This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer File: _whTCVKXG6BlIktSH1ZWO20hJO0.cer (raw, json) Hash identifier: MMH/I1Xs6/DwL7FRl3DWgoHsffE/+x8qgmVKkTfnqGY= Subject key identifier: FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E5A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft caRepository: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 15 Dec 2025 16:08:03 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 63914 IP: 103.23.31.0/24 IP: 103.43.230.0/24 IP: 103.228.134.0/23 IP: 202.0.94.0/24 IP: 2404:980::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163418 (0x27e5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 15 16:08:03 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A917E475, serialNumber=FF08530952971BA065224B521F56563B6D2124ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:aa:36:4d:40:31:0f:8e:08:5c:9e:36:19: 59:7b:3b:62:a2:fc:cd:02:56:18:e2:53:1c:9e:27: e6:ee:e0:84:db:03:b1:9f:48:f1:af:00:b2:10:e8: 7a:b0:59:ea:80:c8:49:56:df:08:60:85:66:d7:33: 17:d4:7a:c3:50:0b:b0:50:69:fe:27:3e:68:a5:57: 83:22:4d:6d:39:88:f2:1f:a3:18:b0:85:a9:ad:22: 45:27:dd:ad:73:07:1d:03:7c:75:93:a1:10:00:73: 33:db:0c:5f:1c:97:0b:5d:19:e6:66:ed:66:68:f3: a5:04:b9:dc:3f:60:8b:f8:7e:c7:8a:a5:f9:26:41: ed:50:7a:6d:6f:c4:d1:b2:f2:0b:1a:43:9f:46:72: b9:10:b2:50:e0:ad:88:ee:81:df:bc:23:20:64:73: 39:12:ea:82:95:09:89:58:30:b0:cb:8d:71:c1:c9: 4b:c2:2e:d4:81:54:4b:a2:7b:9c:56:11:b6:60:97: 64:12:83:20:e3:a9:66:42:0d:0f:26:1d:ea:9a:30: 2e:76:9b:67:c0:4c:29:cb:83:f8:50:8d:ef:bf:31: b9:07:bc:8e:9e:56:fa:26:d4:4e:10:e3:4e:49:85: 7c:47:c4:02:7f:e5:d1:da:19:81:56:45:15:91:40: 92:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63914 sbgp-ipAddrBlock: critical IPv4: 103.23.31.0/24 103.43.230.0/24 103.228.134.0/23 202.0.94.0/24 IPv6: 2404:980::/32 Signature Algorithm: sha256WithRSAEncryption 2e:d5:b3:23:22:4d:f7:87:b3:24:34:b9:ab:a2:47:81:b2:6a: 3d:cf:a2:85:16:fa:c9:89:bc:e3:91:51:1e:5b:6b:e8:a0:59: 33:fa:50:1b:c4:88:c7:e6:1b:82:9a:f1:e0:66:78:71:07:55: 46:e7:72:98:a5:e0:d8:3d:ad:a7:94:21:30:d2:d5:bd:1d:7e: 6d:c7:12:1a:b3:f9:8c:58:8a:d5:ba:cb:6c:e4:f5:00:3d:4a: 8e:81:86:af:40:9d:38:20:a9:b5:b2:92:cf:d2:ac:ab:e7:e4: 67:a7:8e:4f:50:14:05:12:8e:ba:8b:bb:c3:92:f3:b9:9e:1c: d1:29:b3:c8:2b:6c:79:cb:aa:9f:b3:01:17:86:24:cd:c1:a9: b5:f6:3f:52:38:1d:e1:c9:0e:b0:c5:02:6e:dc:1a:e2:98:fe: a1:43:e8:09:27:3c:4e:db:9c:46:3c:85:27:28:31:b5:c5:af: ba:d7:f8:66:ba:51:33:76:b5:f8:b3:26:63:33:8b:a3:a3:a3: 73:6f:41:86:be:40:90:05:7c:eb:09:a9:b1:97:9a:7c:cd:da: 79:4f:4f:ba:6b:28:b8:88:10:11:14:c1:a4:75:74:c4:33:74: 17:26:0d:de:e5:e2:1c:51:8b:ed:4b:9c:14:27:79:80:76:eb: 0d:53:93:35 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIDAn5aMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNTE2MDgwM1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxN0U0NzUxMTAvBgNVBAUTKEZGMDg1MzA5NTI5NzFCQTA2NTIyNEI1 MjFGNTY1NjNCNkQyMTI0RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpMqo2TUAxD44IXJ42GVl7O2Ki/M0CVhjiUxyeJ+bu4ITbA7GfSPGvALIQ6Hqw WeqAyElW3whghWbXMxfUesNQC7BQaf4nPmilV4MiTW05iPIfoxiwhamtIkUn3a1z Bx0DfHWToRAAczPbDF8clwtdGeZm7WZo86UEudw/YIv4fseKpfkmQe1Qem1vxNGy 8gsaQ59GcrkQslDgrYjugd+8IyBkczkS6oKVCYlYMLDLjXHByUvCLtSBVEuie5xW EbZgl2QSgyDjqWZCDQ8mHeqaMC52m2fATCnLg/hQje+/MbkHvI6eVvom1E4Q405J hXxHxAJ/5dHaGYFWRRWRQJIVAgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQU/whTCVKX G6BlIktSH1ZWO20hJO0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdFNDc1L0RCRkIzRUI0RTQxQTExRTlBRDc5QjgxMUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3RTQ3NS9EQkZCM0VCNEU0MUExMUU5QUQ3OUI4MTFDNEY5QUUwMi9fd2hUQ1ZL WEc2QmxJa3RTSDFaV08yMGhKTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAPmqMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAZxcfAwQAZyvm AwQBZ+SGAwQAygBeMA0EAgACMAcDBQAkBAmAMA0GCSqGSIb3DQEBCwUAA4IBAQAu 1bMjIk33h7MkNLmrokeBsmo9z6KFFvrJibzjkVEeW2vooFkz+lAbxIjH5huCmvHg ZnhxB1VG53KYpeDYPa2nlCEw0tW9HX5txxIas/mMWIrVusts5PUAPUqOgYavQJ04 IKm1spLP0qyr5+Rnp45PUBQFEo66i7vDkvO5nhzRKbPIK2x5y6qfswEXhiTNwam1 9j9SOB3hyQ6wxQJu3BrimP6hQ+gJJzxO25xGPIUnKDG1xa+61/hmulEzdrX4syZj M4ujo6Nzb0GGvkCQBXzrCamxl5p8zdp5T0+6ayi4iBARFMGkdXTEM3QXJg3e5eIc UYvtS5wUJ3mAdusNU5M1 -----END CERTIFICATE-----Generated at Fri Dec 19 16:02:17 2025 by rpki-client