This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer File: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer (raw, json) Hash identifier: wV0gAGW5I42Kn9IM+ooaFmt3oL7OHoCrMWW3gxgBiWQ= Subject key identifier: 6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027DE1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 12 Dec 2025 19:48:13 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 103.105.104.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163297 (0x27de1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 12 19:48:13 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91F522D, serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:de:16:b4:a2:33:15:db:5f:ad:74:87:66: 54:ce:fb:ba:45:e0:c5:c6:e6:16:d0:08:28:e4:38: c9:82:bd:af:4b:b2:51:08:20:63:5e:d8:03:55:08: be:42:86:77:28:1d:29:13:46:56:7c:9a:60:d1:a2: 71:4d:fd:a0:5f:93:0e:b3:6d:e9:dc:c9:40:3a:ff: 95:06:b4:5d:28:ef:2e:c4:e2:6f:17:5d:a1:1a:cf: 91:56:4f:8c:c2:e4:da:93:1a:3b:4e:a8:08:06:00: 7c:cd:92:57:d9:44:34:f8:9c:89:ad:67:e5:3f:98: b9:bf:74:9b:7b:2f:bd:68:38:10:94:3f:6c:cf:5b: 87:fc:d3:3d:f8:63:01:a4:d6:ec:ce:3f:12:5f:3d: a2:ab:84:66:2c:f3:21:27:3f:7e:99:e9:e4:d3:24: 72:8b:8f:4f:58:75:c8:0a:8b:a4:09:af:9b:b9:d9: 37:80:8f:8e:88:f1:46:ae:67:5e:07:1e:e3:9f:b1: a7:4f:7a:81:2f:a2:2a:f7:2b:a0:45:65:93:a6:27: aa:dc:d0:47:08:75:c5:73:01:9d:8d:99:a1:7b:d7: d6:67:ba:b5:64:e8:f9:e9:de:e4:8d:5c:1d:9f:45: 2d:ad:f6:86:82:72:bb:62:70:67:d0:1b:a3:3c:2b: 86:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.105.104.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:0e:eb:96:b6:44:8c:78:a5:b9:6f:25:95:3c:de:ca:9f:c6: 23:15:88:67:d6:33:3e:bc:e6:98:8d:db:e0:da:b7:f4:3d:68: 2a:7c:1c:dd:94:31:78:0f:27:de:b1:3b:3b:c8:33:b9:41:cf: cc:56:83:95:1d:53:f1:1f:03:5f:f4:fa:31:48:b4:5f:26:09: 14:61:71:67:d0:9f:fd:ed:40:e0:5d:95:28:5c:df:2f:48:8e: 0d:7a:45:fd:dd:6a:bc:4f:40:9f:66:bf:cb:c9:0a:42:b3:a8: 06:e6:b3:df:b2:17:cc:b4:68:e2:0f:27:51:35:ea:c3:09:c9: 27:8f:bb:6a:16:d4:f1:b8:06:92:10:fe:89:7d:46:75:0e:c4: e0:f6:fd:6d:9a:25:74:6f:4a:5f:2a:66:89:03:83:46:40:9a: 39:02:b2:08:5d:5a:16:a9:5a:a7:e9:42:d3:e4:2d:6e:25:3c: 4c:a3:46:88:90:09:14:07:ae:03:80:a9:9a:23:2c:2a:70:c5: 93:81:e1:4f:3a:08:54:7e:99:16:c8:d3:7c:9c:c5:c4:3a:3b: 1c:07:75:86:c5:ac:c1:95:04:ff:3b:35:4a:47:e2:09:91:58: da:2b:19:96:38:4d:d5:46:c0:48:00:27:4b:f3:16:13:af:24: 92:9f:07:74 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAn3hMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMjE5NDgxM1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjUyMkQxMTAvBgNVBAUTKDZCNkNEREVCNzEzOUE5RDkzNjY3NkQ4 M0E1M0VDNTY3RjFENkYxOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1pN4WtKIzFdtfrXSHZlTO+7pF4MXG5hbQCCjkOMmCva9LslEIIGNe2ANVCL5C hncoHSkTRlZ8mmDRonFN/aBfkw6zbencyUA6/5UGtF0o7y7E4m8XXaEaz5FWT4zC 5NqTGjtOqAgGAHzNklfZRDT4nImtZ+U/mLm/dJt7L71oOBCUP2zPW4f80z34YwGk 1uzOPxJfPaKrhGYs8yEnP36Z6eTTJHKLj09YdcgKi6QJr5u52TeAj46I8UauZ14H HuOfsadPeoEvoir3K6BFZZOmJ6rc0EcIdcVzAZ2NmaF719ZnurVk6Pnp3uSNXB2f RS2t9oaCcrticGfQG6M8K4YHAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUa2zd63E5 qdk2Z22DpT7FZ/HW8Z8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY1MjJELzZDMEFEMDkyRkNCNTExRUE4OEJGMTMwRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGNTIyRC82QzBBRDA5MkZDQjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNF NXFkazJaMjJEcFQ3RlpfSFc4WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAJnaWgwDQYJKoZIhvcNAQELBQADggEBAFsO65a2RIx4pblvJZU8 3sqfxiMViGfWMz685piN2+Dat/Q9aCp8HN2UMXgPJ96xOzvIM7lBz8xWg5UdU/Ef A1/0+jFItF8mCRRhcWfQn/3tQOBdlShc3y9Ijg16Rf3darxPQJ9mv8vJCkKzqAbm s9+yF8y0aOIPJ1E16sMJySePu2oW1PG4BpIQ/ol9RnUOxOD2/W2aJXRvSl8qZokD g0ZAmjkCsghdWhapWqfpQtPkLW4lPEyjRoiQCRQHrgOAqZojLCpwxZOB4U86CFR+ mRbI03ycxcQ6OxwHdYbFrMGVBP87NUpH4gmRWNorGZY4TdVGwEgAJ0vzFhOvJJKf B3Q= -----END CERTIFICATE-----Generated at Fri Dec 19 16:01:50 2025 by rpki-client