This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer File: h9O9fQreBlCeuFrGullInZVAH38.cer (raw, json) Hash identifier: LPaeTYUsMn3DnRa4Cwj9A0oHKojCZZ7ta2s8+lfpn0o= Subject key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D08 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft caRepository: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 09 Dec 2025 13:28:50 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 133898 AS: 134711 IP: 43.227.108.0/22 IP: 103.12.188.0/22 IP: 103.46.220.0/22 IP: 103.197.144.0/22 IP: 203.23.68.0/23 IP: 220.158.188.0/22 IP: 2401:d480::/31 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163080 (0x27d08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 9 13:28:50 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:aa:4c:f1:d4:9b:70:e5:b6:7f:4e:fe:2c: 8b:78:93:14:4d:70:47:54:0f:25:b3:13:03:e6:53: 72:d9:ce:4d:ff:5d:8e:9b:bc:ed:83:49:d6:45:77: 91:4b:58:56:a3:ec:ba:ae:ec:7d:7f:4a:ab:da:b8: 99:b1:c3:d8:d8:18:55:1b:1b:4c:9f:20:5c:4c:d2: 8b:31:7a:4e:96:34:77:bf:71:e2:d4:0d:b3:0e:72: 17:13:48:cc:41:f7:0c:db:2c:6e:86:27:0f:7a:6e: 8a:69:ad:03:24:e1:4c:40:50:53:78:58:cd:75:3a: 7a:dc:fa:bb:26:9d:7b:be:64:61:75:31:56:a0:ba: 06:56:08:c6:a6:ad:7f:ae:a4:a6:b9:ca:38:38:c3: b1:29:52:f7:05:c7:5c:ac:8c:35:4c:77:15:34:0f: e4:f5:f6:e0:23:3a:c1:6f:a7:7c:05:7f:f7:1c:d6: 72:65:97:79:01:79:6e:64:b4:06:00:6d:69:31:31: 7d:b9:2f:04:8b:81:d3:a4:b6:e6:84:9b:26:69:bf: e0:93:b7:c9:94:00:71:eb:d5:19:87:41:3d:7f:95: b0:35:17:ad:7c:b4:c3:99:18:9a:f0:75:f7:5c:cf: 18:5e:c1:bd:00:d3:10:6d:30:b2:3c:cf:f2:d9:6a: 01:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133898 134711 sbgp-ipAddrBlock: critical IPv4: 43.227.108.0/22 103.12.188.0/22 103.46.220.0/22 103.197.144.0/22 203.23.68.0/23 220.158.188.0/22 IPv6: 2401:d480::/31 Signature Algorithm: sha256WithRSAEncryption 37:87:55:a5:8e:62:55:af:1f:1d:9e:60:1f:ba:e1:a3:10:73: 19:f6:b6:18:b1:d1:b5:1d:27:70:2b:e6:c5:34:2b:12:1a:2c: e9:a1:53:45:6c:58:20:f2:2d:c3:ec:88:6c:26:65:88:e5:73: 8a:5f:21:ab:aa:3e:24:37:a5:65:d9:aa:dd:ec:71:2d:6a:8f: 72:75:ca:14:57:3b:b8:c0:5b:01:2c:8b:38:02:16:be:14:6b: da:30:71:98:2c:5e:0c:c8:22:5d:ce:35:60:b9:1e:bf:0b:46: 3c:2c:81:85:c8:7f:36:04:19:a5:78:c7:ed:41:13:d5:03:b6: c3:4e:4a:bf:14:b0:be:f7:35:20:c0:e3:f2:be:f3:b2:41:ac: e5:65:17:0c:a9:fa:aa:db:25:01:ed:3d:ff:42:1d:27:1b:f9: 9f:d6:cd:f9:d1:7d:96:e0:03:1a:39:ce:c7:de:4a:a0:2b:33: e5:61:d0:98:cc:a5:60:b3:ea:e1:a8:de:39:41:81:a3:bf:f2: b4:73:b0:10:34:45:e6:1b:5f:44:c5:12:04:53:84:0f:fc:c2: a0:3e:7e:77:bc:c6:e2:e7:32:c9:33:70:5d:6f:4f:20:08:c3: 61:0b:02:47:8d:4e:4a:04:b4:19:ce:45:5a:fe:5b:f9:3b:fb: f4:65:3a:3e -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIDAn0IMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwOTEzMjg1MFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxM0FFMTMxMTAvBgNVBAUTKDg3RDNCRDdEMEFERTA2NTA5RUI4NUFD NkJBNTk0ODlEOTU0MDFGN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7zKpM8dSbcOW2f07+LIt4kxRNcEdUDyWzEwPmU3LZzk3/XY6bvO2DSdZFd5FL WFaj7Lqu7H1/SqvauJmxw9jYGFUbG0yfIFxM0osxek6WNHe/ceLUDbMOchcTSMxB 9wzbLG6GJw96bopprQMk4UxAUFN4WM11Onrc+rsmnXu+ZGF1MVagugZWCMamrX+u pKa5yjg4w7EpUvcFx1ysjDVMdxU0D+T19uAjOsFvp3wFf/cc1nJll3kBeW5ktAYA bWkxMX25LwSLgdOktuaEmyZpv+CTt8mUAHHr1RmHQT1/lbA1F618tMOZGJrwdfdc zxhewb0A0xBtMLI8z/LZagHHAgMBAAGjggNBMIIDPTAdBgNVHQ4EFgQUh9O9fQre BlCeuFrGullInZVAH38wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNBRTEzLzg5MzYzNTc4MjZGQjExRUNBNzEzNUQ3M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzQUUxMy84OTM2MzU3ODI2RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFy ZUJsQ2V1RnJHdWxsSW5aVkFIMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAgsKAgMCDjcwTAYIKwYBBQUHAQcBAf8EPTA7MCoEAgABMCQDBAIr42wD BAJnDLwDBAJnLtwDBAJnxZADBAHLF0QDBALcnrwwDQQCAAIwBwMFASQB1IAwDQYJ KoZIhvcNAQELBQADggEBADeHVaWOYlWvHx2eYB+64aMQcxn2thix0bUdJ3Ar5sU0 KxIaLOmhU0VsWCDyLcPsiGwmZYjlc4pfIauqPiQ3pWXZqt3scS1qj3J1yhRXO7jA WwEsizgCFr4Ua9owcZgsXgzIIl3ONWC5Hr8LRjwsgYXIfzYEGaV4x+1BE9UDtsNO Sr8UsL73NSDA4/K+87JBrOVlFwyp+qrbJQHtPf9CHScb+Z/WzfnRfZbgAxo5zsfe SqArM+Vh0JjMpWCz6uGo3jlBgaO/8rRzsBA0ReYbX0TFEgRThA/8wqA+fne8xuLn MskzcF1vTyAIw2ELAkeNTkoEtBnORVr+W/k7+/RlOj4= -----END CERTIFICATE-----Generated at Fri Dec 12 02:39:14 2025 by rpki-client