This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer File: mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer (raw, json) Hash identifier: dXHADtZUVhErK32ik0HeAOi9V37xQVd3U0/ZYrrgfC0= Subject key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02774C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft caRepository: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 24 Nov 2025 04:19:12 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 4651 -- 4652 AS: 9335 AS: 9931 AS: 18252 AS: 131089 -- 131090 AS: 134565 AS: 135566 AS: 139474 AS: 139591 AS: 152463 IP: 61.7.128.0/17 IP: 61.19.0.0/16 IP: 103.10.228.0/22 IP: 110.77.128.0 -- 110.78.255.255 IP: 114.131.0.0/16 IP: 116.58.224.0/19 IP: 119.42.64.0/18 IP: 122.154.0.0/15 IP: 202.3.68.0/22 IP: 202.6.107.0/24 IP: 202.47.224.0/19 IP: 202.129.0.0/18 IP: 202.139.192.0/19 IP: 2001:c38::/31 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161612 (0x2774c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 24 04:19:12 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:b3:e2:ad:01:12:14:39:98:d1:50:4e:4f: 66:1e:a5:ab:9b:4a:71:d8:b9:a7:35:1c:82:50:da: 5c:41:b5:f6:cf:cb:ee:cb:42:72:11:b4:cb:1a:f1: 9f:ba:80:1f:9e:f2:f8:56:2a:b3:6c:80:cc:c6:7f: 04:6e:8c:de:df:f0:79:ad:c2:12:19:90:42:0d:37: 7f:1d:39:7b:81:1f:b0:5b:f2:2c:1f:10:3e:b6:bd: be:b9:d1:c5:e1:09:f6:d8:8a:09:ab:9b:8e:92:7f: 46:3c:f9:51:82:81:3d:68:0f:4c:bc:4d:8b:4e:c2: 29:2d:e5:f0:0f:d2:05:e2:e7:f6:2f:75:fc:33:a7: 9e:ed:c4:e7:aa:50:2f:ec:18:0e:8d:7a:1d:79:91: 99:81:0e:a1:04:8e:f7:00:a8:2d:fe:70:04:7b:b3: ed:18:20:bf:00:a1:cc:67:1d:12:8c:03:48:6b:84: 66:5e:8f:64:fe:72:f9:3b:b9:bb:66:7a:9f:c3:af: 58:71:33:12:da:d9:e1:1d:b6:af:d6:1a:8c:c5:f1: b7:fe:e3:ea:a0:fe:12:9e:d1:41:e0:d6:37:1f:28: 86:f9:13:f2:ca:ff:b5:e5:ec:d4:4c:23:d9:4a:6d: d3:ef:e7:a5:ad:e3:63:d1:f0:be:a4:92:ec:a6:8f: 59:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 4651-4652 9335 9931 18252 131089-131090 134565 135566 139474 139591 152463 sbgp-ipAddrBlock: critical IPv4: 61.7.128.0/17 61.19.0.0/16 103.10.228.0/22 110.77.128.0-110.78.255.255 114.131.0.0/16 116.58.224.0/19 119.42.64.0/18 122.154.0.0/15 202.3.68.0/22 202.6.107.0/24 202.47.224.0/19 202.129.0.0/18 202.139.192.0/19 IPv6: 2001:c38::/31 Signature Algorithm: sha256WithRSAEncryption 4c:95:4f:36:8c:56:e2:18:dc:59:d8:a9:8e:84:5d:f7:f4:4d: 8d:13:41:4b:a6:f6:67:d9:b6:2c:39:99:1c:f7:86:e3:77:6b: 03:76:ef:a5:26:0a:84:66:e6:47:7c:f2:88:19:39:91:00:06: 3b:e3:8e:b8:07:bf:d7:48:77:41:ef:8a:55:ba:1e:ad:53:59: a4:b6:9c:57:50:6e:4f:a0:af:3d:e0:98:55:8e:bc:a3:56:48: d6:2d:e8:fb:8d:38:a2:4f:2c:e5:01:33:d8:3a:0f:e6:dc:f9: b2:a6:21:44:90:68:39:72:7b:cf:1f:a5:c9:d5:a2:45:ae:f8: 43:af:8c:8d:f7:b2:9a:60:08:a7:97:cb:bb:dd:67:3d:b8:85: 7f:2e:eb:d9:37:d7:46:ec:77:be:0a:14:ea:34:2f:e6:2c:2c: dc:ec:dd:c1:70:e2:d6:c7:ea:b7:97:81:80:92:57:71:80:42: 2a:8a:3f:02:6e:79:c3:72:09:be:d8:41:e3:ed:a9:50:a7:87: 9a:1d:ac:1e:68:3c:b0:49:90:80:54:22:67:be:b7:e6:89:9b: d6:63:14:26:48:66:e3:7b:7d:5b:50:79:34:36:4c:60:20:ed: 0a:dc:24:38:98:fb:81:c3:7b:b9:8f:96:dc:c9:42:ea:2f:01: 00:e2:16:0b -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIDAndMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNDA0MTkxMloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMjU5OEQxMTAvBgNVBAUTKDlBM0E2N0VERENEMDk3NzUzM0E5QTBC OEM0OUY0QzAxMDBDODUzOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCySrPirQESFDmY0VBOT2YepaubSnHYuac1HIJQ2lxBtfbPy+7LQnIRtMsa8Z+6 gB+e8vhWKrNsgMzGfwRujN7f8HmtwhIZkEINN38dOXuBH7Bb8iwfED62vb650cXh CfbYigmrm46Sf0Y8+VGCgT1oD0y8TYtOwikt5fAP0gXi5/Yvdfwzp57txOeqUC/s GA6Neh15kZmBDqEEjvcAqC3+cAR7s+0YIL8AocxnHRKMA0hrhGZej2T+cvk7ubtm ep/Dr1hxMxLa2eEdtq/WGozF8bf+4+qg/hKe0UHg1jcfKIb5E/LK/7Xl7NRMI9lK bdPv56Wt42PR8L6kkuymj1kNAgMBAAGjggOgMIIDnDAdBgNVHQ4EFgQUmjpn7dzQ l3UzqaC4xJ9MAQDIU5EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI1OThEL0I4ODUzMUNBQzhFQzExRjBBMzQ0QUI0NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyNTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9tanBuN2R6 UWwzVXpxYUM0eEo5TUFRRElVNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUAYIKwYBBQUHAQgBAf8EQTA/ oD0wOzAIAgISKwICEiwCAiR3AgImywICR0wwCgIDAgARAgMCABICAwINpQIDAhGO AgMCINICAwIhRwIDAlOPMHoGCCsGAQUFBwEHAQH/BGswaTBYBAIAATBSAwQHPQeA AwMAPRMDBAJnCuQwCwMEB25NgAMDAG5OAwMAcoMDBAV0OuADBAZ3KkADAwF6mgME AsoDRAMEAMoGawMEBcov4AMEBsqBAAMEBcqLwDANBAIAAjAHAwUBIAEMODANBgkq hkiG9w0BAQsFAAOCAQEATJVPNoxW4hjcWdipjoRd9/RNjRNBS6b2Z9m2LDmZHPeG 43drA3bvpSYKhGbmR3zyiBk5kQAGO+OOuAe/10h3Qe+KVboerVNZpLacV1BuT6Cv PeCYVY68o1ZI1i3o+404ok8s5QEz2DoP5tz5sqYhRJBoOXJ7zx+lydWiRa74Q6+M jfeymmAIp5fLu91nPbiFfy7r2TfXRux3vgoU6jQv5iws3OzdwXDi1sfqt5eBgJJX cYBCKoo/Am55w3IJvthB4+2pUKeHmh2sHmg8sEmQgFQiZ7635omb1mMUJkhm43t9 W1B5NDZMYCDtCtwkOJj7gcN7uY+W3MlC6i8BAOIWCw== -----END CERTIFICATE-----Generated at Sat Dec 6 02:42:18 2025 by rpki-client