This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer File: BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer (raw, json) Hash identifier: /M9uXVOiRqksKNNXpm3eKU8MPEg3Of7nNahq+U5IELo= Subject key identifier: 04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E85 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft caRepository: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 16 Dec 2025 05:15:17 +0000 Certificate not after: Tue 31 Mar 2026 00:00:00 +0000 Subordinate resources: IP: 43.226.16.0/22 IP: 103.45.64.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 07:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163461 (0x27e85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 16 05:15:17 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=A911CC61, serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1e:bc:a1:43:f3:ff:d1:9e:7c:98:8d:4b:c8: ea:f2:8f:ed:36:89:2d:6b:ed:0e:76:e8:0f:77:99: 07:ce:c8:02:f6:c6:83:d8:12:4a:4e:1c:47:c5:e5: 4f:f0:60:92:ce:bd:12:f1:e1:0e:c4:fb:25:75:61: 10:af:29:cb:c7:fa:4a:7d:78:f9:58:c0:d1:a1:9f: 17:46:fe:e1:e8:a7:56:8d:40:3a:c3:01:78:5b:6d: 0a:11:5a:b6:f9:51:ad:d5:aa:a6:28:24:4a:2b:e3: 90:fa:c8:38:9d:ab:d9:90:2e:31:ab:13:bd:3d:dc: f2:08:76:68:22:35:7c:48:7e:fa:d4:a3:87:6c:10: 12:8c:63:a9:a1:2f:3d:7d:f7:1d:f5:10:41:36:3e: e0:86:8b:47:0a:c4:28:a3:80:4c:3f:83:b1:8b:d3: e0:cf:6a:51:fe:90:af:c2:9b:74:b6:2b:d2:b2:8e: ac:dc:14:50:77:b1:04:09:02:b1:39:51:e9:34:45: 4a:67:a4:71:2b:3c:f1:5a:ae:cb:d6:bb:30:ce:b6: d5:98:7c:1a:ba:64:e8:c2:4c:45:90:6b:ab:62:1e: 0c:8e:89:5b:15:b9:3b:83:ea:57:48:96:76:f9:16: a2:ee:53:d5:f9:25:6b:42:0d:06:a4:86:ed:e3:1f: d7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.16.0/22 103.45.64.0/22 Signature Algorithm: sha256WithRSAEncryption b4:48:cd:74:cb:82:f4:ef:94:4c:55:85:24:ac:42:ef:83:7e: 5c:d0:85:94:8e:b8:51:2b:8f:f1:f0:0b:84:c7:87:59:14:ac: 95:61:20:c1:8c:db:1c:03:9a:f7:35:81:4c:72:ad:23:5b:88: 21:b3:d0:e2:6c:31:90:d5:20:5f:28:e7:20:d7:ab:87:05:82: fb:17:88:3c:06:9f:80:75:6e:41:78:2b:68:7d:06:34:13:87: da:58:59:62:8b:d3:ea:d9:53:27:7d:e9:e9:de:6c:0e:6b:6d: 19:c8:c6:d9:66:b6:e2:f5:88:e2:39:8c:d4:29:cc:b3:9f:2f: 28:1e:bc:c4:d5:65:36:32:79:38:7d:34:c9:8e:79:8e:bd:0c: c3:b9:6d:1b:78:2b:0c:96:eb:cc:30:e0:b4:8c:ca:02:7b:59: de:3d:41:91:f7:78:e0:cd:59:05:d9:59:09:f2:3a:d7:c5:ab: 36:52:d7:13:c6:e9:28:02:5f:76:16:61:e1:e0:24:54:21:83: bb:bb:b4:79:9c:5b:4b:c5:f7:62:d4:d8:9b:d0:58:1f:ad:61: db:f2:f4:aa:8b:23:3b:01:1c:d5:8a:1f:d3:2d:47:64:85:85: db:c6:87:72:fd:c6:0b:b9:07:8a:fd:09:55:2b:93:50:8b:3d: c5:8f:13:f1 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIDAn6FMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNjA1MTUxN1oXDTI2MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMUNDNjExMTAvBgNVBAUTKDA0NzQ5MzdFNzlBOUQ2NzMzNTNFQUJE ODJDNEI4NDI0QjZDNjgzMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSHryhQ/P/0Z58mI1LyOryj+02iS1r7Q526A93mQfOyAL2xoPYEkpOHEfF5U/w YJLOvRLx4Q7E+yV1YRCvKcvH+kp9ePlYwNGhnxdG/uHop1aNQDrDAXhbbQoRWrb5 Ua3VqqYoJEor45D6yDidq9mQLjGrE7093PIIdmgiNXxIfvrUo4dsEBKMY6mhLz19 9x31EEE2PuCGi0cKxCijgEw/g7GL0+DPalH+kK/Cm3S2K9KyjqzcFFB3sQQJArE5 Uek0RUpnpHErPPFarsvWuzDOttWYfBq6ZOjCTEWQa6tiHgyOiVsVuTuD6ldIlnb5 FqLuU9X5JWtCDQakhu3jH9eDAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUBHSTfnmp 1nM1PqvYLEuEJLbGgw0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFDQzYxLzMzMUQxNDE4REEzRTExRjA4RkQxRTgzODhFRDM2NDFELzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExQ0M2MS8zMzFEMTQxOERBM0UxMUYwOEZEMUU4Mzg4RUQzNjQxRC9CSFNUZm5t cDFuTTFQcXZZTEV1RUpMYkdndzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU MBIEAgABMAwDBAIr4hADBAJnLUAwDQYJKoZIhvcNAQELBQADggEBALRIzXTLgvTv lExVhSSsQu+DflzQhZSOuFErj/HwC4THh1kUrJVhIMGM2xwDmvc1gUxyrSNbiCGz 0OJsMZDVIF8o5yDXq4cFgvsXiDwGn4B1bkF4K2h9BjQTh9pYWWKL0+rZUyd96ene bA5rbRnIxtlmtuL1iOI5jNQpzLOfLygevMTVZTYyeTh9NMmOeY69DMO5bRt4KwyW 68ww4LSMygJ7Wd49QZH3eODNWQXZWQnyOtfFqzZS1xPG6SgCX3YWYeHgJFQhg7u7 tHmcW0vF92LU2JvQWB+tYdvy9KqLIzsBHNWKH9MtR2SFhdvGh3L9xgu5B4r9CVUr k1CLPcWPE/E= -----END CERTIFICATE-----Generated at Thu Dec 18 10:04:36 2025 by rpki-client