This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer File: mtiSjq8lxRyzsyEdSba6ufC59n8.cer (raw, json) Hash identifier: alAEYESm8L3cDJaCdNV4QklS3+4EAM+ERfwwTYMDmAs= Subject key identifier: 9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E37 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 15 Dec 2025 09:49:22 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 203.142.24.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163383 (0x27e37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 15 09:49:22 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91EBD8F, serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:91:c4:6f:d5:c4:cd:d0:15:72:1d:24:a1: 99:eb:41:55:6f:4c:86:1d:e8:62:0c:e3:3e:de:4a: 8f:1d:a9:f9:56:dd:f7:c7:d4:5d:95:c2:59:60:46: 75:e6:c5:a7:b4:29:4f:79:d3:4c:3b:b4:96:3b:79: 69:34:cb:85:98:c5:47:a6:ab:60:59:eb:84:a3:ac: d9:88:ca:d2:14:fb:f8:65:01:c2:bf:4f:cc:b2:f0: bf:b0:67:9d:4e:d7:96:b5:fa:44:d3:48:91:8a:5c: 08:e7:43:e2:e8:2b:28:5b:fb:5e:53:73:20:83:1a: f7:74:0c:d4:26:85:87:f9:80:c1:ad:a7:b4:5b:b2: 13:ae:8d:2c:e0:a4:03:45:db:7b:de:33:2c:78:b2: ad:60:92:13:e4:70:b5:95:a2:c7:19:48:7e:18:72: d1:ac:ae:3f:b5:e6:d3:49:c6:bb:a3:41:6a:4a:92: 5a:a7:22:97:b6:92:d3:4f:b4:22:cb:b7:b7:00:e1: 66:4b:ca:45:52:0c:30:0b:52:9e:c1:24:a1:ec:ee: 21:16:3a:38:91:73:7f:a3:21:13:c6:a5:6a:f9:34: bb:cc:ec:02:49:76:73:66:d2:6a:e6:51:f4:89:3e: f4:42:20:2c:b4:b5:d5:f8:7d:92:b5:94:78:bf:a3: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.142.24.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:ae:2a:98:07:a1:fb:ce:c4:1d:f7:98:81:9e:d3:40:46:0f: d8:9a:fd:1b:79:72:93:17:88:56:7e:f3:62:a8:58:bf:55:e5: f6:c7:4a:11:77:ed:4b:bb:5b:e4:ac:07:7c:40:3e:17:23:72: 10:bd:44:c2:81:23:6e:ab:85:1a:92:28:21:89:a0:03:fc:94: ad:94:15:87:9a:ff:aa:85:03:08:ca:69:a6:09:56:d5:82:e5: 26:eb:89:5f:ac:6a:da:a1:bf:33:c7:1e:d1:bd:6a:c6:ee:e4: 1d:dd:40:16:e5:f6:4e:fd:aa:14:70:e6:61:0c:f8:1e:87:3b: ec:88:ca:64:90:9d:ee:dd:fd:e8:50:dd:28:1a:26:73:db:8d: c5:10:cc:54:5d:b5:a7:b1:9e:c3:c5:73:81:22:34:cc:ea:e1: 79:24:e7:dd:7b:65:e4:27:1e:37:73:e5:86:3d:ea:27:e2:8f: 47:5b:56:4d:04:2d:3d:de:d3:fe:e4:df:d7:75:3e:b7:f1:1c: 66:70:cc:8c:b7:77:61:36:d0:42:ca:66:51:64:35:7f:65:d4: 95:e7:cd:da:f2:a9:62:9d:7d:44:5d:b3:2c:64:d3:21:9a:83: 25:a0:e3:2c:6b:aa:6a:8e:97:0f:92:cd:a6:12:2b:9e:e7:77: 68:a7:cb:5c -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAn43MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNTA5NDkyMloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRUJEOEYxMTAvBgNVBAUTKDlBRDg5MjhFQUYyNUM1MUNCM0IzMjEx RDQ5QjZCQUI5RjBCOUY2N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZMZHEb9XEzdAVch0koZnrQVVvTIYd6GIM4z7eSo8dqflW3ffH1F2VwllgRnXm xae0KU9500w7tJY7eWk0y4WYxUemq2BZ64SjrNmIytIU+/hlAcK/T8yy8L+wZ51O 15a1+kTTSJGKXAjnQ+LoKyhb+15TcyCDGvd0DNQmhYf5gMGtp7RbshOujSzgpANF 23veMyx4sq1gkhPkcLWVoscZSH4YctGsrj+15tNJxrujQWpKklqnIpe2ktNPtCLL t7cA4WZLykVSDDALUp7BJKHs7iEWOjiRc3+jIRPGpWr5NLvM7AJJdnNm0mrmUfSJ PvRCICy0tdX4fZK1lHi/o0+3AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUmtiSjq8l xRyzsyEdSba6ufC59n8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVCRDhGLzUyRUJDOEM4RDk5QjExRjA4NEY0MzZCMTY1RDM2NDFELzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFQkQ4Ri81MkVCQzhDOEQ5OUIxMUYwODRGNDM2QjE2NUQzNjQxRC9tdGlTanE4 bHhSeXpzeUVkU2JhNnVmQzU5bjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAHLjhgwDQYJKoZIhvcNAQELBQADggEBADuuKpgHofvOxB33mIGe 00BGD9ia/Rt5cpMXiFZ+82KoWL9V5fbHShF37Uu7W+SsB3xAPhcjchC9RMKBI26r hRqSKCGJoAP8lK2UFYea/6qFAwjKaaYJVtWC5SbriV+satqhvzPHHtG9asbu5B3d QBbl9k79qhRw5mEM+B6HO+yIymSQne7d/ehQ3SgaJnPbjcUQzFRdtaexnsPFc4Ei NMzq4Xkk5917ZeQnHjdz5YY96ifij0dbVk0ELT3e0/7k39d1PrfxHGZwzIy3d2E2 0ELKZlFkNX9l1JXnzdryqWKdfURdsyxk0yGagyWg4yxrqmqOlw+SzaYSK57nd2in y1w= -----END CERTIFICATE-----Generated at Fri Dec 19 16:06:32 2025 by rpki-client