This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer File: tCmPyy2EnY1NcSomJyvLHJbb_l4.cer (raw, json) Hash identifier: 9quYvYb9x0UOQdT0jRvcnOKVsGxv8ihLA9fgVNeGnrE= Subject key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027EC1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 16 Dec 2025 21:48:33 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 24053 AS: 134405 IP: 103.123.232.0/23 IP: 203.34.36.0/24 IP: 2404:e9c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163521 (0x27ec1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 16 21:48:33 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91EC93E, serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:02:6c:38:fb:56:1c:27:83:31:38:05:29:a9: 70:25:ab:44:66:01:86:44:06:0d:c3:13:33:d9:54: 8d:da:10:d3:ae:ed:89:1e:d8:42:0e:d1:54:f4:97: cc:31:d7:80:35:34:64:67:23:4c:c8:5c:88:27:0d: f5:8a:60:3d:d1:18:6e:ec:e0:be:9b:2b:76:42:1e: 2b:5f:e7:85:09:54:44:2d:ac:e1:c5:fc:cf:34:64: d9:d9:33:bf:b8:41:22:8b:f3:e6:e4:fb:f9:11:ca: ac:cf:30:12:4e:dd:b5:8a:8c:bd:9d:a2:ce:51:61: aa:dc:24:a2:dd:4d:bf:e3:04:e2:cf:e9:9b:16:69: c6:4b:5b:73:20:f7:49:f9:e1:e3:2d:a7:dc:43:72: 94:be:9a:59:da:bf:56:44:17:ef:f8:24:ec:55:d4: f9:a0:a9:05:66:14:6d:f5:4f:24:e9:dd:83:f2:6d: e9:a7:8d:76:b5:de:3d:49:22:9d:fb:87:d7:ac:af: c0:9a:b2:bb:88:e3:69:31:98:1a:d5:4b:d8:9f:2e: 06:38:5d:40:15:34:05:72:b2:16:59:52:b5:24:ad: 5f:04:d9:56:ca:76:e0:be:f0:51:0c:4e:df:38:d5: 40:c1:0a:48:eb:23:1d:da:9c:ff:35:3b:87:28:51: 6c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24053 134405 sbgp-ipAddrBlock: critical IPv4: 103.123.232.0/23 203.34.36.0/24 IPv6: 2404:e9c0::/32 Signature Algorithm: sha256WithRSAEncryption 91:f7:78:69:cf:5b:2d:69:1e:a2:14:e8:0e:ff:27:f0:7e:84: 59:2d:4c:8f:12:9c:0c:db:3f:17:18:f5:8e:73:2b:c4:5f:07: 7a:09:43:fe:29:38:a1:e9:d6:71:77:95:01:d9:28:8b:ec:22: ad:1a:15:0f:a5:0d:7f:40:01:19:f0:06:23:e8:3b:23:85:52: 18:ff:c3:89:6d:42:28:c8:c5:91:ac:dc:de:ed:7f:95:93:1c: fc:ba:45:ff:e1:c1:bf:b7:c0:fc:c9:aa:4f:9b:6d:23:10:6f: 01:63:e5:19:3a:0e:21:cb:7a:29:b2:1f:70:f9:19:0d:28:f9: cd:48:6e:49:c0:c9:8c:1f:b0:eb:6b:89:d7:a3:64:36:cd:d9: 8b:21:f7:68:d6:26:c2:f2:29:d3:9a:99:75:50:1f:e0:f8:89: 5b:c2:01:e8:20:bd:f4:e3:c9:63:71:a8:91:ff:4a:42:9b:4c: 8d:c1:e4:18:fd:cf:0f:91:44:da:a0:e6:a9:3f:6c:ee:aa:b8: 63:16:2e:9f:15:f3:19:2c:9a:2f:78:ac:f7:a6:22:7c:42:bf: c6:05:af:19:a7:40:13:b4:e1:61:0d:b5:a5:e7:cb:5a:5c:47: ff:0d:11:04:07:75:6d:ce:92:ef:66:1d:38:12:f0:8f:99:dd: e8:ba:5e:88 -----BEGIN CERTIFICATE----- MIIGMzCCBRugAwIBAgIDAn7BMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNjIxNDgzM1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRUM5M0UxMTAvBgNVBAUTKEI0Mjk4RkNCMkQ4NDlEOEQ0RDcxMkEy NjI3MkJDQjFDOTZEQkZFNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiAmw4+1YcJ4MxOAUpqXAlq0RmAYZEBg3DEzPZVI3aENOu7Yke2EIO0VT0l8wx 14A1NGRnI0zIXIgnDfWKYD3RGG7s4L6bK3ZCHitf54UJVEQtrOHF/M80ZNnZM7+4 QSKL8+bk+/kRyqzPMBJO3bWKjL2dos5RYarcJKLdTb/jBOLP6ZsWacZLW3Mg90n5 4eMtp9xDcpS+mlnav1ZEF+/4JOxV1PmgqQVmFG31TyTp3YPybemnjXa13j1JIp37 h9esr8CasruI42kxmBrVS9ifLgY4XUAVNAVyshZZUrUkrV8E2VbKduC+8FEMTt84 1UDBCkjrIx3anP81O4coUWzRAgMBAAGjggMoMIIDJDAdBgNVHQ4EFgQUtCmPyy2E nY1NcSomJyvLHJbb/l4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVDOTNFLzVBRTc4NTJFOUYyNzExRUNCRjYwRDI3RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFQzkzRS81QUU3ODUyRTlGMjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXky RW5ZMU5jU29tSnl2TEhKYmJfbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICXfUCAwINBTA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAWd76AME AMsiJDANBAIAAjAHAwUAJATpwDANBgkqhkiG9w0BAQsFAAOCAQEAkfd4ac9bLWke ohToDv8n8H6EWS1MjxKcDNs/Fxj1jnMrxF8HeglD/ik4oenWcXeVAdkoi+wirRoV D6UNf0ABGfAGI+g7I4VSGP/DiW1CKMjFkazc3u1/lZMc/LpF/+HBv7fA/MmqT5tt IxBvAWPlGToOIct6KbIfcPkZDSj5zUhuScDJjB+w62uJ16NkNs3ZiyH3aNYmwvIp 05qZdVAf4PiJW8IB6CC99OPJY3Gokf9KQptMjcHkGP3PD5FE2qDmqT9s7qq4YxYu nxXzGSyaL3is96YifEK/xgWvGadAE7ThYQ21pefLWlxH/w0RBAd1bc6S72YdOBLw j5nd6LpeiA== -----END CERTIFICATE-----Generated at Wed Dec 24 12:21:36 2025 by rpki-client