This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer File: N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer (raw, json) Hash identifier: O9aMEW6OneVCqjc3BAnjIkGsFQWoddLOloC4J9ydV4U= Subject key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E3C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 15 Dec 2025 10:16:27 +0000 Certificate not after: Mon 31 Aug 2026 00:00:00 +0000 Subordinate resources: IP: 43.243.28.0/22 IP: 103.230.240.0/22 IP: 2401:8b80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 07:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163388 (0x27e3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 15 10:16:27 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:68:2d:07:13:ee:f2:4a:43:fb:b1:ac:15: df:66:1b:0a:4f:80:dc:eb:33:21:b2:e2:81:13:3a: d0:4b:8b:49:52:17:46:77:15:dd:62:39:84:09:70: 15:21:56:45:06:a5:87:24:52:f1:39:24:74:da:68: 5d:5b:61:50:14:57:b1:ce:d7:39:50:85:72:ad:b8: 05:19:51:8b:76:89:c4:bc:be:b1:72:61:55:34:cf: f3:20:dc:5e:14:5d:bb:a7:23:b5:e7:da:ee:8c:4a: 8e:b0:c8:ae:0b:3c:d3:1b:90:87:1a:67:c2:d7:70: d8:b5:b7:ef:5b:0d:c0:4e:f1:dc:0f:a9:7a:3b:f5: 9f:59:5c:8a:52:23:dd:bf:be:a8:dc:f4:3c:9f:e4: 2c:f2:94:9e:66:ee:98:e9:bf:a0:fe:09:31:5d:ca: 2d:86:19:2b:f0:24:bf:23:56:25:7a:d8:66:96:14: f7:3d:8c:bd:58:23:6e:7a:4d:64:9a:9c:19:9e:2f: 73:fb:99:fe:50:21:a3:78:13:7b:91:13:0e:6d:e5: 89:5b:b3:d9:7b:bc:fc:c7:d7:ae:4f:3d:63:16:c5: bb:d2:9e:31:4d:3b:63:3b:84:71:0a:9d:81:ad:f7: 56:4d:be:f5:bb:12:9c:b6:57:07:8a:0d:67:1b:d7: d9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.28.0/22 103.230.240.0/22 IPv6: 2401:8b80::/32 Signature Algorithm: sha256WithRSAEncryption 14:86:94:ed:6c:ca:ef:25:93:b9:c5:e7:7e:84:85:33:ac:9d: 26:49:73:96:57:d6:1e:19:cb:12:b0:9b:0a:68:47:59:1d:3d: 77:44:52:ef:ff:b6:91:16:72:2e:aa:bd:e0:07:d9:c0:0e:51: 00:a9:ee:42:20:54:47:85:ff:94:2f:a6:97:85:df:90:11:66: ab:5c:19:eb:b2:ce:22:61:cb:4d:64:9d:cb:99:8c:e5:a8:9e: 99:9f:f2:fe:95:e1:33:b3:c8:15:77:20:2f:85:36:74:ba:c9: ed:c9:22:f8:f8:68:48:a9:32:dd:e2:17:43:75:c5:36:c6:37: 31:b6:b7:7b:07:25:d6:e4:d1:d0:47:3e:c6:1b:db:e5:ea:7f: 97:2c:82:e7:af:7f:51:3e:43:b7:d4:aa:8b:66:8c:45:03:95: f1:73:68:c5:b0:33:6d:75:3a:ed:f9:1a:a6:6a:c7:8c:70:e0: b8:05:8c:b8:6b:d3:ad:c3:d5:bf:7d:9c:86:37:9d:53:66:cf: 12:7b:22:9e:3b:0b:f5:5b:b1:5b:67:0d:b8:f3:6b:7e:57:21: c8:7c:bb:a3:83:7c:91:b5:a6:d6:09:4c:8a:aa:7b:6f:fc:e7: 23:57:c2:97:62:d1:e1:99:42:7a:bd:48:be:74:0b:98:d4:8b: e6:a4:fc:69 -----BEGIN CERTIFICATE----- MIIGEzCCBPugAwIBAgIDAn48MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNTEwMTYyN1oXDTI2MDgzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjMyNTYxMTAvBgNVBAUTKDM3Q0Q5QkIwODZFRjBBRjVBMzJCRDg4 NTQ3NDY4NjgwNkQ5MDk2RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxfmgtBxPu8kpD+7GsFd9mGwpPgNzrMyGy4oETOtBLi0lSF0Z3Fd1iOYQJcBUh VkUGpYckUvE5JHTaaF1bYVAUV7HO1zlQhXKtuAUZUYt2icS8vrFyYVU0z/Mg3F4U XbunI7Xn2u6MSo6wyK4LPNMbkIcaZ8LXcNi1t+9bDcBO8dwPqXo79Z9ZXIpSI92/ vqjc9Dyf5CzylJ5m7pjpv6D+CTFdyi2GGSvwJL8jViV62GaWFPc9jL1YI256TWSa nBmeL3P7mf5QIaN4E3uREw5t5Ylbs9l7vPzH165PPWMWxbvSnjFNO2M7hHEKnYGt 91ZNvvW7Epy2VweKDWcb19k3AgMBAAGjggMIMIIDBDAdBgNVHQ4EFgQUN82bsIbv CvWjK9iFR0aGgG2QlvswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYzMjU2LzFCNTVENzM4RDk5RjExRjA5N0VGQkVGOTY2RDM2NDFELzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGMzI1Ni8xQjU1RDczOEQ5OUYxMUYwOTdFRkJFRjk2NkQzNjQxRC9OODJic0li dkN2V2pLOWlGUjBhR2dHMlFsdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8EJTAj MBIEAgABMAwDBAIr8xwDBAJn5vAwDQQCAAIwBwMFACQBi4AwDQYJKoZIhvcNAQEL BQADggEBABSGlO1syu8lk7nF536EhTOsnSZJc5ZX1h4ZyxKwmwpoR1kdPXdEUu// tpEWci6qveAH2cAOUQCp7kIgVEeF/5QvppeF35ARZqtcGeuyziJhy01kncuZjOWo npmf8v6V4TOzyBV3IC+FNnS6ye3JIvj4aEipMt3iF0N1xTbGNzG2t3sHJdbk0dBH PsYb2+Xqf5csguevf1E+Q7fUqotmjEUDlfFzaMWwM211Ou35GqZqx4xw4LgFjLhr 063D1b99nIY3nVNmzxJ7Ip47C/VbsVtnDbjza35XIch8u6ODfJG1ptYJTIqqe2/8 5yNXwpdi0eGZQnq9SL50C5jUi+ak/Gk= -----END CERTIFICATE-----Generated at Thu Dec 18 10:04:35 2025 by rpki-client