This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer File: VtexXMGugneFjWSSwB3VMwhEzAY.cer (raw, json) Hash identifier: LYd36SmetIZnSkf65400vwsuj0tu+DIDjMu0fx3537g= Subject key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D99 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 11 Dec 2025 19:42:09 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 18222 IP: 45.115.216.0/22 IP: 45.117.152.0/23 IP: 103.90.84.0/22 IP: 103.250.132.0/23 IP: 202.51.74.0/23 IP: 202.51.82.0/23 IP: 202.51.86.0/24 IP: 202.51.95.0/24 IP: 2400:89e0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163225 (0x27d99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 11 19:42:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A91F0CC8, serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:ba:21:28:f6:7b:5b:1e:99:6c:12:1c:cd: c1:fd:85:3d:71:62:17:4b:4c:0f:aa:58:a8:02:a1: 8c:f4:07:39:56:5c:c5:b2:28:03:bd:26:8a:b2:57: 06:73:f2:4f:1e:01:54:a6:38:80:1f:b0:04:0b:be: ed:08:ce:bb:14:03:82:26:f4:0e:15:13:e4:0f:a7: 0f:4e:2e:7b:86:4f:dd:8b:32:5a:67:c0:a1:80:94: bb:94:82:34:2f:05:74:0b:27:c4:6c:db:c5:3e:3b: 8b:95:85:3e:aa:59:cf:6f:d3:c0:d5:b3:a5:05:1c: ea:76:49:f0:91:84:4c:e8:b1:97:f9:22:83:5c:b5: 97:dd:20:02:4a:90:f7:62:1d:83:60:9f:b1:e3:33: 5a:e2:c8:33:bb:2a:0e:98:89:f1:2b:c0:ba:a8:5a: 3e:73:85:d7:f3:9c:88:a1:c1:fa:ba:d8:25:f2:f8: e3:d9:ea:92:e3:69:03:59:49:00:23:85:03:44:a1: 9b:ca:54:ed:69:cc:4c:a4:14:fb:18:31:87:6f:dc: fc:77:93:48:9f:75:8b:2e:8b:c8:5f:52:a8:22:50: 09:a5:a0:ae:e8:86:b2:c7:e0:55:b9:82:6d:2c:d8: 61:a8:ac:86:92:94:7b:8a:52:fa:91:17:82:a5:47: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18222 sbgp-ipAddrBlock: critical IPv4: 45.115.216.0/22 45.117.152.0/23 103.90.84.0/22 103.250.132.0/23 202.51.74.0/23 202.51.82.0/23 202.51.86.0/24 202.51.95.0/24 IPv6: 2400:89e0::/32 Signature Algorithm: sha256WithRSAEncryption 76:96:5d:57:98:24:21:a7:cf:e3:7a:06:c1:37:b1:90:cf:70: 70:87:da:37:bb:8f:bc:d4:bf:f5:28:f4:c0:cd:e0:df:2f:eb: 20:8a:fe:f1:85:6d:8b:dc:29:a3:74:4e:98:07:a0:a8:49:64: ad:b5:83:6f:26:af:13:78:9d:59:b9:5e:ec:2c:67:b0:ac:c5: 70:da:2c:f1:dd:53:40:cb:51:02:2e:e4:a8:08:13:98:4e:aa: 59:c3:cb:27:59:19:f3:2d:6c:d9:51:4f:d7:2e:64:87:9b:d3: e2:a5:89:82:40:c9:b1:6d:8d:a1:41:10:6a:51:55:85:8d:ff: a0:35:8d:0b:5f:b6:83:6a:bb:8d:5c:b7:57:f7:20:49:63:5d: f7:20:19:b7:ac:e1:9a:29:7d:58:49:08:c4:cc:d9:f7:e8:00: 9b:dc:be:46:fb:00:7c:ce:31:a8:39:53:af:e6:d5:84:8d:c4: 70:31:0c:62:5a:e0:4a:eb:53:07:cc:89:69:62:96:55:b8:61: 90:c0:be:48:6b:14:e0:41:9a:61:25:f0:42:73:b0:ca:19:77: 80:3e:f7:89:57:1c:f5:06:0a:04:02:46:8a:78:42:23:6e:80: f6:9d:e0:fa:a1:39:e1:e1:e7:53:1f:d8:78:0e:a5:b3:a2:6a: 0a:96:51:44 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIDAn2ZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMTE5NDIwOVoXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjBDQzgxMTAvBgNVBAUTKDU2RDdCMTVDQzFBRTgyNzc4NThENjQ5 MkMwMURENTMzMDg0NENDMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMRrohKPZ7Wx6ZbBIczcH9hT1xYhdLTA+qWKgCoYz0BzlWXMWyKAO9JoqyVwZz 8k8eAVSmOIAfsAQLvu0IzrsUA4Im9A4VE+QPpw9OLnuGT92LMlpnwKGAlLuUgjQv BXQLJ8Rs28U+O4uVhT6qWc9v08DVs6UFHOp2SfCRhEzosZf5IoNctZfdIAJKkPdi HYNgn7HjM1riyDO7Kg6YifErwLqoWj5zhdfznIihwfq62CXy+OPZ6pLjaQNZSQAj hQNEoZvKVO1pzEykFPsYMYdv3Px3k0ifdYsui8hfUqgiUAmloK7ohrLH4FW5gm0s 2GGorIaSlHuKUvqRF4KlR+xdAgMBAAGjggNHMIIDQzAdBgNVHQ4EFgQUVtexXMGu gneFjWSSwB3VMwhEzAYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYwQ0M4LzAxMkVEMUJFQ0E0RDExRUFBMTMyRTE3QkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGMENDOC8wMTJFRDFCRUNBNEQxMUVBQTEzMkUxN0JDNEY5QUUwMi9WdGV4WE1H dWduZUZqV1NTd0IzVk13aEV6QVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICRy4wWAYIKwYBBQUHAQcBAf8ESTBHMDYEAgABMDADBAItc9gDBAEtdZgD BAJnWlQDBAFn+oQDBAHKM0oDBAHKM1IDBADKM1YDBADKM18wDQQCAAIwBwMFACQA ieAwDQYJKoZIhvcNAQELBQADggEBAHaWXVeYJCGnz+N6BsE3sZDPcHCH2je7j7zU v/Uo9MDN4N8v6yCK/vGFbYvcKaN0TpgHoKhJZK21g28mrxN4nVm5XuwsZ7CsxXDa LPHdU0DLUQIu5KgIE5hOqlnDyydZGfMtbNlRT9cuZIeb0+KliYJAybFtjaFBEGpR VYWN/6A1jQtftoNqu41ct1f3IEljXfcgGbes4ZopfVhJCMTM2ffoAJvcvkb7AHzO Mag5U6/m1YSNxHAxDGJa4ErrUwfMiWlillW4YZDAvkhrFOBBmmEl8EJzsMoZd4A+ 94lXHPUGCgQCRop4QiNugPad4PqhOeHh51Mf2HgOpbOiagqWUUQ= -----END CERTIFICATE-----Generated at Fri Dec 19 16:03:16 2025 by rpki-client