This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer File: NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer (raw, json) Hash identifier: 0iyyFeqiZBlt6oNe+AHxve7xtTc4OexJT+NOZEAKa/8= Subject key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F71 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 04:48:40 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 134428 AS: 139226 AS: 140723 AS: 153974 IP: 103.158.160.0/23 IP: 2406:bcc0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163697 (0x27f71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 19 04:48:40 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:6a:f2:1a:8f:6c:f6:1f:55:a0:56:69:7c: 17:05:4b:8b:50:91:c6:47:cb:67:6b:2b:eb:a3:a4: 64:70:76:41:6b:cc:c2:f2:11:6c:f4:41:65:57:ab: 0c:de:9a:ca:ed:57:24:15:83:4f:9b:85:41:fd:55: e7:16:7a:2b:17:cf:d2:ca:d0:a7:28:be:49:ed:c3: ae:69:8b:14:2d:f1:23:78:60:5e:e8:c6:49:da:05: 99:b0:5b:d8:f2:3d:e4:f1:da:f9:a0:9c:1a:6f:cf: 23:40:ac:bc:a1:21:07:b8:c2:a2:f1:83:aa:63:7a: 64:9e:c0:2e:a4:9f:7c:73:08:b4:ec:64:ac:7f:5b: a4:72:c4:68:2e:1a:62:24:a2:95:b6:6f:ce:ed:f6: 87:6c:c3:fa:86:92:ca:26:cf:e1:21:62:22:ee:92: dc:c9:29:5d:fe:86:88:ab:f8:40:a3:59:73:91:aa: 53:4c:c8:6b:89:dd:47:6c:f9:d2:6a:01:79:03:73: 0b:cb:e7:0c:80:16:bd:a5:a2:98:de:f5:53:29:e7: ba:72:b8:2e:78:0f:d9:81:8b:d6:15:34:26:a9:1a: 2b:5a:96:1d:bf:e6:85:56:4c:c8:39:99:4e:7a:5d: 6b:0f:1f:23:88:99:6e:cd:62:b4:10:ca:a5:76:96: 02:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134428 139226 140723 153974 sbgp-ipAddrBlock: critical IPv4: 103.158.160.0/23 IPv6: 2406:bcc0::/32 Signature Algorithm: sha256WithRSAEncryption 18:7a:24:b8:aa:21:da:a0:37:81:1d:97:c8:de:79:ca:67:68: 36:30:58:02:4d:34:8e:44:36:35:6a:d3:21:ae:74:4d:23:3a: e6:e7:a4:30:5d:3b:bf:9f:38:fc:14:e8:49:fc:12:89:82:c7: d2:a6:74:5a:25:e6:93:30:f9:e3:77:51:fc:f2:ef:a7:8a:d6: 56:5b:16:b6:60:e8:e0:39:75:80:12:0d:66:dc:e0:53:15:e2: 48:88:18:d7:b2:de:4e:c2:4b:9b:e8:0c:ee:99:c8:d3:41:c2: e2:52:a3:5f:d5:f9:47:bb:28:d6:f6:7e:31:a9:b5:b4:72:c0: 09:ac:45:1e:cc:3b:6c:a7:2f:78:de:46:45:b1:6b:c4:a7:ef: 0e:bc:3d:5e:de:9a:5b:cd:ef:74:03:76:14:72:63:02:ef:f7: 96:c2:5c:1c:16:92:ad:eb:88:79:9c:ce:8e:08:f4:41:9d:78: d0:b7:b2:ce:95:48:35:f2:0c:b6:92:50:b9:f2:03:31:78:04: fc:92:4c:84:4f:e5:c4:8c:c6:aa:03:91:af:0b:03:70:9f:72: 6e:dd:57:5a:29:d7:94:10:e6:37:ec:f6:f3:3d:45:63:b2:a6: 24:a1:b4:61:2b:1e:68:85:60:04:d0:40:56:44:df:2f:67:8a: 37:a6:44:70 -----BEGIN CERTIFICATE----- MIIGODCCBSCgAwIBAgIDAn9xMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxOTA0NDg0MFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxQzk5QjQxMTAvBgNVBAUTKDM0OEJFNjY5NEVENzA0MUFBRjI4RDBF QzhDNkM2NTY1NTkxRjJEREEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFlWryGo9s9h9VoFZpfBcFS4tQkcZHy2drK+ujpGRwdkFrzMLyEWz0QWVXqwze msrtVyQVg0+bhUH9VecWeisXz9LK0Kcovkntw65pixQt8SN4YF7oxknaBZmwW9jy PeTx2vmgnBpvzyNArLyhIQe4wqLxg6pjemSewC6kn3xzCLTsZKx/W6RyxGguGmIk opW2b87t9odsw/qGksomz+EhYiLuktzJKV3+hoir+ECjWXORqlNMyGuJ3Uds+dJq AXkDcwvL5wyAFr2lopje9VMp57pyuC54D9mBi9YVNCapGitalh2/5oVWTMg5mU56 XWsPHyOImW7NYrQQyqV2lgKrAgMBAAGjggMtMIIDKTAdBgNVHQ4EFgQUNIvmaU7X BBqvKNDsjGxlZVkfLdowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM5OUI0LzVERTU5Njk2NTk0OTExRUJBNDhDNzg3MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDOTlCNC81REU1OTY5NjU5NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3 WEJCcXZLTkRzakd4bFpWa2ZMZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQgBAf8EGjAY oBYwFAIDAg0cAgMCH9oCAwIlswIDAll2MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQBZ56gMA0EAgACMAcDBQAkBrzAMA0GCSqGSIb3DQEBCwUAA4IBAQAYeiS4 qiHaoDeBHZfI3nnKZ2g2MFgCTTSORDY1atMhrnRNIzrm56QwXTu/nzj8FOhJ/BKJ gsfSpnRaJeaTMPnjd1H88u+nitZWWxa2YOjgOXWAEg1m3OBTFeJIiBjXst5Owkub 6AzumcjTQcLiUqNf1flHuyjW9n4xqbW0csAJrEUezDtspy943kZFsWvEp+8OvD1e 3ppbze90A3YUcmMC7/eWwlwcFpKt64h5nM6OCPRBnXjQt7LOlUg18gy2klC58gMx eAT8kkyET+XEjMaqA5GvCwNwn3Ju3VdaKdeUEOY37PbzPUVjsqYkobRhKx5ohWAE 0EBWRN8vZ4o3pkRw -----END CERTIFICATE-----Generated at Fri Dec 19 16:03:54 2025 by rpki-client