This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqGjPdN7Lix-i3-itz3gU6mpb-E.cer File: eqGjPdN7Lix-i3-itz3gU6mpb-E.cer (raw, json) Hash identifier: izCgSQS2kKov3fisUG2Xs45WQqa3Hi38Vy0AFLAlpDE= Subject key identifier: 7A:A1:A3:3D:D3:7B:2E:2C:7E:8B:7F:A2:B7:3D:E0:53:A9:A9:6F:E1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027CA1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91641F2/9EA983F4D3EC11F0AAC5C632C4F9AE02/eqGjPdN7Lix-i3-itz3gU6mpb-E.mft caRepository: rsync://rpki.apnic.net/member_repository/A91641F2/9EA983F4D3EC11F0AAC5C632C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 04:16:11 +0000 Certificate not after: Wed 30 Sep 2026 00:00:00 +0000 Subordinate resources: AS: 9881 AS: 17734 AS: 18100 AS: 23739 AS: 45604 AS: 132600 IP: 59.86.160.0/19 IP: 103.6.188.0/22 IP: 103.12.100.0/22 IP: 103.16.92.0/22 IP: 202.85.240.0/21 IP: 202.169.176.0/21 IP: 203.17.212.0/23 IP: 203.27.68.0/24 IP: 203.34.168.0/21 IP: 203.122.128.0/18 IP: 203.222.64.0/18 IP: 2406:6d00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162977 (0x27ca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 8 04:16:11 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=A91641F2, serialNumber=7AA1A33DD37B2E2C7E8B7FA2B73DE053A9A96FE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:14:49:39:6a:f4:d5:99:9b:49:c3:73:97:54: f6:e8:13:ec:64:ff:e0:2c:f4:b7:f2:e5:58:db:a4: 91:9c:29:ea:55:eb:6b:e8:60:a4:f1:d7:7c:17:ec: a6:53:74:a9:fe:50:3a:fb:fd:a5:66:cf:cd:cf:73: 65:4b:2e:0b:7d:20:84:6c:de:f4:6b:b8:42:96:79: 1a:2e:33:50:55:5c:ee:8d:de:f7:84:65:ee:a1:aa: 62:fc:bb:15:06:17:54:a6:62:74:da:c1:72:3d:57: 02:fe:11:04:b8:e9:4d:5e:83:eb:c1:1d:59:6a:dd: 79:73:91:fe:b4:3f:b6:ed:96:e3:00:83:7b:a9:ae: 5e:3b:f4:cb:76:27:7f:be:49:5c:78:c3:28:e2:bb: ec:3c:02:6e:d6:fc:22:ab:63:fb:c4:3f:5d:27:87: c5:e9:73:f1:9c:8a:87:1a:45:9e:c4:3c:bb:0f:76: 37:74:ad:7a:41:79:f2:1d:2b:4e:39:cc:31:72:c8: ff:a8:e3:70:46:d2:ab:b2:66:6b:a0:03:fb:10:2d: c8:10:55:49:04:ac:63:99:ff:5d:f0:a4:64:9c:73: 65:5c:b8:9d:2b:0c:22:fe:33:57:44:bf:14:c0:0e: b0:92:ea:8b:dd:ab:c1:21:73:d8:f5:ce:15:68:eb: f5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A1:A3:3D:D3:7B:2E:2C:7E:8B:7F:A2:B7:3D:E0:53:A9:A9:6F:E1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91641F2/9EA983F4D3EC11F0AAC5C632C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91641F2/9EA983F4D3EC11F0AAC5C632C4F9AE02/eqGjPdN7Lix-i3-itz3gU6mpb-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9881 17734 18100 23739 45604 132600 sbgp-ipAddrBlock: critical IPv4: 59.86.160.0/19 103.6.188.0/22 103.12.100.0/22 103.16.92.0/22 202.85.240.0/21 202.169.176.0/21 203.17.212.0/23 203.27.68.0/24 203.34.168.0/21 203.122.128.0/18 203.222.64.0/18 IPv6: 2406:6d00::/32 Signature Algorithm: sha256WithRSAEncryption 96:9c:a1:c7:7e:4a:0d:5a:df:c7:ae:9f:78:10:fa:c7:82:1a: 3e:e0:72:a7:58:68:03:dc:3b:ac:d3:a1:e8:a9:fe:f9:a4:05: 94:b9:7b:c7:6a:45:b1:43:b8:55:ab:e5:4c:f8:e9:0b:06:b8: 76:fc:be:3c:f8:4c:da:b4:16:ea:3f:1a:1c:69:a8:d8:8b:77: 74:91:77:c9:db:ad:9e:cf:ac:f3:e3:e8:61:c5:14:73:51:13: 95:bb:2d:dc:cc:58:8d:85:85:a3:48:21:29:03:8c:e1:5d:11: 70:09:1c:84:bf:12:31:86:43:36:91:8a:83:52:f6:9e:4f:06: 27:fc:b9:04:ef:36:1a:7a:0b:64:85:7a:5c:69:24:82:63:05: 55:bb:a3:7f:24:12:15:a9:11:76:79:28:ad:94:56:1f:68:19: 6e:8b:09:d4:2d:bf:e2:f9:bf:11:17:72:af:ce:f2:6f:b2:45: a8:85:92:1a:d5:46:96:9a:dd:4a:d3:94:84:66:05:34:25:cc: 9d:e0:2a:00:8f:1b:31:51:3f:ce:72:03:b3:06:6f:ed:17:30: b2:b7:1d:27:e1:f9:22:ef:d4:90:3d:4c:be:47:8e:93:e8:50: 24:04:80:c6:aa:a6:73:14:9a:31:e7:b0:2c:ea:6e:bc:40:20: f4:1e:98:39 -----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgIDAnyhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwODA0MTYxMVoXDTI2MDkzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNjQxRjIxMTAvBgNVBAUTKDdBQTFBMzNERDM3QjJFMkM3RThCN0ZB MkI3M0RFMDUzQTlBOTZGRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6FEk5avTVmZtJw3OXVPboE+xk/+As9Lfy5VjbpJGcKepV62voYKTx13wX7KZT dKn+UDr7/aVmz83Pc2VLLgt9IIRs3vRruEKWeRouM1BVXO6N3veEZe6hqmL8uxUG F1SmYnTawXI9VwL+EQS46U1eg+vBHVlq3Xlzkf60P7btluMAg3uprl479Mt2J3++ SVx4wyjiu+w8Am7W/CKrY/vEP10nh8Xpc/GciocaRZ7EPLsPdjd0rXpBefIdK045 zDFyyP+o43BG0quyZmugA/sQLcgQVUkErGOZ/13wpGScc2VcuJ0rDCL+M1dEvxTA DrCS6ovdq8Ehc9j1zhVo6/XbAgMBAAGjggNvMIIDazAdBgNVHQ4EFgQUeqGjPdN7 Lix+i3+itz3gU6mpb+EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY0MUYyLzlFQTk4M0Y0RDNFQzExRjBBQUM1QzYzMkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2NDFGMi85RUE5ODNGNEQzRUMxMUYwQUFDNUM2MzJDNEY5QUUwMi9lcUdqUGRO N0xpeC1pMy1pdHozZ1U2bXBiLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQgBAf8EIDAe oBwwGgICJpkCAkVGAgJGtAICXLsCAwCyJAIDAgX4MGoGCCsGAQUFBwEHAQH/BFsw WTBIBAIAATBCAwQFO1agAwQCZwa8AwQCZwxkAwQCZxBcAwQDylXwAwQDyqmwAwQB yxHUAwQAyxtEAwQDyyKoAwQGy3qAAwQGy95AMA0EAgACMAcDBQAkBm0AMA0GCSqG SIb3DQEBCwUAA4IBAQCWnKHHfkoNWt/Hrp94EPrHgho+4HKnWGgD3Dus06Hoqf75 pAWUuXvHakWxQ7hVq+VM+OkLBrh2/L48+EzatBbqPxocaajYi3d0kXfJ262ez6zz 4+hhxRRzUROVuy3czFiNhYWjSCEpA4zhXRFwCRyEvxIxhkM2kYqDUvaeTwYn/LkE 7zYaegtkhXpcaSSCYwVVu6N/JBIVqRF2eSitlFYfaBluiwnULb/i+b8RF3KvzvJv skWohZIa1UaWmt1K05SEZgU0Jcyd4CoAjxsxUT/OcgOzBm/tFzCytx0n4fki79SQ PUy+R46T6FAkBIDGqqZzFJox57As6m68QCD0Hpg5 -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:04 2025 by rpki-client