This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer File: -r3gfSxVjb3PPDIAdre1X9-gR0A.cer (raw, json) Hash identifier: aZheFFHgvV4xRWMhcAeAyr9TbqDXRSX0IWsE9xkraFE= Subject key identifier: FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02828F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft caRepository: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 31 Dec 2025 19:20:30 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 139790 IP: 103.145.64.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164495 (0x2828f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 31 19:20:30 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A918143E, serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:c0:5c:01:80:22:7f:aa:6d:06:ae:6e:f1: 03:dd:3c:0e:59:fb:f5:cf:5c:00:ee:76:71:a5:6a: b4:5f:08:f8:c9:cc:2c:74:51:24:bb:76:88:58:c9: f5:21:bd:9d:38:b2:80:09:f5:5c:27:eb:42:b7:1f: d1:f3:1d:61:d2:90:fe:64:fb:30:ce:1a:bd:38:a4: 16:65:18:39:6c:d9:25:db:61:0f:1b:11:65:fc:73: 08:12:ef:21:1d:4d:d3:c4:5d:b8:ca:8b:77:e0:67: c4:40:df:ef:06:1f:e3:58:45:96:8b:a8:28:86:7c: 53:03:4f:b5:6c:9d:ff:b6:37:98:9b:0b:67:e4:fd: 62:4d:2c:8e:4d:f9:68:c9:0c:d9:e1:85:94:93:15: 91:74:99:e9:9b:f1:45:5a:c1:ff:51:53:aa:1d:2d: ac:3d:80:7c:22:d7:54:48:5b:6f:fc:87:c8:69:9c: 5c:88:54:dd:65:9e:75:af:65:7c:7d:a4:66:aa:0f: a1:3e:26:c2:86:08:1f:2e:69:ec:c1:c1:61:ab:e3: 21:b8:3f:6c:4a:f5:bc:44:b3:c6:6c:7a:6e:78:66: a5:89:c8:2e:5a:2f:e4:87:2e:36:43:64:de:57:55: 59:ca:e0:07:a9:e3:52:83:b7:a7:d2:a0:77:c5:d3: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139790 sbgp-ipAddrBlock: critical IPv4: 103.145.64.0/23 Signature Algorithm: sha256WithRSAEncryption 37:bc:99:1e:50:c1:2c:a2:29:cb:d8:ea:e4:52:92:4f:c9:f8: e3:b2:02:2d:1f:12:33:c7:48:e9:02:19:b8:68:11:67:b5:91: 7c:75:33:18:1f:69:19:31:3d:22:d0:34:f9:69:e9:f1:2f:d2: 4c:51:2c:75:fa:ec:41:c4:f5:f4:cc:75:10:fa:a2:5c:62:59: 27:85:b4:e7:4f:b7:c9:9f:cf:9d:bf:c7:d5:52:d4:17:57:cb: de:a6:c1:6e:c1:29:6e:38:91:a5:39:0f:c9:d7:e9:fa:6b:36: cc:39:40:f7:1f:6c:a2:ab:2f:3a:07:ed:0e:60:96:19:fb:8d: c6:18:f8:3c:a2:09:dd:5e:fc:61:5b:b6:8d:b7:ae:f0:f0:13: d2:02:19:c0:77:08:41:04:16:e9:2e:df:6b:32:5c:3b:13:ae: 6c:72:4a:04:43:b0:e4:4e:0d:07:ad:bd:58:82:c9:c2:15:60: 40:9f:8a:ff:c9:36:0f:d2:ff:de:35:bc:2a:5d:25:e7:79:6b: ba:2a:53:41:bb:f1:f3:41:3b:16:6c:40:93:0a:32:0c:74:76: c8:1b:f6:77:fe:bd:30:dd:8d:e2:ce:1f:aa:f6:78:d0:d2:01: 5e:79:12:cc:f0:45:4a:62:43:02:f1:f1:e2:db:51:05:04:3b: 0b:08:fe:15 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAoKPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMTE5MjAzMFoXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxODE0M0UxMTAvBgNVBAUTKEZBQkRFMDdEMkM1NThEQkRDRjNDMzIw MDc2QjdCNTVGREZBMDQ3NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJE8BcAYAif6ptBq5u8QPdPA5Z+/XPXADudnGlarRfCPjJzCx0USS7dohYyfUh vZ04soAJ9Vwn60K3H9HzHWHSkP5k+zDOGr04pBZlGDls2SXbYQ8bEWX8cwgS7yEd TdPEXbjKi3fgZ8RA3+8GH+NYRZaLqCiGfFMDT7Vsnf+2N5ibC2fk/WJNLI5N+WjJ DNnhhZSTFZF0memb8UVawf9RU6odLaw9gHwi11RIW2/8h8hpnFyIVN1lnnWvZXx9 pGaqD6E+JsKGCB8uaezBwWGr4yG4P2xK9bxEs8Zsem54ZqWJyC5aL+SHLjZDZN5X VVnK4Aep41KDt6fSoHfF0zPtAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQU+r3gfSxV jb3PPDIAdre1X9+gR0AwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTgxNDNFL0EzQzA3Qjg2Nzk4OTExRUFCQ0JBMjE2NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4MTQzRS9BM0MwN0I4Njc5ODkxMUVBQkNCQTIxNjZDNEY5QUUwMi8tcjNnZlN4 VmpiM1BQRElBZHJlMVg5LWdSMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiIOMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5FAMA0GCSqG SIb3DQEBCwUAA4IBAQA3vJkeUMEsoinL2OrkUpJPyfjjsgItHxIzx0jpAhm4aBFn tZF8dTMYH2kZMT0i0DT5aenxL9JMUSx1+uxBxPX0zHUQ+qJcYlknhbTnT7fJn8+d v8fVUtQXV8vepsFuwSluOJGlOQ/J1+n6azbMOUD3H2yiqy86B+0OYJYZ+43GGPg8 ogndXvxhW7aNt67w8BPSAhnAdwhBBBbpLt9rMlw7E65sckoEQ7DkTg0Hrb1YgsnC FWBAn4r/yTYP0v/eNbwqXSXneWu6KlNBu/HzQTsWbECTCjIMdHbIG/Z3/r0w3Y3i zh+q9njQ0gFeeRLM8EVKYkMC8fHi21EFBDsLCP4V -----END CERTIFICATE-----Generated at Sun Jan 25 02:51:29 2026 by rpki-client