This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer File: nFh2OitDfLKSxGQXuNSO32tXAc8.cer (raw, json) Hash identifier: XUvllVWOJeXska6XoatO/koZwxLUjHqGQwOBTYmmyUM= Subject key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027CAC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft caRepository: rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 12:40:00 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 139811 IP: 103.145.144.0/23 IP: 2405:88c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162988 (0x27cac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 8 12:40:00 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9130683, serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fc:24:07:f9:05:3a:63:bd:b4:1c:5f:af:5f: 15:d5:6f:32:87:35:ed:7a:13:5c:e1:ad:cd:00:ff: 1e:3f:56:d2:af:20:d1:5e:17:95:49:1c:9c:17:a4: 20:98:db:3f:06:52:bb:e2:8f:e2:32:9c:fe:c2:ce: 02:24:c2:72:60:62:26:60:97:2e:c6:7d:b6:57:2f: 53:b8:56:1e:aa:59:b3:1e:30:cb:ab:82:11:9a:7a: 54:1d:ba:d6:f9:87:d1:91:33:14:64:b3:31:74:4e: 7f:10:ac:ba:a8:11:f3:af:93:d2:76:e9:76:3a:a2: ba:37:d0:16:c7:8c:da:3c:0a:d3:b2:6f:67:2d:e8: e8:91:5e:bb:07:9f:d2:c6:30:84:7c:55:cb:11:ca: f2:b0:00:f4:ae:99:3a:e0:72:dd:81:29:85:eb:5e: f8:12:f1:0e:1c:2d:f5:f0:91:52:07:36:64:36:e1: 51:d0:95:56:d0:80:71:df:7b:5d:8b:0a:7e:a4:ca: 34:35:ab:ab:5d:db:bb:6f:76:44:86:38:75:63:d1: 9d:e7:26:91:70:f0:5e:c9:cf:0a:4d:8c:eb:f2:f3: ce:b2:3b:56:16:cd:95:ca:74:e3:d8:db:72:2f:5a: 36:54:e7:82:b9:b9:49:10:f5:15:4e:d8:a7:ff:77: ed:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139811 sbgp-ipAddrBlock: critical IPv4: 103.145.144.0/23 IPv6: 2405:88c0::/32 Signature Algorithm: sha256WithRSAEncryption ac:4c:71:0c:bb:f8:75:12:b5:18:f1:92:18:85:bc:c6:78:97: 0a:31:a1:d5:e1:b5:b5:68:73:88:33:56:62:3c:86:68:76:b5: 93:0e:34:0c:25:f4:b6:aa:88:8e:b7:4b:0f:40:92:e3:22:9a: 53:67:f4:52:01:c4:e5:8f:2e:4b:ba:40:81:6a:5e:7e:56:d9: 27:02:70:88:ee:96:7b:55:f4:26:91:02:22:5d:b1:d2:42:96: 35:ba:e1:bc:30:3d:ba:02:2a:f1:be:ed:97:e0:3e:87:08:50: 17:dc:bf:2b:43:7d:39:0b:44:fc:a1:8b:34:6c:19:5c:05:c8: bc:6d:42:c8:21:94:81:41:e9:c2:89:fa:18:b3:88:ea:84:f2: 41:89:1e:ed:2a:71:37:a7:fb:4f:97:b1:e8:61:fd:6d:dc:26: 6c:1f:27:45:5d:32:57:b4:78:23:48:2a:ce:1a:7d:21:57:6e: c9:d9:9a:f5:07:a9:8b:5c:25:df:f4:66:03:94:64:2d:84:ff: fd:d3:25:02:5b:69:8b:14:6c:fe:7f:85:fa:d9:9a:eb:ba:b3: 10:65:0b:61:cc:04:2c:fc:e5:18:11:7a:ce:df:51:79:5d:0b: 30:45:ed:3f:06:2c:f9:29:e7:4c:0c:43:a3:f0:62:5b:0f:cb: 8e:1e:2c:68 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnysMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwODEyNDAwMFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzA2ODMxMTAvBgNVBAUTKDlDNTg3NjNBMkI0MzdDQjI5MkM0NjQx N0I4RDQ4RURGNkI1NzAxQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK/CQH+QU6Y720HF+vXxXVbzKHNe16E1zhrc0A/x4/VtKvINFeF5VJHJwXpCCY 2z8GUrvij+IynP7CzgIkwnJgYiZgly7GfbZXL1O4Vh6qWbMeMMurghGaelQdutb5 h9GRMxRkszF0Tn8QrLqoEfOvk9J26XY6oro30BbHjNo8CtOyb2ct6OiRXrsHn9LG MIR8VcsRyvKwAPSumTrgct2BKYXrXvgS8Q4cLfXwkVIHNmQ24VHQlVbQgHHfe12L Cn6kyjQ1q6td27tvdkSGOHVj0Z3nJpFw8F7JzwpNjOvy886yO1YWzZXKdOPY23Iv WjZU54K5uUkQ9RVO2Kf/d+07AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUnFh2OitD fLKSxGQXuNSO32tXAc8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTMwNjgzLzUzRDc1NEZFMkE0MjExRUI5QzQ2Q0Q0Q0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzMDY4My81M0Q3NTRGRTJBNDIxMUVCOUM0NkNENENDNEY5QUUwMi9uRmgyT2l0 RGZMS1N4R1FYdU5TTzMydFhBYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiIjMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5GQMA0EAgAC MAcDBQAkBYjAMA0GCSqGSIb3DQEBCwUAA4IBAQCsTHEMu/h1ErUY8ZIYhbzGeJcK MaHV4bW1aHOIM1ZiPIZodrWTDjQMJfS2qoiOt0sPQJLjIppTZ/RSAcTljy5LukCB al5+VtknAnCI7pZ7VfQmkQIiXbHSQpY1uuG8MD26Airxvu2X4D6HCFAX3L8rQ305 C0T8oYs0bBlcBci8bULIIZSBQenCifoYs4jqhPJBiR7tKnE3p/tPl7HoYf1t3CZs HydFXTJXtHgjSCrOGn0hV27J2Zr1B6mLXCXf9GYDlGQthP/90yUCW2mLFGz+f4X6 2ZrrurMQZQthzAQs/OUYEXrO31F5XQswRe0/Biz5KedMDEOj8GJbD8uOHixo -----END CERTIFICATE-----Generated at Fri Dec 19 16:05:15 2025 by rpki-client