This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer File: bRscXsmpziDouF2j9sHjzdQu-Dk.cer (raw, json) Hash identifier: vS2lfaQPE6Ov1f+Lconbgd5fLDFZt1MYL5Sb7/VtexA= Subject key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E40 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 15 Dec 2025 10:29:43 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 43.249.204.0/22 IP: 103.41.64.0/22 IP: 2401:ab80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 07:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163392 (0x27e40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 15 10:29:43 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:3a:bd:de:92:a6:97:82:7b:44:90:2b:b9: 52:83:b9:47:b4:15:63:ac:83:71:5b:cd:3c:88:eb: 14:c3:a0:2b:96:d2:db:0a:6a:4d:b2:d8:51:21:e3: 56:0f:9c:86:eb:97:dd:07:87:57:c4:09:3b:0a:8e: 18:64:d7:cd:f8:fc:ca:c2:87:92:c8:8c:ae:02:98: 33:35:5c:a3:be:6e:b1:27:a3:0c:19:85:15:4f:09: 0f:bf:89:d8:06:db:55:7f:63:c7:ff:11:a8:09:2f: bd:e2:45:ee:d9:14:73:1e:54:d0:19:1f:45:72:32: d2:2c:28:f3:58:c7:c6:0c:66:b3:f3:df:02:92:8a: 26:44:1f:60:af:cb:7f:60:b3:a0:45:d5:e3:ab:9f: 84:7a:14:ba:57:37:5a:33:ee:4f:e0:cc:5a:04:68: df:a5:75:84:12:2f:67:d2:c0:04:06:96:0d:40:9e: a1:90:89:fe:1a:2b:1c:0e:a1:0c:17:0c:5e:fb:99: de:cf:36:80:71:3c:d5:c9:7f:37:16:af:2e:05:43: 5a:54:81:4f:ff:66:a0:6d:ac:a5:e7:4b:ea:90:44: 65:7c:66:9d:25:8a:e6:b8:00:a5:62:54:5e:90:a5: 4f:69:34:b2:ca:db:f1:68:05:10:dc:43:07:ce:8d: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.204.0/22 103.41.64.0/22 IPv6: 2401:ab80::/32 Signature Algorithm: sha256WithRSAEncryption 88:fa:7f:a9:e6:df:64:08:97:a8:94:79:50:4e:9b:66:69:d3: c1:ac:85:ec:64:49:a4:ae:18:69:e3:6c:b6:de:f8:91:c5:27: 39:3f:ab:d3:30:8c:26:7a:7c:a2:69:65:9e:62:fa:b0:cf:9c: 98:04:ec:06:6e:a3:f2:88:ff:7d:a6:c7:03:3c:fd:1c:7e:f0: 6c:42:d8:8a:e0:47:2a:43:61:e6:a1:c9:4c:ce:5d:8c:3a:21: e4:e8:38:3b:3b:1e:76:8b:da:3b:01:ec:ee:b4:a8:ec:00:9d: 84:fe:17:5c:e0:16:7c:3b:9a:10:45:be:c5:f7:1a:36:b3:f1: a8:e0:3e:d1:56:88:9b:38:78:96:c7:8b:2c:2f:51:1d:8c:d0: c6:d2:98:5c:b3:75:f6:32:7b:4e:2e:b1:29:e6:53:66:b9:38: 53:2d:3c:9b:67:02:17:80:9a:af:85:9b:72:3e:8d:a6:cc:12: 98:95:72:84:1a:0b:d9:d9:d7:4e:1c:c0:e1:e5:3e:06:12:6c: c0:f5:86:fa:3e:e2:b2:00:0d:b7:74:de:8c:49:98:3c:f6:20: eb:52:7e:23:bd:82:c0:59:f7:48:86:73:de:3d:20:64:16:8d: 59:00:b5:b3:d5:b1:9d:aa:48:c0:8c:a9:b8:e0:6d:5e:27:8c: eb:76:5b:b4 -----BEGIN CERTIFICATE----- MIIGEzCCBPugAwIBAgIDAn5AMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNTEwMjk0M1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjQzNzgxMTAvBgNVBAUTKDZEMUIxQzVFQzlBOUNFMjBFOEI4NURB M0Y2QzFFM0NERDQyRUY4MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCurjq93pKml4J7RJAruVKDuUe0FWOsg3FbzTyI6xTDoCuW0tsKak2y2FEh41YP nIbrl90Hh1fECTsKjhhk1834/MrCh5LIjK4CmDM1XKO+brEnowwZhRVPCQ+/idgG 21V/Y8f/EagJL73iRe7ZFHMeVNAZH0VyMtIsKPNYx8YMZrPz3wKSiiZEH2Cvy39g s6BF1eOrn4R6FLpXN1oz7k/gzFoEaN+ldYQSL2fSwAQGlg1AnqGQif4aKxwOoQwX DF77md7PNoBxPNXJfzcWry4FQ1pUgU//ZqBtrKXnS+qQRGV8Zp0liua4AKViVF6Q pU9pNLLK2/FoBRDcQwfOjcDdAgMBAAGjggMIMIIDBDAdBgNVHQ4EFgQUbRscXsmp ziDouF2j9sHjzdQu+DkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI0Mzc4L0Y2MjkxNDhDRDlBMDExRjA5QTBGQjAxNzY4RDM2NDFELzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNDM3OC9GNjI5MTQ4Q0Q5QTAxMUYwOUEwRkIwMTc2OEQzNjQxRC9iUnNjWHNt cHppRG91RjJqOXNIanpkUXUtRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8EJTAj MBIEAgABMAwDBAIr+cwDBAJnKUAwDQQCAAIwBwMFACQBq4AwDQYJKoZIhvcNAQEL BQADggEBAIj6f6nm32QIl6iUeVBOm2Zp08GshexkSaSuGGnjbLbe+JHFJzk/q9Mw jCZ6fKJpZZ5i+rDPnJgE7AZuo/KI/32mxwM8/Rx+8GxC2IrgRypDYeahyUzOXYw6 IeToODs7HnaL2jsB7O60qOwAnYT+F1zgFnw7mhBFvsX3Gjaz8ajgPtFWiJs4eJbH iywvUR2M0MbSmFyzdfYye04usSnmU2a5OFMtPJtnAheAmq+Fm3I+jabMEpiVcoQa C9nZ104cwOHlPgYSbMD1hvo+4rIADbd03oxJmDz2IOtSfiO9gsBZ90iGc949IGQW jVkAtbPVsZ2qSMCMqbjgbV4njOt2W7Q= -----END CERTIFICATE-----Generated at Thu Dec 18 10:04:35 2025 by rpki-client