce:71:88: e6:c6:23:9d:d5:62:23:10:1e:3c:ff:ec:3a:47:f1: 63:d8:be:1c:c6:7d:c3:e5:09:52:21:3d:34:25:18: 17:ef:64:e5:c5:46:4a:9d:bc:a7:c8:86:ef:64:3f: 60:cc:a8:b7:cc:d9:ac:27:98:b7:6e:9a:e3:91:0a: 7f:d6:4f:85:8f:93:4f:c9:5a:86:f4:83:62:13:b9: 62:f3:23:40:5e:77:cd:39:60:d6:30:25:22:34:9d: 02:13:7e:62:c5:96:4d:fc:42:a4:04:f8:e5:2b:52: 50:14:76:de:86:2a:66:83:37:02:b1:ca:ac:60:a6: 91:28:2e:94:d4:16:dc:28:75:44:b7:11:eb:e8:ee: cc:67:8c:d2:4b:59:39:f0:d4:11:5f:ef:90:b2:77: 22:47:66:02:2e:fc:ae:75:cb:85:fc:51:a6:27:7a: db:bb:a0:07:49:dc:b0:20:8f:83:0e:85:24:9c:cc: 7a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 17491 63830 sbgp-ipAddrBlock: critical IPv4: 43.243.21.0/24 103.94.93.0-103.94.95.255 123.253.142.0/24 IPv6: 2001:dee:8000::/47 Signature Algorithm: sha256WithRSAEncryption 80:62:c9:f3:22:0d:ea:26:7f:d9:f8:96:3e:7e:5e:a1:d5:36: 40:a8:13:cc:71:0e:fe:67:8a:ea:29:a5:17:e8:9e:56:65:50: 1b:90:79:f0:c3:08:e7:8f:76:2d:72:6c:c5:c8:f9:60:13:67: 38:85:96:ee:a5:7e:de:23:be:44:80:02:92:19:51:69:0f:42: 99:7a:8c:7c:9f:c2:72:85:23:00:97:83:af:c0:af:12:7c:8f: d6:fe:3f:a7:1a:cb:a5:12:93:3f:04:dd:71:bd:de:0d:62:b8: 8c:c4:6f:f0:6e:ef:b0:76:a7:48:11:55:5d:e9:a2:4a:b6:61: 45:a0:2b:0b:1b:0e:39:a8:ca:14:28:c6:e5:bb:38:9c:86:4c: df:21:9e:10:a5:0a:db:bb:c7:67:f5:4f:f9:13:c2:a2:cb:fd: de:37:90:54:d7:52:4e:50:1d:06:61:bb:45:fe:45:67:bd:08: 80:06:a0:29:82:b7:e1:ca:e9:d0:e6:5f:c2:3e:30:80:a1:26: d0:0c:b5:7c:92:37:bd:ae:c2:13:8e:99:81:18:36:00:f6:68: 70:29:c5:ef:0f:5e:91:33:94:d7:df:69:6c:93:69:6e:54:47: 09:b3:16:c4:0b:17:0c:e4:b6:8b:31:da:5b:77:bd:d9:c8:ae: a8:e8:5d:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIDAn7OMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNzAxNDYwMVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0 MzE4MDRBOEM2RDJEMDkwRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDW5gwVYZ8JENBBu21NVlPlV4h4DeA2aAMYcHgKY5KjfXzl8LaGeBaSIv1ZxWj vbRQz7D9naJxsVNk2f2sGmNb6sYEe+rFsc5xiObGI53VYiMQHjz/7DpH8WPYvhzG fcPlCVIhPTQlGBfvZOXFRkqdvKfIhu9kP2DMqLfM2awnmLdumuORCn/WT4WPk0/J Wob0g2ITuWLzI0Bed805YNYwJSI0nQITfmLFlk38QqQE+OUrUlAUdt6GKmaDNwKx yqxgppEoLpTUFtwodUS3Eevo7sxnjNJLWTnw1BFf75CydyJHZgIu/K51y4X8UaYn etu7oAdJ3LAgj4MOhSSczHqxAgMBAAGjggM4MIIDNDAdBgNVHQ4EFgQUM2YXmy18 l7gmb5tDGASoxtLQkOswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg1MkFCLzJCOTk4NTRFQjhCMDExRURCNEFGRDM1RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkx OGw3Z21iNXRER0FTb3h0TFFrT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICRFMCAwD5VjBEBggrBgEFBQcBBwEB/wQ1MDMwIAQCAAEwGgMEACvzFTAM AwQAZ15dAwQFZ15AAwQAe/2OMA8EAgACMAkDBwEgAQ3ugAAwDQYJKoZIhvcNAQEL BQADggEBAIBiyfMiDeomf9n4lj5+XqHVNkCoE8xxDv5niuoppRfonlZlUBuQefDD COePdi1ybMXI+WATZziFlu6lft4jvkSAApIZUWkPQpl6jHyfwnKFIwCXg6/ArxJ8 j9b+P6cay6USkz8E3XG93g1iuIzEb/Bu77B2p0gRVV3pokq2YUWgKwsbDjmoyhQo xuW7OJyGTN8hnhClCtu7x2f1T/kTwqLL/d43kFTXUk5QHQZhu0X+RWe9CIAGoCmC t+HK6dDmX8I+MIChJtAMtXySN72uwhOOmYEYNgD2aHApxe8PXpEzlNffaWyTaW5U RwmzFsQLFwzktosx2lt3vdnIrqjoXVs= -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:39 2025 by rpki-client