This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer File: xHI5__XPeIUhf8bKkBt6MngIMfA.cer (raw, json) Hash identifier: jRzxQ8eoLVeyEaPuMTqB0bPCcb6A4gqZeynKQOI9vGU= Subject key identifier: C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027FFF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 22 Dec 2025 11:15:05 +0000 Certificate not after: Thu 28 May 2026 00:00:00 +0000 Subordinate resources: IP: 103.51.36.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163839 (0x27fff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 22 11:15:05 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=A91761A9, serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:63:55:69:82:ac:80:65:6c:89:87:5e:6c:73: d8:09:89:a3:07:64:7f:32:e9:9a:99:6a:83:6c:84: 56:d9:6c:46:0f:cc:1b:07:a9:67:ea:3f:08:be:f0: e3:5d:36:41:7a:95:32:db:b8:7a:be:a8:62:21:66: 79:05:03:f6:d7:8a:e6:b0:93:04:ed:e5:b9:74:fb: ce:2f:23:80:18:e0:41:c8:26:f8:01:69:94:1b:14: 2d:6a:c1:51:32:db:28:83:30:66:20:81:54:35:cd: 79:c6:a0:07:ea:d5:d1:12:3d:ff:4e:56:ee:25:a7: 58:e6:c9:d0:65:72:af:57:69:ba:f0:7e:06:b5:fc: b8:28:c4:0d:d7:a2:ca:7a:6a:70:db:04:25:ea:cf: 7c:83:e7:dd:cd:42:95:ba:6a:2e:78:2b:d1:3c:d9: 6c:a4:97:ec:af:c7:0d:fe:da:b0:fd:4e:f9:4c:c8: 64:32:1a:13:c6:c8:34:09:48:16:8d:8c:a5:3f:fb: 18:69:35:39:16:7f:9a:af:b5:2f:ff:83:5f:8b:1c: 19:31:36:c7:43:6c:69:4d:74:6c:b9:81:4f:61:c1: 73:3c:07:fe:4e:bd:a5:fb:42:2d:33:9c:18:1a:22: 10:5a:9a:ea:4f:33:76:11:9a:23:56:ba:eb:68:e7: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.51.36.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:34:48:32:50:d8:2a:33:46:11:d4:ec:2b:fa:60:72:21:b2: 17:37:36:08:d9:d5:76:21:2c:6a:cf:e4:0e:4d:9f:90:18:25: b5:74:07:cb:9a:db:c9:d2:c5:b0:0f:38:ba:77:38:86:39:c9: 84:64:ca:49:57:75:b6:0e:31:f7:36:b4:f6:95:56:22:ab:97: 7c:c6:1a:c4:a3:46:72:3f:f6:dc:dc:39:a5:e8:e1:7c:bd:c5: 91:83:d2:a3:6c:13:97:75:b9:da:e9:6d:9b:30:5d:d5:26:c6: d3:c0:a8:5f:cf:fe:5e:ad:b6:3d:67:dd:0b:e1:f6:f0:1a:0f: 90:e0:59:be:95:f9:cb:ce:5b:2c:96:42:9d:9b:8c:1e:a9:ef: 74:26:b4:45:50:b7:74:04:f2:9a:6d:80:c1:f6:71:06:05:b2: ed:16:77:c3:d1:0c:4c:9f:3d:e1:32:e6:a4:fd:f3:23:12:5e: 08:04:06:a0:1e:87:d7:c3:73:85:08:e0:54:7a:08:a2:19:b6: e7:c6:3d:07:3b:92:43:c7:35:62:ad:12:21:c7:d5:59:7d:e4: 3f:40:c9:48:a7:47:6e:87:9c:6d:79:4b:c9:82:9d:7f:69:8a: bc:7b:bc:49:56:55:5a:08:35:2e:3b:9a:96:ac:b1:4c:e3:47: 7c:5b:c8:78 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAn//MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMjExMTUwNVoXDTI2MDUyODAwMDAwMFowRjERMA8G A1UEAwwIQTkxNzYxQTkxMTAvBgNVBAUTKEM0NzIzOUZGRjVDRjc4ODUyMTdGQzZD QTkwMUI3QTMyNzgwODMxRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjY1VpgqyAZWyJh15sc9gJiaMHZH8y6ZqZaoNshFbZbEYPzBsHqWfqPwi+8ONd NkF6lTLbuHq+qGIhZnkFA/bXiuawkwTt5bl0+84vI4AY4EHIJvgBaZQbFC1qwVEy 2yiDMGYggVQ1zXnGoAfq1dESPf9OVu4lp1jmydBlcq9Xabrwfga1/LgoxA3Xosp6 anDbBCXqz3yD593NQpW6ai54K9E82Wykl+yvxw3+2rD9TvlMyGQyGhPGyDQJSBaN jKU/+xhpNTkWf5qvtS//g1+LHBkxNsdDbGlNdGy5gU9hwXM8B/5OvaX7Qi0znBga IhBamupPM3YRmiNWuuto5ykhAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUxHI5//XP eIUhf8bKkBt6MngIMfAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTc2MUE5Lzc1MjhCM0IwREYyNzExRjA4RjY5MUQ2NTY1NkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3NjFBOS83NTI4QjNCMERGMjcxMUYwOEY2OTFENjU2NTZGNTZCQy94SEk1X19Y UGVJVWhmOGJLa0J0Nk1uZ0lNZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAJnMyQwDQYJKoZIhvcNAQELBQADggEBAC40SDJQ2CozRhHU7Cv6 YHIhshc3NgjZ1XYhLGrP5A5Nn5AYJbV0B8ua28nSxbAPOLp3OIY5yYRkyklXdbYO Mfc2tPaVViKrl3zGGsSjRnI/9tzcOaXo4Xy9xZGD0qNsE5d1udrpbZswXdUmxtPA qF/P/l6ttj1n3Qvh9vAaD5DgWb6V+cvOWyyWQp2bjB6p73QmtEVQt3QE8pptgMH2 cQYFsu0Wd8PRDEyfPeEy5qT98yMSXggEBqAeh9fDc4UI4FR6CKIZtufGPQc7kkPH NWKtEiHH1Vl95D9AyUinR26HnG15S8mCnX9pirx7vElWVVoINS47mpassUzjR3xb yHg= -----END CERTIFICATE-----Generated at Tue Dec 23 07:33:11 2025 by rpki-client