This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer File: -Y3cNC9-J7aMoI09R8emmyaVXqE.cer (raw, json) Hash identifier: 7s2qc/piArApj/mPdCdjA+O13Yoq/YGXAqmPpsXqxuo= Subject key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0279DF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft caRepository: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 02:03:21 +0000 Certificate not after: Mon 30 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 151840 IP: 103.241.194.0/23 IP: 2001:df4:74c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162271 (0x279df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 02:03:21 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=A913C68B, serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:45:57:20:e6:03:e5:6e:4e:c6:12:79:ce: 35:d8:df:47:5e:82:8a:cd:ae:8b:26:30:c4:46:4e: 7c:b9:24:02:98:bc:fb:98:d1:95:4d:ed:40:2a:70: 9d:58:06:d7:c8:0b:e1:84:79:74:be:4d:6d:cc:ce: df:79:35:e7:5d:89:68:45:dd:d4:1d:a8:97:1b:fd: 85:96:ff:c6:5d:6f:03:bd:a0:76:31:62:b5:ea:7a: e2:c2:bc:89:7e:dd:f2:72:0a:f1:66:11:e9:b9:1c: 07:b0:f5:e7:d5:7d:d0:dd:6e:1a:27:37:5e:39:8a: 07:45:26:af:9c:ae:ff:cf:b2:9a:69:b0:c1:3e:4b: ec:39:4d:49:0b:bc:fa:26:42:2a:fd:09:84:24:62: 61:17:64:86:bd:e2:40:7e:0a:7e:d6:5c:70:24:f2: 41:b6:9d:8c:d4:3d:13:96:8a:97:56:a3:a3:a6:a4: e5:fe:1a:59:db:32:88:87:f9:56:e8:62:20:a2:0b: b1:be:77:38:12:fa:7e:79:33:f4:35:85:35:ce:b2: e6:8f:22:bc:8a:eb:ba:1c:92:b9:f9:63:a9:0d:92: 63:ca:d7:1a:3f:6c:4d:b9:19:c1:36:7d:52:cb:60: 7a:4a:16:81:07:bd:0d:50:a2:54:c0:c0:83:bd:f9: b0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151840 sbgp-ipAddrBlock: critical IPv4: 103.241.194.0/23 IPv6: 2001:df4:74c0::/48 Signature Algorithm: sha256WithRSAEncryption 56:17:c1:99:8c:ae:b9:d5:5e:e8:bf:97:3d:a4:d1:8d:6d:e9: f1:d3:bf:54:d3:10:ac:80:2c:49:4e:1e:80:e3:b5:4f:51:40: f1:19:1e:7a:1f:8c:a9:8e:39:3d:cc:1b:9f:7e:73:9d:8f:11: 1f:19:3a:a2:96:5a:e6:8c:27:bb:e9:6a:6a:84:fe:be:41:6f: e1:c4:e4:99:cf:7c:be:c1:72:d8:dc:4a:7d:7e:ff:5e:11:37: c9:39:44:0e:a1:f3:1d:c0:6f:ab:24:b6:a6:f0:0b:82:13:ad: a6:15:b9:6c:34:42:c9:1e:40:bb:b6:cc:ff:d2:fb:b8:da:88: a9:20:63:ff:36:48:af:11:d2:71:3a:2b:04:4c:78:66:ee:b3: df:e0:fb:89:3c:e4:1a:1c:3d:d3:a4:13:9d:6e:52:06:60:62: 67:46:4a:7b:f7:84:48:25:b0:92:81:68:c1:08:41:15:f3:f7: 9d:b8:86:26:a9:32:19:9e:ca:68:de:04:03:94:af:78:77:ba: e6:66:35:92:57:cb:10:fe:21:5f:9d:f1:0e:ce:32:38:8b:b3: 34:46:c1:74:f7:04:b1:8b:80:1b:33:11:51:86:5f:88:af:59: 3c:fe:2b:0b:6d:fb:ee:9f:92:99:54:ac:bf:28:3a:fc:fd:ff: ea:56:f8:3f -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnnfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTAyMDMyMVoXDTI2MDMzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxM0M2OEIxMTAvBgNVBAUTKEY5OEREQzM0MkY3RTI3QjY4Q0EwOEQz RDQ3QzdBNjlCMjY5NTVFQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFeUVXIOYD5W5OxhJ5zjXY30degorNrosmMMRGTny5JAKYvPuY0ZVN7UAqcJ1Y BtfIC+GEeXS+TW3Mzt95NeddiWhF3dQdqJcb/YWW/8ZdbwO9oHYxYrXqeuLCvIl+ 3fJyCvFmEem5HAew9efVfdDdbhonN145igdFJq+crv/PspppsME+S+w5TUkLvPom Qir9CYQkYmEXZIa94kB+Cn7WXHAk8kG2nYzUPROWipdWo6OmpOX+GlnbMoiH+Vbo YiCiC7G+dzgS+n55M/Q1hTXOsuaPIryK67ockrn5Y6kNkmPK1xo/bE25GcE2fVLL YHpKFoEHvQ1QolTAwIO9+bDdAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU+Y3cNC9+ J7aMoI09R8emmyaVXqEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNDNjhCLzRFOUMxRjkwNjJEMTExRUVBQTFDODY0REM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzQzY4Qi80RTlDMUY5MDYyRDExMUVFQUExQzg2NERDNEY5QUUwMi8tWTNjTkM5 LUo3YU1vSTA5UjhlbW15YVZYcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlEgMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ/HCMA8EAgAC MAkDBwAgAQ30dMAwDQYJKoZIhvcNAQELBQADggEBAFYXwZmMrrnVXui/lz2k0Y1t 6fHTv1TTEKyALElOHoDjtU9RQPEZHnofjKmOOT3MG59+c52PER8ZOqKWWuaMJ7vp amqE/r5Bb+HE5JnPfL7BctjcSn1+/14RN8k5RA6h8x3Ab6sktqbwC4ITraYVuWw0 QskeQLu2zP/S+7jaiKkgY/82SK8R0nE6KwRMeGbus9/g+4k85BocPdOkE51uUgZg YmdGSnv3hEglsJKBaMEIQRXz9524hiapMhmeymjeBAOUr3h3uuZmNZJXyxD+IV+d 8Q7OMjiLszRGwXT3BLGLgBszEVGGX4ivWTz+Kwtt++6fkplUrL8oOvz9/+pW+D8= -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:29 2025 by rpki-client