This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer File: Qnc6qEHXDnPE730nyY_LnUQgxGw.cer (raw, json) Hash identifier: F9iwngPOSXgjFceil8Ic9OFwzUJWJJXNfPp3PVBruxY= Subject key identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F85 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 12:46:02 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 103.142.248.0/23 IP: 2001:df1:6180::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163717 (0x27f85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 19 12:46:02 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9138BC1, serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8d:3d:bd:35:6d:16:c6:20:8f:0c:d0:b7:ee: 2b:0e:a9:39:b6:26:44:de:e7:d7:31:51:1e:3c:bc: 0c:79:db:4b:21:75:f9:af:4d:c0:e3:81:c3:da:1e: 86:c8:70:01:5e:8a:8c:2f:5c:19:79:a3:92:79:66: 12:13:63:e9:2e:03:5f:6e:70:9e:87:a1:f7:e4:28: fd:d9:01:3d:cf:22:d8:04:bb:17:7c:99:85:c0:b6: 67:8d:00:af:05:f3:b3:13:d9:2a:2f:1e:80:60:8c: 79:7c:12:42:8e:82:75:89:be:4c:35:6d:cd:25:d8: ed:4a:ea:75:8e:cc:8e:7f:cf:98:b8:20:df:74:6c: 13:a0:bc:4f:a9:56:84:46:75:06:0e:9e:88:1b:6e: 21:86:50:70:4a:56:cb:d6:1e:ee:5a:cc:bb:95:f2: 60:72:3f:b7:30:f1:63:20:ce:aa:50:d7:c9:f3:8f: 3f:70:11:3b:fc:9e:08:36:a6:42:da:cd:87:5a:e3: c9:33:ef:f3:f5:f1:b5:96:28:3f:14:61:db:46:da: e5:a3:6a:dd:d7:77:79:8c:cd:4f:32:76:63:bc:e5: c0:76:f1:6a:c2:00:e0:0e:bf:36:c0:f8:78:35:43: bb:56:00:0d:5c:0e:3f:00:de:fc:5b:75:b7:d8:9d: e0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.248.0/23 IPv6: 2001:df1:6180::/48 Signature Algorithm: sha256WithRSAEncryption 5a:3c:06:3b:cd:6f:a6:93:84:5d:bb:34:2c:f7:72:94:8a:c4: 4d:f6:09:78:25:67:79:30:36:7c:22:8d:7d:e6:2b:11:5a:dd: fd:ba:00:55:f0:07:15:22:5a:9b:be:ad:02:9e:51:0d:e3:04: 25:48:a0:01:86:b6:56:e9:c3:56:8d:88:98:c1:36:e5:1c:42: 84:32:a3:91:d6:88:55:c4:3f:b9:a5:11:f4:ab:73:ae:f7:08: 5b:68:8f:8e:e2:96:0c:1f:d9:68:28:06:f1:04:a4:7a:fa:fd: 44:dd:2a:23:34:78:90:04:b7:70:b6:a0:0b:2d:f7:30:3c:5b: 7b:b4:d9:fe:c8:ad:3b:90:39:80:31:55:e5:45:7c:90:0f:35: d6:78:17:83:64:4e:c3:b4:fd:69:8f:85:6f:d5:8f:f6:cf:d4: 87:6e:e9:58:5f:8c:b2:8d:86:05:b0:e4:bf:3c:96:f8:94:a8: 7c:2e:ec:72:89:6e:c6:bf:9f:8c:24:74:17:4b:8c:e3:f2:9b: 9c:de:cc:b2:b0:0f:fb:03:f7:6c:cd:90:fa:97:83:69:a1:94: e7:ca:e6:38:df:a6:e6:1d:44:1a:80:89:1c:33:e1:15:2e:2c: b6:de:2d:16:8c:41:67:85:e2:42:1c:37:b5:a3:8d:ca:52:d0: 77:95:57:d1 -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgIDAn+FMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxOTEyNDYwMloXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAwwIQTkxMzhCQzExMTAvBgNVBAUTKDQyNzczQUE4NDFENzBFNzNDNEVGN0Qy N0M5OEZDQjlENDQyMEM0NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzjT29NW0WxiCPDNC37isOqTm2JkTe59cxUR48vAx520shdfmvTcDjgcPaHobI cAFeiowvXBl5o5J5ZhITY+kuA19ucJ6HoffkKP3ZAT3PItgEuxd8mYXAtmeNAK8F 87MT2SovHoBgjHl8EkKOgnWJvkw1bc0l2O1K6nWOzI5/z5i4IN90bBOgvE+pVoRG dQYOnogbbiGGUHBKVsvWHu5azLuV8mByP7cw8WMgzqpQ18nzjz9wETv8ngg2pkLa zYda48kz7/P18bWWKD8UYdtG2uWjat3Xd3mMzU8ydmO85cB28WrCAOAOvzbA+Hg1 Q7tWAA1cDj8A3vxbdbfYneAzAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUQnc6qEHX DnPE730nyY/LnUQgxGwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM4QkMxLzE1MkQ1Qzg2MUI2OTExRjBCRkZDM0YyRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzOEJDMS8xNTJENUM4NjFCNjkxMUYwQkZGQzNGMkZDNEY5QUUwMi9RbmM2cUVI WERuUEU3MzBueVlfTG5VUWd4R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf MAwEAgABMAYDBAFnjvgwDwQCAAIwCQMHACABDfFhgDANBgkqhkiG9w0BAQsFAAOC AQEAWjwGO81vppOEXbs0LPdylIrETfYJeCVneTA2fCKNfeYrEVrd/boAVfAHFSJa m76tAp5RDeMEJUigAYa2VunDVo2ImME25RxChDKjkdaIVcQ/uaUR9KtzrvcIW2iP juKWDB/ZaCgG8QSkevr9RN0qIzR4kAS3cLagCy33MDxbe7TZ/sitO5A5gDFV5UV8 kA811ngXg2ROw7T9aY+Fb9WP9s/Uh27pWF+Mso2GBbDkvzyW+JSofC7scoluxr+f jCR0F0uM4/KbnN7MsrAP+wP3bM2Q+peDaaGU58rmON+m5h1EGoCJHDPhFS4stt4t FoxBZ4XiQhw3taONylLQd5VX0Q== -----END CERTIFICATE-----Generated at Fri Dec 19 17:30:56 2025 by rpki-client