This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer File: CuIi7F4XpuYytVnUnFse8zLaQ8s.cer (raw, json) Hash identifier: t90SftZO9xrla9GubumrcCBRQQmpB8m1/qCyOB4cH1I= Subject key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A61 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 02:58:30 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 43.251.116.0/22 IP: 103.42.180.0/22 IP: 2401:bb80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 17:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162401 (0x27a61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 02:58:30 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:aa:5d:03:0b:6d:e4:62:bc:fc:1e:63:d4: 2b:fe:af:53:ab:6a:d1:38:b4:c7:73:50:8f:9e:95: a4:60:68:20:c4:2f:bf:03:e5:61:ee:5b:8b:02:ce: de:9c:a9:db:3f:87:c5:12:80:ae:ba:fb:43:87:19: e4:a2:ed:c7:b5:08:ba:e2:c8:17:88:1b:8a:5a:f1: 0b:71:08:2b:93:88:64:db:bb:f6:99:b1:e1:8c:33: ca:ea:8b:a3:4a:15:ae:7a:67:0e:c2:c9:1a:bb:52: ef:a3:8f:dd:11:8e:25:86:92:39:a1:33:e1:27:91: 35:c8:64:d3:67:e3:0e:5e:e2:67:02:37:32:b0:33: 5c:4b:fa:76:ef:18:f2:d2:fe:5d:08:50:7c:ae:fc: 75:71:58:2c:ac:1f:d7:ce:c5:0d:12:09:35:4d:93: f8:fd:1a:79:06:0a:7d:78:fe:ea:13:8a:91:6e:8b: 48:1b:78:98:51:71:f5:3b:df:c7:85:ee:6c:6c:42: 15:70:a6:30:48:80:5c:ea:69:22:52:12:d9:0c:cf: ae:89:44:cc:7a:eb:37:a0:c2:cf:59:01:3c:84:d0: f5:04:25:05:ed:e1:88:e6:d7:5d:79:9e:14:75:d1: 86:8e:1d:7a:b7:54:b4:42:9d:fa:d0:0d:6b:67:09: 5d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.116.0/22 103.42.180.0/22 IPv6: 2401:bb80::/32 Signature Algorithm: sha256WithRSAEncryption 32:98:4b:83:0b:f3:f7:0b:05:77:fb:b3:29:bd:0e:ca:44:dc: e6:27:e1:7a:a4:f1:c5:75:c8:b1:13:26:ac:42:ff:fc:e5:12: ef:82:6b:69:95:96:57:e3:77:b3:a4:26:43:59:1f:b2:a1:8e: 37:10:e2:a9:bb:de:cd:2e:fe:10:e8:97:e2:d0:94:e0:d2:d9: 74:f3:30:83:3d:55:f2:b6:96:2c:32:45:99:6c:bd:51:3a:da: ab:67:aa:0d:22:75:e1:71:49:09:e8:65:e7:b0:bb:c6:bd:2c: 96:5f:95:98:43:5e:18:ae:27:97:bc:b0:ac:ff:44:d7:94:86: fa:c9:20:5d:e1:2a:c4:7f:b8:6a:a0:2e:4e:b5:c0:87:51:da: 6c:76:05:2b:c4:eb:e4:29:a7:c9:8d:1d:e4:43:2b:37:21:f8: 7d:7e:65:6c:bf:63:4b:dd:ec:16:01:eb:f9:73:2a:9c:d1:2d: 98:72:3f:c7:8d:ca:b3:9f:18:3c:09:e0:20:c8:bb:f4:50:4e: d5:1c:c2:ed:fb:0d:e8:0f:7f:47:c0:bc:85:c0:2d:11:f0:3e: af:4e:47:77:ac:80:be:df:42:38:0d:a5:35:97:fa:eb:d5:1d: 24:fb:21:5a:2f:e7:21:6f:0f:5d:55:fa:30:b1:61:e7:a1:97: 6d:c3:30:e5 -----BEGIN CERTIFICATE----- MIIGEzCCBPugAwIBAgIDAnphMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjAyNTgzMFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlE NDlDNUIxRUYzMzJEQTQzQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBQ6pdAwtt5GK8/B5j1Cv+r1OratE4tMdzUI+elaRgaCDEL78D5WHuW4sCzt6c qds/h8USgK66+0OHGeSi7ce1CLriyBeIG4pa8QtxCCuTiGTbu/aZseGMM8rqi6NK Fa56Zw7CyRq7Uu+jj90RjiWGkjmhM+EnkTXIZNNn4w5e4mcCNzKwM1xL+nbvGPLS /l0IUHyu/HVxWCysH9fOxQ0SCTVNk/j9GnkGCn14/uoTipFui0gbeJhRcfU738eF 7mxsQhVwpjBIgFzqaSJSEtkMz66JRMx66zegws9ZATyE0PUEJQXt4Yjm1115nhR1 0YaOHXq3VLRCnfrQDWtnCV3xAgMBAAGjggMIMIIDBDAdBgNVHQ4EFgQUCuIi7F4X puYytVnUnFse8zLaQ8swHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM3QzA0L0EwREIzNTUyNUZCNDExRUJBQjdDNkEyM0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDN0MwNC9BMERCMzU1MjVGQjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0 WHB1WXl0Vm5VbkZzZTh6TGFROHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8EJTAj MBIEAgABMAwDBAIr+3QDBAJnKrQwDQQCAAIwBwMFACQBu4AwDQYJKoZIhvcNAQEL BQADggEBADKYS4ML8/cLBXf7sym9DspE3OYn4Xqk8cV1yLETJqxC//zlEu+Ca2mV llfjd7OkJkNZH7KhjjcQ4qm73s0u/hDol+LQlODS2XTzMIM9VfK2liwyRZlsvVE6 2qtnqg0ideFxSQnoZeewu8a9LJZflZhDXhiuJ5e8sKz/RNeUhvrJIF3hKsR/uGqg Lk61wIdR2mx2BSvE6+Qpp8mNHeRDKzch+H1+ZWy/Y0vd7BYB6/lzKpzRLZhyP8eN yrOfGDwJ4CDIu/RQTtUcwu37DegPf0fAvIXALRHwPq9OR3esgL7fQjgNpTWX+uvV HST7IVov5yFvD11V+jCxYeehl23DMOU= -----END CERTIFICATE-----Generated at Sun Dec 7 18:55:32 2025 by rpki-client