This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer File: BIMvvnDHuIWcoaDj4Fopa7CcXT0.cer (raw, json) Hash identifier: Lpis24GA5jpCBEqvOBO+5zKvOzeJGtxdYzwzAoNAu8U= Subject key identifier: 04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028054 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 23 Dec 2025 12:34:50 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 58736 IP: 43.229.208.0/22 IP: 103.30.188.0/22 IP: 2401:3580::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163924 (0x28054) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 23 12:34:50 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91238EC, serialNumber=04832FBE70C7B8859CA1A0E3E05A296BB09C5D3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ed:fe:41:b9:22:e2:34:0e:ae:e3:17:a9:ac: 37:6a:25:36:bf:0f:4e:46:8f:ba:de:98:6f:74:f8: 24:0d:ce:25:4a:58:72:75:b7:93:5b:07:dc:10:3a: 57:ce:74:3a:b0:98:86:5a:a9:54:1a:af:5b:35:1e: 02:10:33:75:5a:9a:48:00:86:ca:35:c0:47:0e:07: 08:d9:71:f0:ec:43:fb:87:04:2d:04:b5:26:61:4f: f5:47:0f:52:11:31:63:44:4f:27:06:1c:4b:a7:11: 69:74:37:b8:26:e3:a5:74:f6:29:e1:a9:ba:d9:99: aa:65:18:e0:56:b5:b2:37:c2:c6:c3:6b:96:ec:d2: cd:16:83:b1:82:b9:3d:63:f9:ce:46:33:f8:14:96: 43:58:90:cc:62:44:1e:ca:73:d8:39:79:7b:0d:43: 93:7e:85:b1:8e:44:29:a2:3f:f8:c4:eb:9f:65:a2: 23:19:1c:42:53:9d:46:56:04:ce:50:9a:0c:ff:fe: 09:04:5c:1d:fe:7a:16:07:98:3b:6c:28:b4:a2:5f: 2d:fd:0a:2e:e2:51:30:57:c8:56:9a:61:8a:7a:49: 64:34:30:6a:32:6d:f8:53:36:c0:93:e9:b9:cd:c8: 8f:e5:e1:c3:3d:a6:d3:f5:49:ee:53:b5:4a:d1:21: eb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:83:2F:BE:70:C7:B8:85:9C:A1:A0:E3:E0:5A:29:6B:B0:9C:5D:3D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91238EC/61D4F48AE3E611E7AF2F615EC4F9AE02/BIMvvnDHuIWcoaDj4Fopa7CcXT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 58736 sbgp-ipAddrBlock: critical IPv4: 43.229.208.0/22 103.30.188.0/22 IPv6: 2401:3580::/32 Signature Algorithm: sha256WithRSAEncryption d2:fd:39:db:8d:20:e4:90:a3:81:68:17:ed:ae:59:51:de:72: 9a:ac:1d:31:36:01:aa:4b:da:57:b7:5c:a7:85:f1:7d:58:5b: 5d:c4:84:7c:fc:a2:2c:41:0e:24:2d:93:95:55:e7:b8:92:e3: 61:59:99:84:7a:85:55:13:d8:8b:68:83:e2:77:53:2d:b0:64: b7:73:58:99:ec:f0:ce:c7:49:a7:7f:fe:8a:4c:d7:0f:e2:a3: c4:cf:b8:8a:1b:6e:98:d6:ce:28:48:d6:cf:48:93:90:42:a2: 27:51:d5:36:10:18:67:d8:17:0e:35:85:0f:22:67:ab:44:f4: 66:50:55:bd:21:20:98:21:d2:74:2a:58:e9:df:2e:78:2a:fe: de:5b:1e:f4:a0:49:6e:66:ce:d7:6e:34:80:a3:4f:92:68:4c: 5d:97:4b:67:e6:3e:3c:e9:e2:75:89:a6:a7:4d:79:53:95:48: 61:3a:56:7a:a7:80:a2:1a:b0:4b:06:c3:fb:44:53:e5:66:f8: ed:9b:95:7e:86:74:ff:18:53:c6:65:10:4f:a6:e8:1c:a2:e4: ea:f5:d9:d7:21:01:e1:fd:a9:ef:ea:61:b6:dc:b5:7e:b8:c8: 77:9d:a5:1c:05:e1:25:0d:a7:25:2e:57:57:75:9c:a0:d3:a1: 76:8e:7e:26 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAoBUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMzEyMzQ1MFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxMjM4RUMxMTAvBgNVBAUTKDA0ODMyRkJFNzBDN0I4ODU5Q0ExQTBF M0UwNUEyOTZCQjA5QzVEM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY7f5BuSLiNA6u4xeprDdqJTa/D05Gj7remG90+CQNziVKWHJ1t5NbB9wQOlfO dDqwmIZaqVQar1s1HgIQM3VamkgAhso1wEcOBwjZcfDsQ/uHBC0EtSZhT/VHD1IR MWNETycGHEunEWl0N7gm46V09inhqbrZmaplGOBWtbI3wsbDa5bs0s0Wg7GCuT1j +c5GM/gUlkNYkMxiRB7Kc9g5eXsNQ5N+hbGORCmiP/jE659loiMZHEJTnUZWBM5Q mgz//gkEXB3+ehYHmDtsKLSiXy39Ci7iUTBXyFaaYYp6SWQ0MGoybfhTNsCT6bnN yI/l4cM9ptP1Se5TtUrRIes9AgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUBIMvvnDH uIWcoaDj4Fopa7CcXT0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTIzOEVDLzYxRDRGNDhBRTNFNjExRTdBRjJGNjE1RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyMzhFQy82MUQ0RjQ4QUUzRTYxMUU3QUYyRjYxNUVDNEY5QUUwMi9CSU12dm5E SHVJV2NvYURqNEZvcGE3Q2NYVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAOVwMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCK+XQAwQCZx68 MA0EAgACMAcDBQAkATWAMA0GCSqGSIb3DQEBCwUAA4IBAQDS/TnbjSDkkKOBaBft rllR3nKarB0xNgGqS9pXt1ynhfF9WFtdxIR8/KIsQQ4kLZOVVee4kuNhWZmEeoVV E9iLaIPid1MtsGS3c1iZ7PDOx0mnf/6KTNcP4qPEz7iKG26Y1s4oSNbPSJOQQqIn UdU2EBhn2BcONYUPImerRPRmUFW9ISCYIdJ0Kljp3y54Kv7eWx70oEluZs7XbjSA o0+SaExdl0tn5j486eJ1iaanTXlTlUhhOlZ6p4CiGrBLBsP7RFPlZvjtm5V+hnT/ GFPGZRBPpugcouTq9dnXIQHh/anv6mG23LV+uMh3naUcBeElDaclLldXdZyg06F2 jn4m -----END CERTIFICATE-----Generated at Wed Dec 24 12:19:23 2025 by rpki-client