This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer File: MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer (raw, json) Hash identifier: HFL5Bz5BpdD/QpY6N5pjY2tAAvMQE68O/6/l/dKv8QA= Subject key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E2F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft caRepository: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 15 Dec 2025 07:12:01 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 133135 IP: 103.253.12.0/22 IP: 202.176.4.0/22 IP: 2400:5680::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163375 (0x27e2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 15 07:12:01 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:da:2f:bc:21:4e:12:fc:da:bf:95:93:43: f3:b5:67:d7:68:45:64:71:72:ba:d2:2a:74:cd:e3: 06:4d:78:20:15:f9:01:d2:cb:c9:da:c3:8a:47:76: 89:ae:39:43:06:5b:1a:8c:95:c0:b9:50:d2:a7:09: 3f:f6:34:41:f8:4c:22:e1:71:c3:fb:ec:47:58:b2: fa:f1:4e:c1:af:1e:bb:be:e7:bd:26:b9:27:d5:ae: 10:6a:e8:8b:7f:11:e2:24:55:a5:d1:14:81:a6:2c: 94:23:c6:cd:82:14:81:62:22:ca:93:e2:d4:51:26: ca:77:1e:a5:ec:6c:b4:9c:49:6d:ea:3b:85:85:26: 4f:79:cc:e7:ad:a8:ed:1c:42:ec:69:cb:6d:9e:63: fd:81:c1:d5:b2:af:7a:63:6b:51:f1:2b:85:7a:77: 57:e0:2a:8a:2d:59:9b:5f:8a:fa:d4:92:aa:b9:2b: 4b:c5:90:27:bb:c1:7d:2d:62:54:9e:66:99:b1:1b: 64:b5:29:33:73:08:bf:58:c0:55:80:7d:66:64:37: 35:66:55:6d:de:c5:82:a6:00:1b:01:5a:e6:98:75: 5c:95:8d:9e:fe:a1:2c:1d:8e:f1:d2:19:19:a8:bc: ee:50:c4:73:fb:86:30:d1:28:6b:8b:f1:c0:9d:04: c9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133135 sbgp-ipAddrBlock: critical IPv4: 103.253.12.0/22 202.176.4.0/22 IPv6: 2400:5680::/32 Signature Algorithm: sha256WithRSAEncryption d1:be:ad:8d:34:5e:78:bc:ae:0f:25:9e:01:1e:af:d7:ec:53: 42:e1:9b:85:52:fb:c3:d1:d1:52:15:f7:2e:ca:66:85:80:33: 01:f7:5e:4f:8b:18:d5:5a:90:33:78:d0:f5:47:81:32:06:ff: c6:b1:85:68:b9:d8:10:12:81:3a:85:84:80:32:5f:3c:14:75: 74:53:b5:21:63:6c:15:f5:9a:8f:6a:41:13:ef:59:a7:42:ca: 67:5b:6e:70:d4:e8:70:81:51:fd:15:4b:64:0a:60:0d:ec:e6: 66:04:5a:6c:42:98:05:00:e1:57:d5:6d:64:f8:1d:b2:c0:a7: 45:22:be:06:1d:c5:f2:a9:0a:70:aa:1a:be:14:20:60:fe:be: da:19:e3:4c:18:3e:c1:e0:2f:8c:43:a4:b0:e5:7f:14:20:f9: 6c:ae:2c:c4:ca:6e:84:3b:85:33:39:77:5b:e1:24:c7:89:29: 77:d8:a7:77:db:df:e7:8c:47:7b:6d:98:e3:88:5f:b2:5e:48: a4:f3:52:5c:8d:d2:ce:fc:53:13:73:f8:80:a7:6a:30:3f:43: bb:84:6f:a5:5d:be:1f:45:19:84:2b:a1:fe:c6:e7:d3:d9:f8: d5:e9:c3:55:34:e8:41:d3:93:af:14:75:e7:ed:7f:73:b2:bc: d7:20:0f:a5 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAn4vMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNTA3MTIwMVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOUVGRUUxMTAvBgNVBAUTKDMxNDJBMUE4NjFEOUE0NEE5MzI3RjA2 NjE5RkVDOEE2QTk2MkI0MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEU9ovvCFOEvzav5WTQ/O1Z9doRWRxcrrSKnTN4wZNeCAV+QHSy8naw4pHdomu OUMGWxqMlcC5UNKnCT/2NEH4TCLhccP77EdYsvrxTsGvHru+570muSfVrhBq6It/ EeIkVaXRFIGmLJQjxs2CFIFiIsqT4tRRJsp3HqXsbLScSW3qO4WFJk95zOetqO0c Quxpy22eY/2BwdWyr3pja1HxK4V6d1fgKootWZtfivrUkqq5K0vFkCe7wX0tYlSe ZpmxG2S1KTNzCL9YwFWAfWZkNzVmVW3exYKmABsBWuaYdVyVjZ7+oSwdjvHSGRmo vO5QxHP7hjDRKGuL8cCdBMmxAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUMUKhqGHZ pEqTJ/BmGf7IpqlitCMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlFRkVFLzBGOUU5MUY4QjNEMTExRjA4NkMyMkQ1QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5RUZFRS8wRjlFOTFGOEIzRDExMUYwODZDMjJENUFDNEY5QUUwMi9NVUtocUdI WnBFcVRKX0JtR2Y3SXBxbGl0Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAggPMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ/0MAwQCyrAE MA0EAgACMAcDBQAkAFaAMA0GCSqGSIb3DQEBCwUAA4IBAQDRvq2NNF54vK4PJZ4B Hq/X7FNC4ZuFUvvD0dFSFfcuymaFgDMB915PixjVWpAzeND1R4EyBv/GsYVoudgQ EoE6hYSAMl88FHV0U7UhY2wV9ZqPakET71mnQspnW25w1OhwgVH9FUtkCmAN7OZm BFpsQpgFAOFX1W1k+B2ywKdFIr4GHcXyqQpwqhq+FCBg/r7aGeNMGD7B4C+MQ6Sw 5X8UIPlsrizEym6EO4UzOXdb4STHiSl32Kd329/njEd7bZjjiF+yXkik81JcjdLO /FMTc/iAp2owP0O7hG+lXb4fRRmEK6H+xufT2fjV6cNVNOhB05OvFHXn7X9zsrzX IA+l -----END CERTIFICATE-----Generated at Fri Dec 19 16:02:40 2025 by rpki-client