This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer File: ko6KqA2ZpyP2qQIa5eewMqzt23o.cer (raw, json) Hash identifier: 0ya1v4Q9LekoHqaEZ+DblcUS8gPRSqbAS6K/meFs1YQ= Subject key identifier: 92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027FB7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft caRepository: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 20 Dec 2025 12:46:14 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 38722 AS: 55343 IP: 103.227.2.0/23 IP: 202.4.191.0/24 IP: 202.8.30.0/24 IP: 2001:df3:1b80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163767 (0x27fb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 20 12:46:14 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9135A27, serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1c:ff:81:30:81:c2:d1:08:6a:35:b8:d6:ec: 92:16:65:91:85:20:8e:8e:13:94:07:87:77:12:91: ef:3c:1b:d3:8a:fd:49:5b:05:fe:73:01:7c:21:d4: b4:d3:e3:bc:ca:90:b3:5e:39:7d:e0:90:2b:aa:3d: 46:50:13:cc:bb:27:29:02:57:be:3d:2b:5f:f0:83: 99:c7:c2:d1:14:d6:6e:72:8e:e5:16:93:af:80:41: 30:b0:ce:50:00:27:cc:f8:dd:fe:c6:fb:3b:23:b4: c0:9f:8a:7b:30:55:ef:db:5b:45:cc:51:12:5d:1d: b2:a1:ee:d5:0b:85:15:b7:84:05:a4:62:64:e1:97: da:a9:06:28:76:6a:f5:53:a2:9d:01:f7:74:15:4d: 01:6e:ac:76:68:b2:c7:ae:04:51:76:a3:e4:a2:5d: bf:99:c5:38:fa:b5:12:50:b3:64:08:89:f3:50:91: 47:0e:68:6a:00:10:77:1f:20:44:66:77:e2:07:41: 13:e2:19:d4:04:1f:f0:da:ef:2b:7b:cd:59:d5:c2: 3f:8f:bc:db:2c:a8:f7:74:0b:c2:07:8f:86:09:fd: 56:75:fd:c6:d8:99:7a:a1:0e:2e:51:ab:9d:35:cc: 74:68:7c:b0:14:23:c0:fe:2b:93:a2:78:2b:a1:a1: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38722 55343 sbgp-ipAddrBlock: critical IPv4: 103.227.2.0/23 202.4.191.0/24 202.8.30.0/24 IPv6: 2001:df3:1b80::/48 Signature Algorithm: sha256WithRSAEncryption 85:ce:22:79:d5:38:bd:e0:57:4c:74:ef:c7:c0:a9:15:a6:b9: b5:5a:40:0d:0e:59:c5:6c:c5:fe:9d:12:d6:68:bb:5d:5d:a3: 9a:f7:34:97:91:63:77:54:1b:36:0f:46:09:4c:4d:b2:73:41: 3b:40:f4:95:8e:22:18:26:f4:b9:d7:76:c9:61:69:9d:71:d6: 3b:7d:75:53:db:cd:13:c6:9d:f4:0b:cf:48:fd:8f:81:02:f7: 7a:a6:90:90:e5:0e:67:94:18:2f:c0:2c:58:b0:70:1f:86:a3: ae:d3:4d:fe:2d:fb:3e:ea:4d:ab:df:e5:60:44:81:c2:60:d0: 4d:ff:68:fa:c5:bf:e4:ad:e5:22:42:9a:33:e4:21:7d:2a:be: fe:fe:f1:6d:94:b4:aa:f0:cb:25:c2:33:56:12:72:4a:6f:80: a0:07:e9:e0:44:29:38:6c:ad:c6:23:cf:4a:1e:fe:21:6f:8b: 3b:6a:6e:ee:2d:dd:2c:46:a3:e2:6d:d3:4f:8f:3f:b0:72:20: 64:d6:86:28:d3:c9:ce:e5:ee:28:3c:1d:37:b8:81:71:81:e4: 36:81:d8:93:40:55:7a:33:78:34:9f:10:4c:ec:7c:36:7b:81: 70:5e:c6:96:27:cf:e8:2c:cc:81:8a:de:b5:07:db:6c:bd:73: dc:f3:d2:a1 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIDAn+3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMDEyNDYxNFoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAwwIQTkxMzVBMjcxMTAvBgNVBAUTKDkyOEU4QUE4MEQ5OUE3MjNGNkE5MDIx QUU1RTdCMDMyQUNFRERCN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSHP+BMIHC0QhqNbjW7JIWZZGFII6OE5QHh3cSke88G9OK/UlbBf5zAXwh1LTT 47zKkLNeOX3gkCuqPUZQE8y7JykCV749K1/wg5nHwtEU1m5yjuUWk6+AQTCwzlAA J8z43f7G+zsjtMCfinswVe/bW0XMURJdHbKh7tULhRW3hAWkYmThl9qpBih2avVT op0B93QVTQFurHZosseuBFF2o+SiXb+ZxTj6tRJQs2QIifNQkUcOaGoAEHcfIERm d+IHQRPiGdQEH/Da7yt7zVnVwj+PvNssqPd0C8IHj4YJ/VZ1/cbYmXqhDi5Rq501 zHRofLAUI8D+K5OieCuhoYM9AgMBAAGjggMxMIIDLTAdBgNVHQ4EFgQUko6KqA2Z pyP2qQIa5eewMqzt23owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM1QTI3LzlEQzIyMDU0NEE1ODExRjBCOTc3MzE4MEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzNUEyNy85REMyMjA1NDRBNTgxMUYwQjk3NzMxODBDNEY5QUUwMi9rbzZLcUEy WnB5UDJxUUlhNWVld01xenQyM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAJdCAgMA2C8wPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBIDBAFn4wID BADKBL8DBADKCB4wDwQCAAIwCQMHACABDfMbgDANBgkqhkiG9w0BAQsFAAOCAQEA hc4iedU4veBXTHTvx8CpFaa5tVpADQ5ZxWzF/p0S1mi7XV2jmvc0l5Fjd1QbNg9G CUxNsnNBO0D0lY4iGCb0udd2yWFpnXHWO311U9vNE8ad9AvPSP2PgQL3eqaQkOUO Z5QYL8AsWLBwH4ajrtNN/i37PupNq9/lYESBwmDQTf9o+sW/5K3lIkKaM+QhfSq+ /v7xbZS0qvDLJcIzVhJySm+AoAfp4EQpOGytxiPPSh7+IW+LO2pu7i3dLEaj4m3T T48/sHIgZNaGKNPJzuXuKDwdN7iBcYHkNoHYk0BVejN4NJ8QTOx8NnuBcF7GlifP 6CzMgYretQfbbL1z3PPSoQ== -----END CERTIFICATE-----Generated at Wed Dec 24 12:21:07 2025 by rpki-client