This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer (raw, json) Hash identifier: 7oK6iAAQT72564SVLzyQ5QgjLisenAPKLA/b2YvK2QM= Subject key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D3C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft caRepository: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 10 Dec 2025 13:17:12 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 148975 IP: 103.175.20.0/23 IP: 2001:df7:e880::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163132 (0x27d3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 10 13:17:12 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ee:d6:77:e5:86:4e:3a:14:4b:d5:61:19:e8: 26:16:8e:34:cd:d4:9e:99:2a:a3:0d:5d:39:71:9e: e1:c4:f2:f4:ae:32:96:ad:1b:8f:ea:62:6f:50:36: d7:0f:2f:78:f6:26:69:28:92:02:f9:22:66:79:f1: b6:4c:b3:25:3b:51:13:14:ee:b2:89:f3:d0:7b:57: 41:32:b7:1b:c9:5a:15:ec:7d:a4:58:7c:d1:47:1f: 16:74:ac:4c:7d:08:01:b3:e4:d8:b7:6d:8a:a3:10: 77:88:2f:03:2a:52:5a:84:f1:84:3b:de:53:11:15: d6:11:37:37:f8:b0:bb:33:10:6e:8f:da:79:9c:4d: 68:f2:a5:e9:bc:df:30:a1:06:75:91:4a:28:0a:ce: d1:bf:0c:b7:9c:6e:eb:db:cc:b2:ab:d9:c3:aa:9b: 2e:c8:1f:46:e1:1b:7c:7d:6a:c6:d7:11:38:8d:b7: 3e:7d:07:f5:75:f8:e2:76:3c:69:cf:b7:39:f6:f2: 62:6f:69:aa:e9:df:ef:29:83:be:1c:4c:ff:83:90: 31:44:1a:8a:95:1a:c9:24:f9:d2:02:38:ea:55:2f: 7d:9c:72:dc:1e:0a:6a:4d:f0:58:d7:03:b9:ad:93: 4d:8f:6c:f4:1f:d4:a8:3e:42:e7:b5:c1:d9:16:69: 7c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 148975 sbgp-ipAddrBlock: critical IPv4: 103.175.20.0/23 IPv6: 2001:df7:e880::/48 Signature Algorithm: sha256WithRSAEncryption 63:d3:d3:bf:cf:4f:62:bb:04:15:1f:a4:11:fd:13:c1:f8:59: bc:31:c8:03:d4:be:1c:cd:54:91:ed:f4:50:4b:b4:2e:26:cc: 12:21:2f:88:34:f7:f2:18:86:2e:39:ac:a2:52:e9:d7:36:e2: f7:dd:3a:a0:90:4e:73:06:fe:ae:f5:13:51:24:3a:b0:7e:98: b0:f5:75:de:73:37:f7:1e:c4:94:22:78:f2:8c:40:79:90:78: 3a:f6:e4:ad:89:d1:44:7c:22:34:e3:87:d0:f4:7f:c4:68:9e: 0f:64:da:dd:cb:f7:af:c0:f4:eb:f8:91:c2:fb:1d:01:c5:a8: e7:f6:23:3a:b8:68:fd:c4:38:52:79:9e:0a:dd:bf:52:42:6b: 91:fc:51:f7:a9:7a:39:7e:e5:d6:50:c6:1f:1e:59:5d:0e:b8: 42:8a:b9:9a:e4:8d:e9:3f:50:d4:c1:50:66:0f:c7:5d:4b:4a: 19:f8:66:ef:53:5a:73:75:8c:40:79:11:b1:50:02:51:9f:93: 42:9f:53:72:e8:dd:98:8d:eb:c4:1c:b1:37:39:60:30:fa:e4: 77:12:97:02:48:09:bc:c9:af:3f:11:0a:e1:7b:dd:01:37:83: 4d:25:53:98:52:09:2a:ba:c7:01:38:b8:65:7a:66:23:2f:19: c3:01:80:ca -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAn08MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMDEzMTcxMloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYx OTBCQUEyRTJDODVGMUIxOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDu7tZ35YZOOhRL1WEZ6CYWjjTN1J6ZKqMNXTlxnuHE8vSuMpatG4/qYm9QNtcP L3j2JmkokgL5ImZ58bZMsyU7URMU7rKJ89B7V0EytxvJWhXsfaRYfNFHHxZ0rEx9 CAGz5Ni3bYqjEHeILwMqUlqE8YQ73lMRFdYRNzf4sLszEG6P2nmcTWjypem83zCh BnWRSigKztG/DLecbuvbzLKr2cOqmy7IH0bhG3x9asbXETiNtz59B/V1+OJ2PGnP tzn28mJvaarp3+8pg74cTP+DkDFEGoqVGskk+dICOOpVL32cctweCmpN8FjXA7mt k02PbPQf1Kg+Que1wdkWaXy1AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUmfz4BMrI fViFcY8ZC6ouLIXxsY0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY3QjlEL0M1NTU2RjFFM0NBRjExRUNCMzFGM0MzOEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1y SWZWaUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkXvMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ68UMA8EAgAC MAkDBwAgAQ336IAwDQYJKoZIhvcNAQELBQADggEBAGPT07/PT2K7BBUfpBH9E8H4 WbwxyAPUvhzNVJHt9FBLtC4mzBIhL4g09/IYhi45rKJS6dc24vfdOqCQTnMG/q71 E1EkOrB+mLD1dd5zN/cexJQiePKMQHmQeDr25K2J0UR8IjTjh9D0f8Rong9k2t3L 96/A9Ov4kcL7HQHFqOf2Izq4aP3EOFJ5ngrdv1JCa5H8Ufepejl+5dZQxh8eWV0O uEKKuZrkjek/UNTBUGYPx11LShn4Zu9TWnN1jEB5EbFQAlGfk0KfU3Lo3ZiN68Qc sTc5YDD65HcSlwJICbzJrz8RCuF73QE3g00lU5hSCSq6xwE4uGV6ZiMvGcMBgMo= -----END CERTIFICATE-----Generated at Fri Dec 19 17:38:55 2025 by rpki-client