This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer File: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer (raw, json) Hash identifier: J0uiFRtvRx7NBqtnSOQMnq0FE/HOB8mdnh/3hTEF2D0= Subject key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027DA6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 12 Dec 2025 05:27:56 +0000 Certificate not after: Sat 31 Oct 2026 00:00:00 +0000 Subordinate resources: AS: 58643 IP: 43.243.68.0/22 IP: 103.12.148.0/22 IP: 2400:1c80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 07:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163238 (0x27da6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 12 05:27:56 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:a3:af:43:e7:77:c1:3a:fd:2f:04:ca:ff: fc:58:c8:d6:fb:5c:80:f1:bc:f2:7f:54:3a:d6:06: c8:86:a3:0a:31:fe:b5:1b:15:08:ac:82:fe:b4:15: a6:72:90:6d:65:7b:15:95:02:50:84:41:0e:7a:c1: ea:82:c5:ed:b0:e1:97:2e:90:db:81:bc:1a:4a:85: 45:06:4b:e7:cd:e2:af:18:76:8b:43:72:03:38:41: c7:5b:70:d5:09:e1:d2:d5:e1:8c:4a:2e:9e:b0:2d: f2:77:76:f5:a4:d5:35:f7:a4:65:c1:08:19:0b:af: a4:53:ac:0c:fe:bb:c0:8d:29:35:7d:11:b6:9f:f3: 8a:66:b4:77:99:95:5c:4a:54:b2:79:bb:e6:bd:b6: 39:98:78:8d:c7:8e:f3:03:bb:3d:87:82:ee:93:6d: f6:3e:a3:2a:9d:85:1d:e0:d1:14:1e:9e:3e:f1:bc: 4f:27:c7:97:a0:2c:23:da:d1:f3:d2:6f:7d:7f:34: 59:9d:17:62:36:62:6d:9c:ce:29:3d:d9:39:1e:12: 42:86:47:a2:e7:c6:e2:51:25:63:c8:48:64:f0:50: 03:5a:4b:68:41:5c:2d:a9:a2:56:c6:99:74:36:2b: f9:7e:3a:2e:57:69:e2:64:73:85:0e:02:25:9e:ea: 31:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 58643 sbgp-ipAddrBlock: critical IPv4: 43.243.68.0/22 103.12.148.0/22 IPv6: 2400:1c80::/32 Signature Algorithm: sha256WithRSAEncryption 5f:be:95:8f:5b:ad:c4:7d:57:f8:51:ab:05:10:31:c0:5d:1e: 5b:6c:42:aa:b7:46:30:bc:9f:5e:8c:e4:13:e4:40:aa:eb:a2: bf:34:0b:54:54:27:48:c7:10:ad:9b:e0:1e:a7:dd:37:57:53: 51:57:18:ff:c3:71:d4:84:bb:c4:f1:1c:dd:3f:91:0b:07:47: ad:40:c1:28:b0:4d:4a:45:44:29:be:f7:19:10:06:9c:fe:52: 73:46:b5:39:42:36:80:48:53:8f:d4:07:24:fa:f0:e2:4a:bd: 6f:b9:08:da:fd:0e:58:dc:13:46:d6:02:1d:57:83:c4:28:d5: dd:70:0d:ac:8a:ea:55:64:10:b3:50:57:9e:01:7b:8f:69:b6: 97:c9:8c:70:65:02:3b:6f:a1:6c:e0:90:ba:d5:bf:24:c5:ba: aa:2b:9f:51:59:a7:d1:4a:1a:d3:0d:25:b3:c2:a0:dd:49:62: 3b:57:03:c5:8b:8a:f3:d3:c9:8c:ca:a3:07:2b:5c:b6:16:26: fa:5d:fd:2d:2e:32:ae:af:59:db:58:48:8c:4b:c5:cf:00:1b: aa:cc:84:b4:ed:aa:2c:4f:73:c1:88:10:27:fe:ff:df:8c:19: af:c6:dd:e5:1b:4f:5b:ad:3c:8a:15:61:44:6a:55:4e:aa:c8: 85:f8:ea:31 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAn2mMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMjA1Mjc1NloXDTI2MTAzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTU4RkYxMTAvBgNVBAUTKEYyNEYxNDcxNzIzQTY0RTRENTcwREJC MEQ0NEM4MjQzMDU0MjYyNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu7aOvQ+d3wTr9LwTK//xYyNb7XIDxvPJ/VDrWBsiGowox/rUbFQisgv60FaZy kG1lexWVAlCEQQ56weqCxe2w4ZcukNuBvBpKhUUGS+fN4q8YdotDcgM4QcdbcNUJ 4dLV4YxKLp6wLfJ3dvWk1TX3pGXBCBkLr6RTrAz+u8CNKTV9Ebaf84pmtHeZlVxK VLJ5u+a9tjmYeI3HjvMDuz2Hgu6TbfY+oyqdhR3g0RQenj7xvE8nx5egLCPa0fPS b31/NFmdF2I2Ym2czik92TkeEkKGR6LnxuJRJWPISGTwUANaS2hBXC2polbGmXQ2 K/l+Oi5XaeJkc4UOAiWe6jHPAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQU8k8UcXI6 ZOTVcNuw1EyCQwVCYmYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk1OEZGLzRFM0NCNkMwRDcxQjExRjA5QTE0OEQyNTlBRDM2NDFELzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5NThGRi80RTNDQjZDMEQ3MUIxMUYwOUExNDhEMjU5QUQzNjQxRC84azhVY1hJ NlpPVFZjTnV3MUV5Q1F3VkNZbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAOUTMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCK/NEAwQCZwyU MA0EAgACMAcDBQAkAByAMA0GCSqGSIb3DQEBCwUAA4IBAQBfvpWPW63EfVf4UasF EDHAXR5bbEKqt0YwvJ9ejOQT5ECq66K/NAtUVCdIxxCtm+Aep903V1NRVxj/w3HU hLvE8RzdP5ELB0etQMEosE1KRUQpvvcZEAac/lJzRrU5QjaASFOP1Ack+vDiSr1v uQja/Q5Y3BNG1gIdV4PEKNXdcA2siupVZBCzUFeeAXuPabaXyYxwZQI7b6Fs4JC6 1b8kxbqqK59RWafRShrTDSWzwqDdSWI7VwPFi4rz08mMyqMHK1y2Fib6Xf0tLjKu r1nbWEiMS8XPABuqzIS07aosT3PBiBAn/v/fjBmvxt3lG09brTyKFWFEalVOqsiF +Oox -----END CERTIFICATE-----Generated at Thu Dec 18 10:04:34 2025 by rpki-client