This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer (raw, json) Hash identifier: GqoIG1DDSrXoVTHp02yGk9fgYz/rDHUHXeYQe9tRL6Q= Subject key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0277A5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 01:34:32 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 103.157.147.0/24 IP: 103.190.70.0/24 IP: 2001:df5:2480::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 07:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161701 (0x277a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 01:34:32 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:1e:09:b8:3d:fd:cd:53:6b:ef:32:68:c3: b2:d9:b7:86:e1:21:c9:1b:87:a1:e7:1d:5d:d7:94: 6d:0b:75:43:4a:08:5d:26:8f:2e:ff:df:88:09:c3: e1:cb:c3:e4:fb:db:fe:80:da:ea:e9:ca:35:1d:4b: 60:aa:90:1e:50:2b:ef:86:7e:70:94:c9:ff:16:47: 3d:5f:73:89:55:50:03:82:82:00:b1:af:c9:d0:dc: 18:d7:f4:13:60:4f:77:7e:a2:c1:a8:6d:10:b7:f0: 5c:93:01:0c:84:2a:72:6e:12:99:ed:52:86:f0:68: 70:9e:f1:46:0f:cc:d5:db:fb:57:a5:ee:f3:ca:ad: e4:b0:6b:59:56:d5:1a:c6:fa:e1:1c:a6:ed:98:d7: 1b:81:df:c3:ac:ce:06:41:d6:e7:09:cb:61:50:c4: 12:4a:4c:7b:89:27:cb:d4:fd:0e:d5:ca:7a:f1:83: 7b:f5:49:3e:7f:32:b7:43:f3:df:b2:e3:9c:41:8b: 43:52:3a:ea:7b:f3:8c:70:c8:7f:2c:2f:34:37:90: c7:b6:07:32:bb:59:3a:27:d5:2d:8c:66:3f:69:6c: 44:f1:8a:89:96:83:80:98:06:a5:a5:63:fd:fc:10: f3:69:36:56:e1:e9:8a:17:9c:c5:c0:80:5b:23:55: 91:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.147.0/24 103.190.70.0/24 IPv6: 2001:df5:2480::/48 Signature Algorithm: sha256WithRSAEncryption d9:04:78:1a:df:ac:e3:b8:7b:50:14:e1:2c:8d:ee:dc:26:58: b4:d9:11:20:3c:5b:97:f6:41:fd:26:51:bd:68:f9:54:c4:5a: cb:9e:92:77:6c:fa:8d:8f:5a:4a:87:03:30:26:06:48:28:8d: 9e:32:1d:7f:96:d6:3f:97:35:7e:e0:8b:dc:52:88:3d:07:63: dc:eb:d7:dd:90:a0:ce:76:ce:5d:5a:a7:10:e1:0e:d0:6e:a6: 78:29:d2:af:25:1c:b6:aa:b3:01:c3:f9:c1:bd:9f:0f:e9:f5: 57:ad:d9:60:ee:a6:84:7e:ac:6d:67:81:58:43:27:1e:6a:c2: 00:03:21:81:24:71:a4:59:e5:3a:27:22:a2:61:0c:f5:2b:2a: f1:04:48:0b:a5:76:3e:a9:18:13:23:00:1a:6a:e6:f5:8a:28: 2a:70:16:70:b8:08:2b:3f:8f:4d:37:d6:b6:62:d5:fa:e6:3c: 14:78:cc:96:0b:51:b9:d8:da:c6:7f:a0:51:87:99:a0:8d:9c: e5:30:1c:8d:c9:22:77:4f:c7:ec:f6:2d:74:28:be:57:46:f9: 10:a1:6f:46:45:eb:a8:36:55:40:92:f4:b0:13:07:1a:cb:29: 6e:2e:e3:4b:37:e6:77:fa:98:3f:77:01:58:3d:1c:2e:15:8d: 54:3b:46:1d -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIDAnelMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTAxMzQzMloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1 ODRCQTVGQkU1NzdCRUUzM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAph4JuD39zVNr7zJow7LZt4bhIckbh6HnHV3XlG0LdUNKCF0mjy7/34gJw+HL w+T72/6A2urpyjUdS2CqkB5QK++GfnCUyf8WRz1fc4lVUAOCggCxr8nQ3BjX9BNg T3d+osGobRC38FyTAQyEKnJuEpntUobwaHCe8UYPzNXb+1el7vPKreSwa1lW1RrG +uEcpu2Y1xuB38OszgZB1ucJy2FQxBJKTHuJJ8vU/Q7Vynrxg3v1ST5/MrdD89+y 45xBi0NSOup784xwyH8sLzQ3kMe2BzK7WTon1S2MZj9pbETxiomWg4CYBqWlY/38 EPNpNlbh6YoXnMXAgFsjVZE1AgMBAAGjggMKMIIDBjAdBgNVHQ4EFgQUCNaM9FAH RTdf8sxYS6X75Xe+4z8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI4RDMzLzU5NjI2NzEwNDc3NzExRUVBNkJENTM3RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCOEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZB SFJUZGY4c3hZUzZYNzVYZS00ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8EJzAl MBIEAgABMAwDBABnnZMDBABnvkYwDwQCAAIwCQMHACABDfUkgDANBgkqhkiG9w0B AQsFAAOCAQEA2QR4Gt+s47h7UBThLI3u3CZYtNkRIDxbl/ZB/SZRvWj5VMRay56S d2z6jY9aSocDMCYGSCiNnjIdf5bWP5c1fuCL3FKIPQdj3OvX3ZCgznbOXVqnEOEO 0G6meCnSryUctqqzAcP5wb2fD+n1V63ZYO6mhH6sbWeBWEMnHmrCAAMhgSRxpFnl OiciomEM9Ssq8QRIC6V2PqkYEyMAGmrm9YooKnAWcLgIKz+PTTfWtmLV+uY8FHjM lgtRudjaxn+gUYeZoI2c5TAcjckid0/H7PYtdCi+V0b5EKFvRkXrqDZVQJL0sBMH Gsspbi7jSzfmd/qYP3cBWD0cLhWNVDtGHQ== -----END CERTIFICATE-----Generated at Thu Dec 4 09:52:58 2025 by rpki-client