This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer (raw, json) Hash identifier: R2uxgLjcsIOcobn8dUYo5hh6784JePG7GnpXVta8Tss= Subject key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D00 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 09 Dec 2025 12:22:45 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 38307 AS: 38858 IP: 103.105.144.0/22 IP: 115.124.0.0/21 IP: 124.158.16.0/21 IP: 203.29.67.0/24 IP: 2401:8c00::/31 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163072 (0x27d00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 9 12:22:45 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:9a:66:2e:16:29:70:a5:63:ec:08:7d:87: d6:42:d2:26:b6:86:33:31:07:15:3b:e2:0f:5e:66: 1d:55:26:4a:5f:eb:93:d7:16:9a:69:d5:f4:25:c3: 5d:39:d3:6f:ef:71:33:26:14:8c:86:bd:7c:89:b6: 4a:1d:c5:6f:a8:2c:55:2d:7b:f7:5d:7e:d6:d4:14: f2:7e:17:36:06:ab:80:9e:99:0a:bf:e6:f0:7a:f1: c3:55:cc:8d:48:6f:49:71:ee:3b:e8:0d:12:28:78: 52:98:b9:b8:55:06:90:af:da:4b:e7:e0:08:39:99: d0:fb:57:a4:6c:64:61:9f:d0:6d:4d:4a:89:22:55: f5:a1:a4:1c:24:f8:c7:15:b3:ec:d4:84:57:9c:01: 4c:ef:34:ba:c1:3b:cb:ad:d4:b4:c7:cd:f7:7b:52: a0:f9:9c:9c:a0:6f:03:7c:e7:99:93:9f:dd:1b:d8: 30:ec:f0:e9:65:69:8e:ae:17:61:b1:22:12:ae:89: 4f:33:1f:36:33:00:69:2e:01:b5:86:fa:02:c3:01: 24:28:c9:28:7f:18:cd:0a:9b:cf:30:5e:c8:0b:34: fe:c6:63:52:59:51:7b:46:cf:74:f7:70:02:fe:c8: 30:cc:f8:a9:b4:79:e9:f7:ac:4e:ab:4e:dd:9c:00: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38307 38858 sbgp-ipAddrBlock: critical IPv4: 103.105.144.0/22 115.124.0.0/21 124.158.16.0/21 203.29.67.0/24 IPv6: 2401:8c00::/31 Signature Algorithm: sha256WithRSAEncryption 40:d7:65:05:8c:89:52:36:20:e2:a0:ff:15:1b:1d:e1:79:47: a7:6d:8f:41:6a:c1:63:7c:28:17:f7:a0:23:e6:14:84:7b:65: 2e:df:6b:1a:e8:dd:38:27:71:29:76:43:7f:51:e1:2a:e3:6d: e2:47:e5:80:53:c7:81:e7:dd:45:0b:59:45:d5:6d:47:f4:7e: 35:50:1d:4a:dd:2f:a2:97:28:35:c3:b0:7a:59:b9:09:38:17: 22:95:08:90:6b:73:7b:77:74:29:f0:a5:a0:25:59:c5:91:94: b3:81:47:b1:18:73:08:8e:6a:48:88:e6:07:ae:31:41:ac:75: 8f:d6:54:91:29:30:53:33:e2:d2:6f:66:5b:51:b4:a6:00:16: b7:d5:3b:e6:90:7a:80:a6:3a:77:01:90:09:a4:88:4d:a9:57: 97:f0:d3:52:30:1f:47:15:7b:45:03:3e:4d:c6:14:31:5f:30: 35:0a:92:11:36:2d:7f:2b:48:2d:91:58:c2:18:61:52:5c:5b: 90:9f:5f:56:08:66:eb:42:3e:e7:1b:3f:b9:78:af:df:3c:0a: bb:7a:74:26:6f:1f:77:ba:6a:45:cc:8a:23:35:73:d2:c8:a8: f9:fa:82:d2:47:f0:fd:8f:96:38:a2:e8:2d:8a:ac:f4:ec:d6: 9f:d2:cb:e7 -----BEGIN CERTIFICATE----- MIIGQDCCBSigAwIBAgIDAn0AMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwOTEyMjI0NVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMTQ0QUIxMTAvBgNVBAUTKDQxNzZGMTA5MThDOUIxOEQyREVGOEI3 QzY2RkM1QTNBNjU4MjIzMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9UppmLhYpcKVj7Ah9h9ZC0ia2hjMxBxU74g9eZh1VJkpf65PXFppp1fQlw105 02/vcTMmFIyGvXyJtkodxW+oLFUte/ddftbUFPJ+FzYGq4CemQq/5vB68cNVzI1I b0lx7jvoDRIoeFKYubhVBpCv2kvn4Ag5mdD7V6RsZGGf0G1NSokiVfWhpBwk+McV s+zUhFecAUzvNLrBO8ut1LTHzfd7UqD5nJygbwN855mTn90b2DDs8OllaY6uF2Gx IhKuiU8zHzYzAGkuAbWG+gLDASQoySh/GM0Km88wXsgLNP7GY1JZUXtGz3T3cAL+ yDDM+Km0een3rE6rTt2cAEq5AgMBAAGjggM1MIIDMTAdBgNVHQ4EFgQUQXbxCRjJ sY0t74t8ZvxaOmWCIx4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE0NEFCLzVFMEFBOUEyMUQ5NTExRTJCNEVFMzM3RDA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExNDRBQi81RTBBQTlBMjFEOTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1Jq SnNZMHQ3NHQ4WnZ4YU9tV0NJeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAJWjAgMAl8owQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgDBAJnaZAD BANzfAADBAN8nhADBADLHUMwDQQCAAIwBwMFASQBjAAwDQYJKoZIhvcNAQELBQAD ggEBAEDXZQWMiVI2IOKg/xUbHeF5R6dtj0FqwWN8KBf3oCPmFIR7ZS7faxro3Tgn cSl2Q39R4SrjbeJH5YBTx4Hn3UULWUXVbUf0fjVQHUrdL6KXKDXDsHpZuQk4FyKV CJBrc3t3dCnwpaAlWcWRlLOBR7EYcwiOakiI5geuMUGsdY/WVJEpMFMz4tJvZltR tKYAFrfVO+aQeoCmOncBkAmkiE2pV5fw01IwH0cVe0UDPk3GFDFfMDUKkhE2LX8r SC2RWMIYYVJcW5CfX1YIZutCPucbP7l4r988Crt6dCZvH3e6akXMiiM1c9LIqPn6 gtJH8P2Pljii6C2KrPTs1p/Sy+c= -----END CERTIFICATE-----Generated at Fri Dec 19 16:05:45 2025 by rpki-client