This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer File: TK4677Gsir3bmbzO5PpakW0VezQ.cer (raw, json) Hash identifier: FMd29j/bgmAKagccv45qlz5K7MFtTlv5D28RROVW/ys= Subject key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D4E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 10 Dec 2025 15:33:29 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 23750 AS: 55399 IP: 103.207.84.0/22 IP: 116.90.96.0/19 IP: 121.46.64.0/22 IP: 202.69.32.0/19 IP: 202.142.144.0/20 IP: 2406:ac00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163150 (0x27d4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 10 15:33:29 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:29:3f:aa:02:72:e6:15:0c:2e:97:d4:cc: 7f:89:ff:fb:04:87:39:09:81:f5:91:ef:c4:e2:57: 74:32:99:dd:b0:bc:61:a0:94:28:90:2a:96:00:53: 49:8a:82:91:e7:b6:f5:da:47:bd:81:ae:07:54:24: 95:bf:6d:d1:d5:bc:d7:d0:49:dc:4e:06:57:c2:87: 64:1c:58:4b:b7:28:6f:74:e2:f8:35:82:dc:5b:0d: 40:0b:11:66:1f:19:5d:f0:be:22:40:59:a6:bb:ca: 3b:95:53:29:f9:e0:b2:03:9d:32:93:0e:a2:49:16: a7:1a:06:d0:17:b9:5c:f6:af:7b:69:30:4a:a2:24: 6f:b0:91:5a:8d:71:63:87:a1:16:bf:f2:56:bc:9d: 81:de:fb:cb:b8:24:01:63:78:4e:94:f4:fb:a6:9d: 22:3b:bf:69:fa:1c:c8:84:9c:8d:a9:8c:61:2e:1f: 2c:d5:e9:60:44:54:43:bc:9f:85:f8:f8:a6:62:f2: b6:a6:6d:a1:a2:a5:24:aa:88:d2:30:fd:77:d8:96: 0e:f8:21:ef:95:a5:ba:05:1b:92:07:12:3e:71:f7: 0f:c7:2f:37:4d:9e:aa:7f:3f:bc:d6:f6:f3:c3:06: 45:7e:9b:d8:70:9c:a3:36:71:99:2b:80:6d:0f:ef: 6a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 23750 55399 sbgp-ipAddrBlock: critical IPv4: 103.207.84.0/22 116.90.96.0/19 121.46.64.0/22 202.69.32.0/19 202.142.144.0/20 IPv6: 2406:ac00::/32 Signature Algorithm: sha256WithRSAEncryption c7:08:84:88:e7:5e:7a:1a:b4:61:9e:86:6f:16:90:74:8c:75: 1c:db:de:38:39:35:7f:9a:9f:19:9f:0e:af:96:e3:6c:df:d9: 34:5f:d7:f5:34:88:37:62:ec:24:c7:7d:31:00:83:fd:90:e8: a4:ee:26:0b:36:11:16:27:6c:ae:7b:86:81:3c:b8:2b:48:c3: c3:39:6d:90:e2:bd:52:09:b4:ee:73:b7:65:dd:ad:25:cd:7b: 42:ee:66:af:64:60:5a:c7:83:50:46:ff:72:2f:99:09:03:b1: 8a:04:6f:a2:39:59:d9:01:59:ce:3b:4c:67:eb:f5:7e:cd:f3: 6d:dc:b9:68:ab:0d:77:0c:d7:5b:6e:59:3c:47:ba:ec:0e:19: 3e:1e:21:d4:32:d1:37:34:14:6b:e7:b6:a8:e7:25:77:76:e3: 3c:0d:0c:c5:31:d9:f9:d3:7a:2c:12:0f:ec:43:9e:3a:60:45: 66:97:73:41:d5:04:0b:e0:db:d5:56:db:ac:fb:66:e3:8e:82: d2:65:fd:d2:ee:f0:70:bd:a1:a5:f8:02:44:30:91:26:2a:a7: e4:d7:c1:81:80:3e:9e:7d:85:a5:6d:e4:c1:bf:6a:82:6b:4c: f3:19:33:bc:80:d5:db:08:1d:84:01:4c:29:3d:f7:03:3b:47: 0b:dc:16:9e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIDAn1OMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMDE1MzMyOVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkND RUU0RkE1QTkxNkQxNTdCMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx+Sk/qgJy5hUMLpfUzH+J//sEhzkJgfWR78TiV3Qymd2wvGGglCiQKpYAU0mK gpHntvXaR72BrgdUJJW/bdHVvNfQSdxOBlfCh2QcWEu3KG904vg1gtxbDUALEWYf GV3wviJAWaa7yjuVUyn54LIDnTKTDqJJFqcaBtAXuVz2r3tpMEqiJG+wkVqNcWOH oRa/8la8nYHe+8u4JAFjeE6U9PumnSI7v2n6HMiEnI2pjGEuHyzV6WBEVEO8n4X4 +KZi8rambaGipSSqiNIw/XfYlg74Ie+VpboFG5IHEj5x9w/HLzdNnqp/P7zW9vPD BkV+m9hwnKM2cZkrgG0P72plAgMBAAGjggM6MIIDNjAdBgNVHQ4EFgQUTK4677Gs ir3bmbzO5PpakW0VezQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI1RDdFL0VDQTY4MjM0MUQ4NzExRTI5ODMyMkRFMDA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNUQ3RS9FQ0E2ODIzNDFEODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdH c2lyM2JtYnpPNVBwYWtXMFZlelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICXMYCAwDYZzBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAmfPVAME BXRaYAMEAnkuQAMEBcpFIAMEBMqOkDANBAIAAjAHAwUAJAasADANBgkqhkiG9w0B AQsFAAOCAQEAxwiEiOdeehq0YZ6GbxaQdIx1HNveODk1f5qfGZ8Or5bjbN/ZNF/X 9TSIN2LsJMd9MQCD/ZDopO4mCzYRFidsrnuGgTy4K0jDwzltkOK9Ugm07nO3Zd2t Jc17Qu5mr2RgWseDUEb/ci+ZCQOxigRvojlZ2QFZzjtMZ+v1fs3zbdy5aKsNdwzX W25ZPEe67A4ZPh4h1DLRNzQUa+e2qOcld3bjPA0MxTHZ+dN6LBIP7EOeOmBFZpdz QdUEC+Db1VbbrPtm446C0mX90u7wcL2hpfgCRDCRJiqn5NfBgYA+nn2FpW3kwb9q gmtM8xkzvIDV2wgdhAFMKT33AztHC9wWng== -----END CERTIFICATE-----Generated at Fri Dec 19 11:50:14 2025 by rpki-client