This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer File: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer (raw, json) Hash identifier: p3Pc98Z+CU2bUuSNmMe35BvxhNJSjXzhSRUSDo2gdPw= Subject key identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0275C3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 17 Nov 2025 19:18:06 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 203.21.207.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 17:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161219 (0x275c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 17 19:18:06 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91ECC52, serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dc:ea:40:8b:2b:8f:3d:2f:a0:be:71:4d:38: 46:a6:05:c3:86:2b:2c:36:87:a2:4e:6d:ef:eb:ea: d2:41:0d:c9:a8:bb:5d:ca:0a:94:ed:a1:82:77:ce: 87:e5:0d:c3:50:24:95:05:cf:20:ea:ab:ed:9e:10: a8:fd:60:e2:f5:51:f3:24:ca:93:bc:94:e5:7e:ea: 10:d9:b8:13:67:4c:91:cf:03:eb:2c:42:d3:3e:da: 7c:d2:f5:33:0f:be:1e:5a:57:09:25:e9:ee:49:bd: 8b:5a:14:19:3d:ff:6b:5a:21:db:bc:6c:de:dc:a7: ec:cb:a4:84:9e:2d:8f:87:0f:4f:e8:6e:03:c5:4b: f2:42:97:80:b8:37:f8:e6:3c:6f:5b:97:81:31:62: e8:4f:2e:4e:ec:36:11:c2:79:9f:c1:0e:ee:49:6b: 4f:be:79:ea:a6:fe:db:b7:cd:9b:95:9e:9a:1b:87: da:4b:0d:54:82:f7:88:c2:9c:06:fd:80:5c:bd:6c: 1a:17:4c:e3:d4:97:6b:d6:e6:a1:d8:8a:5c:17:0c: 74:05:f7:70:d0:cb:eb:15:fa:97:17:05:87:f3:ff: e1:a8:e7:f4:47:22:11:08:53:84:78:09:41:81:15: 1b:61:d7:0b:d4:e6:f5:3f:d4:41:f2:6e:e8:e0:82: 93:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.21.207.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:94:93:2c:55:cf:1a:a0:79:c6:73:f1:be:c4:03:78:2d:03: 7e:ee:ca:f2:84:ba:25:6b:ee:b0:e2:4d:36:e5:67:d2:7b:30: 8b:88:b3:28:8a:43:e4:d1:1f:09:dc:26:e3:ee:78:52:14:5a: 9e:dc:a5:af:49:fa:6d:b0:ae:c0:cc:75:c8:49:2f:b7:4a:2a: 56:8b:5f:c4:bf:6a:64:1f:05:92:50:fe:c9:7d:7c:24:c7:8a: bd:c0:ba:84:51:0e:02:27:d6:e6:c5:bf:2f:53:76:c0:aa:10: 4e:9a:b9:4b:2d:be:72:78:4c:ba:5b:7e:f5:56:01:72:b6:f4: 29:7b:6a:d8:05:c6:99:34:4a:d1:d2:da:10:01:38:79:4b:cd: 6a:7e:ff:4b:d2:9f:ad:00:75:b1:fb:b8:ff:84:c5:50:14:f1: a6:24:96:6b:8e:90:f2:b6:38:7f:c2:48:a6:4a:e7:76:b5:9e: 21:84:dc:19:1a:d3:07:df:67:99:d7:ed:eb:54:d5:dd:d3:c8: 71:75:1a:b5:de:8d:19:96:c3:49:e6:5c:aa:66:fa:56:a7:cd: f9:f3:1a:1c:5f:73:b0:53:62:87:25:6f:c0:64:4b:09:63:20: e5:bd:ea:f1:f4:b1:98:7b:02:50:17:28:fe:ed:a2:9c:9d:74: 06:00:ea:9f -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAnXDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNzE5MTgwNloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRUNDNTIxMTAvBgNVBAUTKDRCODU2N0ZCMzg3QkZENzQwNzZCNTA5 NzcwMDEzMkM3QUM4NkU2MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp3OpAiyuPPS+gvnFNOEamBcOGKyw2h6JObe/r6tJBDcmou13KCpTtoYJ3zofl DcNQJJUFzyDqq+2eEKj9YOL1UfMkypO8lOV+6hDZuBNnTJHPA+ssQtM+2nzS9TMP vh5aVwkl6e5JvYtaFBk9/2taIdu8bN7cp+zLpISeLY+HD0/obgPFS/JCl4C4N/jm PG9bl4ExYuhPLk7sNhHCeZ/BDu5Ja0++eeqm/tu3zZuVnpobh9pLDVSC94jCnAb9 gFy9bBoXTOPUl2vW5qHYilwXDHQF93DQy+sV+pcXBYfz/+Go5/RHIhEIU4R4CUGB FRth1wvU5vU/1EHybujggpMXAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUS4Vn+zh7 /XQHa1CXcAEyx6yG5iAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVDQzUyLzY1MjgzNkU4MTM4QTExRUI5N0FFQjQyMEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFQ0M1Mi82NTI4MzZFODEzOEExMUVCOTdBRUI0MjBDNEY5QUUwMi9TNFZuLXpo N19YUUhhMUNYY0FFeXg2eUc1aUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBADLFc8wDQYJKoZIhvcNAQELBQADggEBAEuUkyxVzxqgecZz8b7E A3gtA37uyvKEuiVr7rDiTTblZ9J7MIuIsyiKQ+TRHwncJuPueFIUWp7cpa9J+m2w rsDMdchJL7dKKlaLX8S/amQfBZJQ/sl9fCTHir3AuoRRDgIn1ubFvy9TdsCqEE6a uUstvnJ4TLpbfvVWAXK29Cl7atgFxpk0StHS2hABOHlLzWp+/0vSn60AdbH7uP+E xVAU8aYklmuOkPK2OH/CSKZK53a1niGE3Bka0wffZ5nX7etU1d3TyHF1GrXejRmW w0nmXKpm+lanzfnzGhxfc7BTYoclb8BkSwljIOW96vH0sZh7AlAXKP7topyddAYA 6p8= -----END CERTIFICATE-----Generated at Sun Dec 7 18:54:51 2025 by rpki-client