This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer File: TQJNfuk78G548gwtl4XADK7tbkQ.cer (raw, json) Hash identifier: Ygppg0E70TWkOf375sLJjyjheXNvcZTs5YkDTMbxkkY= Subject key identifier: 4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E93 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 16 Dec 2025 13:06:34 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 103.126.136.0/22 IP: 2406:b2c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163475 (0x27e93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 16 13:06:34 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9134B88, serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:aa:f2:a8:1d:82:79:0b:9d:45:33:0a:46: 3b:66:bf:f0:78:9e:76:f1:e5:65:ea:ad:f8:51:e4: 2d:91:8f:1e:1b:8d:ce:08:49:73:a0:9e:a3:e2:33: a3:02:08:de:6f:16:c6:db:48:68:33:57:c4:cd:ef: af:a3:45:4e:3f:2c:d9:8a:d0:e9:c2:95:59:20:fe: 9a:43:00:16:66:ca:19:8c:fb:8c:91:26:44:0f:c7: eb:bb:8f:d7:1b:74:12:65:80:97:2b:33:88:e4:72: b4:9a:fc:cd:14:52:92:ba:d8:28:02:d0:04:99:b1: fe:4b:e4:6c:0b:0b:d0:2c:77:87:3d:02:33:c1:ed: 6c:a5:98:34:87:20:a2:2e:e1:d6:49:d5:18:85:86: 83:e8:5c:52:25:3b:11:53:5f:3f:61:be:56:a1:73: af:d3:d6:28:84:23:a2:d5:59:c7:09:8c:e9:40:1e: 32:c0:f8:72:bb:dd:b1:f8:14:d1:3e:e0:e2:9c:22: 93:32:af:5f:52:53:89:38:06:6a:7d:5d:98:0b:65: 00:2d:95:33:4b:92:03:41:05:06:f6:c0:c5:21:d2: 6a:65:47:e5:9e:32:d5:0f:21:e2:dc:03:d4:d3:83: a4:c7:ae:ff:ec:3a:9b:6d:56:df:05:a0:c0:a1:c6: 94:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.136.0/22 IPv6: 2406:b2c0::/32 Signature Algorithm: sha256WithRSAEncryption d8:23:51:44:93:e7:65:95:5c:59:ff:43:bf:b8:a1:86:a8:91: 16:d4:61:c2:dd:73:f6:3c:d7:7a:a8:72:65:1f:ad:e7:c3:51: ff:da:90:f4:37:fa:f7:61:dd:48:9e:36:b0:2a:0a:48:50:a9: da:30:cf:93:78:d1:79:c2:70:94:be:06:e3:4a:e8:5b:11:b6: 9a:b1:bf:48:e3:e3:d6:da:17:2a:6c:9d:1d:41:58:0c:74:4e: 7d:13:05:59:09:25:4e:c8:46:46:54:b1:4c:9a:c6:77:ea:4f: d9:b9:64:58:2f:26:e7:56:5b:24:11:0f:68:16:b7:8b:27:bd: 6c:ac:1b:0d:31:f9:29:58:fa:09:02:e3:07:a7:c0:00:a7:64: 4a:b2:e2:83:5d:3c:86:0c:de:a2:27:b9:ea:49:62:be:f6:a6: 20:b6:02:47:1b:cb:e3:75:fc:10:1f:53:03:86:70:e9:0d:4a: 10:6e:0c:50:a6:35:d7:f6:2c:98:37:c5:8e:8c:a7:01:86:7d: b1:38:ec:2f:47:7c:ce:fa:e9:72:e4:3e:0a:e2:91:a3:12:a3: 3b:77:35:fe:43:e2:b2:67:ca:57:1b:e9:be:c9:d4:2d:45:e1: 78:e1:8b:b6:09:2a:69:62:b3:66:7e:44:5d:28:bd:b3:ec:07: 08:85:66:24 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIDAn6TMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNjEzMDYzNFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzRCODgxMTAvBgNVBAUTKDREMDI0RDdFRTkzQkYwNkU3OEYyMEMy RDk3ODVDMDBDQUVFRDZFNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE26ryqB2CeQudRTMKRjtmv/B4nnbx5WXqrfhR5C2Rjx4bjc4ISXOgnqPiM6MC CN5vFsbbSGgzV8TN76+jRU4/LNmK0OnClVkg/ppDABZmyhmM+4yRJkQPx+u7j9cb dBJlgJcrM4jkcrSa/M0UUpK62CgC0ASZsf5L5GwLC9Asd4c9AjPB7WylmDSHIKIu 4dZJ1RiFhoPoXFIlOxFTXz9hvlahc6/T1iiEI6LVWccJjOlAHjLA+HK73bH4FNE+ 4OKcIpMyr19SU4k4Bmp9XZgLZQAtlTNLkgNBBQb2wMUh0mplR+WeMtUPIeLcA9TT g6THrv/sOpttVt8FoMChxpT3AgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUTQJNfuk7 8G548gwtl4XADK7tbkQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM0Qjg4LzJFMzNGOEIwMUZFMzExRUI5ODc4RUM2NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzNEI4OC8yRTMzRjhCMDFGRTMxMUVCOTg3OEVDNjRDNEY5QUUwMi9UUUpOZnVr NzhHNTQ4Z3d0bDRYQURLN3Ria1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBAJnfogwDQQCAAIwBwMFACQGssAwDQYJKoZIhvcNAQELBQADggEB ANgjUUST52WVXFn/Q7+4oYaokRbUYcLdc/Y813qocmUfrefDUf/akPQ3+vdh3Uie NrAqCkhQqdowz5N40XnCcJS+BuNK6FsRtpqxv0jj49baFypsnR1BWAx0Tn0TBVkJ JU7IRkZUsUyaxnfqT9m5ZFgvJudWWyQRD2gWt4snvWysGw0x+SlY+gkC4wenwACn ZEqy4oNdPIYM3qInuepJYr72piC2Akcby+N1/BAfUwOGcOkNShBuDFCmNdf2LJg3 xY6MpwGGfbE47C9HfM766XLkPgrikaMSozt3Nf5D4rJnylcb6b7J1C1F4Xjhi7YJ Kmlis2Z+RF0ovbPsBwiFZiQ= -----END CERTIFICATE-----Generated at Fri Dec 19 17:37:55 2025 by rpki-client