This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer File: 1Sj61Lh2q_twrziSIg8pPheRtrw.cer (raw, json) Hash identifier: DJNU7KuJ53Q9v21jqY+CFXDGrqTaXH8IXFseGEPwurI= Subject key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C11 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 19:50:04 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 136042 IP: 103.80.144.0/22 IP: 203.114.252.0/22 IP: 2400:5440::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162833 (0x27c11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 19:50:04 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91CE6C5, serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a9:ac:d3:62:7e:44:14:fb:19:13:22:ee:1c: 8f:ff:22:1c:75:11:b7:84:ac:8a:c9:3c:55:f2:d1: a0:a2:9a:a2:88:74:45:3c:a9:c2:32:e3:37:f7:a6: 8a:b6:8f:f2:34:e5:7c:37:62:bd:21:ab:83:ce:57: c7:f9:3d:ec:31:e1:e3:7b:56:bd:c8:e7:37:f8:ce: b1:21:81:18:5c:7c:51:d7:7e:fe:61:32:32:21:d6: 80:9d:02:10:04:d5:ae:6a:cc:18:ea:af:4b:76:fa: b0:21:ba:ae:96:ec:bb:9a:c2:4d:0b:e1:a1:af:95: 33:d0:a1:bb:0f:83:5f:a3:fc:fe:f0:c7:8c:1b:ba: 58:db:0d:07:be:c7:75:b8:07:d3:d5:cd:fc:00:db: 00:2a:07:5c:70:cb:7d:99:0c:58:62:97:61:86:b3: 2b:a6:23:20:e9:da:3a:98:a6:cd:36:2f:35:dc:02: 8d:e5:19:c9:fd:21:57:7f:16:dc:d2:89:4d:77:79: c8:d1:97:a7:6a:c5:30:67:19:47:16:78:af:6f:9d: 7e:e0:e0:b7:e7:ac:7c:61:58:03:c2:1f:96:e5:49: d4:e0:5f:e1:4b:69:2a:12:59:a6:e0:16:cf:30:e9: 38:91:42:23:47:f6:a0:f1:de:f2:5b:a9:2a:12:8a: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136042 sbgp-ipAddrBlock: critical IPv4: 103.80.144.0/22 203.114.252.0/22 IPv6: 2400:5440::/32 Signature Algorithm: sha256WithRSAEncryption a3:b0:20:df:aa:66:c8:0b:68:66:50:20:20:4e:7f:8e:be:23: d0:3a:22:88:0b:8e:59:f0:f6:37:0d:cc:15:f3:05:29:9c:ce: ef:0b:1b:46:0f:7f:6a:f4:d9:af:b6:f0:e7:9d:7a:a2:75:9c: 5d:9a:57:b8:32:ed:ae:8c:3c:9b:45:55:7f:37:fc:6c:21:ed: 2f:8c:49:5d:8e:b4:fa:26:7d:10:2c:b2:94:84:79:b9:a4:71: b5:7b:c8:c5:98:dc:2b:78:3d:16:58:f5:e1:79:5d:42:20:5a: e2:9d:81:05:c4:b0:6b:36:93:d3:ed:f0:63:cb:dc:b2:c7:77: 90:41:03:a4:fe:f7:e4:ef:1a:ac:88:b4:77:ea:f2:18:8f:bf: 7c:44:91:0a:23:05:f0:0e:7d:af:04:eb:de:52:67:3e:19:ac: d8:00:c0:29:22:97:86:f8:3c:21:a8:96:fa:de:47:82:35:f7: 16:f9:87:17:e3:80:fe:f4:15:73:5b:6c:dc:4a:7b:5a:08:49: e1:e4:c9:26:e6:52:08:1e:e1:ae:14:0c:ef:23:ce:15:b0:87: a1:1a:2d:81:b2:c3:ab:0a:05:ed:3e:28:ac:31:d7:a7:19:cb: 10:65:e9:5b:63:b0:64:28:4d:6b:b9:38:55:e7:7b:9d:b7:a4: 61:84:f5:c9 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAnwRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDE5NTAwNFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQ0U2QzUxMTAvBgNVBAUTKEQ1MjhGQUQ0Qjg3NkFCRkI3MEFGMzg5 MjIyMEYyOTNFMTc5MUI2QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeqazTYn5EFPsZEyLuHI//Ihx1EbeErIrJPFXy0aCimqKIdEU8qcIy4zf3poq2 j/I05Xw3Yr0hq4POV8f5Pewx4eN7Vr3I5zf4zrEhgRhcfFHXfv5hMjIh1oCdAhAE 1a5qzBjqr0t2+rAhuq6W7Luawk0L4aGvlTPQobsPg1+j/P7wx4wbuljbDQe+x3W4 B9PVzfwA2wAqB1xwy32ZDFhil2GGsyumIyDp2jqYps02LzXcAo3lGcn9IVd/FtzS iU13ecjRl6dqxTBnGUcWeK9vnX7g4LfnrHxhWAPCH5blSdTgX+FLaSoSWabgFs8w 6TiRQiNH9qDx3vJbqSoSipoZAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQU1Sj61Lh2 q/twrziSIg8pPheRtrwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNFNkM1L0U4MjY2MDIwQzZDMDExRUM4QUI3NTUzRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDRTZDNS9FODI2NjAyMEM2QzAxMUVDOEFCNzU1M0ZDNEY5QUUwMi8xU2o2MUxo MnFfdHdyemlTSWc4cFBoZVJ0cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhNqMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ1CQAwQCy3L8 MA0EAgACMAcDBQAkAFRAMA0GCSqGSIb3DQEBCwUAA4IBAQCjsCDfqmbIC2hmUCAg Tn+OviPQOiKIC45Z8PY3DcwV8wUpnM7vCxtGD39q9NmvtvDnnXqidZxdmle4Mu2u jDybRVV/N/xsIe0vjEldjrT6Jn0QLLKUhHm5pHG1e8jFmNwreD0WWPXheV1CIFri nYEFxLBrNpPT7fBjy9yyx3eQQQOk/vfk7xqsiLR36vIYj798RJEKIwXwDn2vBOve Umc+GazYAMApIpeG+DwhqJb63keCNfcW+YcX44D+9BVzW2zcSntaCEnh5Mkm5lII HuGuFAzvI84VsIehGi2BssOrCgXtPiisMdenGcsQZelbY7BkKE1ruThV53udt6Rh hPXJ -----END CERTIFICATE-----Generated at Sat Dec 6 10:47:18 2025 by rpki-client