This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer File: PurfFFrim0gkCj-6OvvZSajxU10.cer (raw, json) Hash identifier: 5Bnl9cRxu77s21/S7/3tocUgp7a58Dyk9SbQsnfNjTg= Subject key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F42 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 00:08:22 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 203.13.208.0/21 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163650 (0x27f42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 19 00:08:22 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:64:b1:93:9f:0b:83:f5:cb:d0:8d:2d:06:1b: 6d:35:e0:1b:42:d0:fe:14:cb:88:97:7d:a6:95:a4: 1d:10:ce:cb:26:ef:39:2c:88:0c:e1:3c:9a:57:2b: 44:43:d1:70:06:df:5a:10:94:7d:d9:da:25:89:4c: 2f:7f:10:f9:e5:59:a6:64:0b:de:16:28:01:e1:c5: 14:31:f2:cf:0f:6f:43:03:3f:1e:51:49:09:56:63: fd:a5:63:52:d1:42:5b:28:39:9d:cf:7c:fe:02:8d: 19:d2:33:7c:b4:ca:74:c2:c8:53:4b:d7:32:81:6b: 9b:b0:85:bd:90:1e:22:a8:41:b9:bb:da:5a:36:c6: e8:01:05:3c:69:1c:c6:3a:77:fb:23:d2:5b:3d:6e: b8:5c:45:64:4f:30:d0:f7:cc:5f:36:b2:26:49:20: 65:d3:9d:7d:9b:0a:b8:c5:cc:26:ba:2a:ed:0b:97: 54:85:92:c9:76:2c:95:6e:30:a8:78:d3:3a:da:e6: 17:6c:eb:7a:fb:76:f5:7c:6d:a7:22:3c:5e:97:1c: db:72:da:11:3d:20:ce:90:d3:e3:25:2f:c9:60:26: 9e:54:ec:a0:06:fa:d5:87:17:5d:bb:01:02:b3:83: 6a:37:89:6e:f7:75:ba:e3:76:cd:b0:af:e8:d8:fd: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.13.208.0/21 Signature Algorithm: sha256WithRSAEncryption 0c:ac:5b:b3:95:ff:9d:0f:01:62:48:b2:4b:72:6e:dd:db:d4: c0:cb:be:b9:58:87:8d:29:3e:48:98:31:a4:b4:f9:fb:18:eb: 2b:69:fa:47:8f:11:88:c8:38:68:9f:db:66:d8:66:28:7f:5f: 1e:75:ba:76:48:c4:3a:8b:9e:b7:68:a9:ea:19:41:e1:b8:b4: de:23:01:21:6e:de:ee:4b:c9:80:4a:de:47:54:1e:3e:80:1d: ad:38:c3:08:bb:2c:4e:be:ce:cf:59:0c:2d:b5:6e:75:d8:aa: 64:a9:b8:81:60:38:d3:59:39:1a:22:92:29:be:bf:35:df:9a: 3a:ae:96:c2:6d:eb:e1:53:1d:42:7d:07:00:ab:38:35:df:c7: c0:bb:76:28:28:be:82:0c:56:ad:d4:7f:63:d3:2e:03:05:d4: 5f:a4:17:28:62:73:63:c1:a0:49:eb:34:ca:58:fa:e9:5f:f1: 9c:35:01:b9:e2:78:7e:1a:19:7a:ac:c9:20:de:3e:a3:3f:51: 5e:40:bf:0b:3a:12:59:07:8e:44:d0:fb:ad:26:33:81:12:45: ce:85:2e:af:71:24:d4:7e:c4:fb:b8:af:ae:7c:3d:c9:3e:df: 4b:ad:5a:1d:ca:9b:df:a8:35:96:d9:25:d5:1a:f8:6b:57:09: c0:71:d7:37 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAn9CMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxOTAwMDgyMloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxRjgyM0UxMTAvBgNVBAUTKDNFRUFERjE0NUFFMjlCNDgyNDBBM0ZC QTNBRkJEOTQ5QThGMTUzNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQZLGTnwuD9cvQjS0GG2014BtC0P4Uy4iXfaaVpB0Qzssm7zksiAzhPJpXK0RD 0XAG31oQlH3Z2iWJTC9/EPnlWaZkC94WKAHhxRQx8s8Pb0MDPx5RSQlWY/2lY1LR QlsoOZ3PfP4CjRnSM3y0ynTCyFNL1zKBa5uwhb2QHiKoQbm72lo2xugBBTxpHMY6 d/sj0ls9brhcRWRPMND3zF82siZJIGXTnX2bCrjFzCa6Ku0Ll1SFksl2LJVuMKh4 0zra5hds63r7dvV8baciPF6XHNty2hE9IM6Q0+MlL8lgJp5U7KAG+tWHF127AQKz g2o3iW73dbrjds2wr+jY/aBjAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUPurfFFri m0gkCj+6OvvZSajxU10wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY4MjNFLzdENjlBODNDRDVCMTExRUM5MzUxRTYyMEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGODIzRS83RDY5QTgzQ0Q1QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZy aW0wZ2tDai02T3Z2WlNhanhVMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAPLDdAwDQYJKoZIhvcNAQELBQADggEBAAysW7OV/50PAWJIskty bt3b1MDLvrlYh40pPkiYMaS0+fsY6ytp+kePEYjIOGif22bYZih/Xx51unZIxDqL nrdoqeoZQeG4tN4jASFu3u5LyYBK3kdUHj6AHa04wwi7LE6+zs9ZDC21bnXYqmSp uIFgONNZORoikim+vzXfmjqulsJt6+FTHUJ9BwCrODXfx8C7digovoIMVq3Uf2PT LgMF1F+kFyhic2PBoEnrNMpY+ulf8Zw1AbnieH4aGXqsySDePqM/UV5Avws6ElkH jkTQ+60mM4ESRc6FLq9xJNR+xPu4r658Pck+30utWh3Km9+oNZbZJdUa+GtXCcBx 1zc= -----END CERTIFICATE-----Generated at Fri Dec 19 16:06:03 2025 by rpki-client