This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer File: 2zxJsbLapmnoFyU5XfcR6D-K09E.cer (raw, json) Hash identifier: ZYxVzRLHevoSvXrAlne3thdvtD/EcsQG5AQ/slTCemU= Subject key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A52 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 00:26:38 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 135655 IP: 103.78.50.0/24 IP: 103.151.39.0/24 IP: 2001:df6:1200::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162386 (0x27a52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 00:26:38 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:30:b9:d4:34:37:dc:06:51:43:ac:91:b4: 58:6a:ce:49:23:bc:a1:23:06:04:4e:74:73:a0:c6: ff:e5:4a:b1:5d:93:a3:1c:db:9f:1a:18:80:d6:f6: 40:72:a2:b4:81:b0:92:d3:8d:8d:d6:28:6f:6f:fa: 2a:5a:92:c7:84:ab:89:fc:b3:d0:4a:1f:12:74:24: f8:d3:3e:d8:fc:68:9f:7d:d8:d2:2f:07:0e:71:86: a9:75:13:57:4a:45:e9:fa:d4:cf:b4:88:3b:93:24: cb:61:7b:8c:7f:c1:b4:08:42:54:ad:96:bb:d8:0b: c9:eb:a1:2e:3c:7e:4c:56:f7:c5:9f:ab:ef:da:63: 8e:16:d5:c4:45:0b:b6:5f:b4:8e:b4:40:98:24:40: ca:b0:12:66:ec:55:33:2b:5b:1c:7f:89:5d:f1:44: f1:0e:91:42:57:43:5e:c4:a4:de:a3:72:d8:c3:11: 60:38:5e:19:5c:de:21:99:c8:61:c7:74:d5:fe:45: 5f:00:37:85:03:ef:e5:2c:9a:eb:3a:2f:6e:3e:0b: 30:fc:c4:24:95:10:0b:8c:d5:b3:ce:36:eb:9f:85: 22:23:66:0a:b6:87:92:6b:c4:27:66:2f:57:25:b2: 2d:1e:0e:d8:b6:26:50:1c:77:91:c3:5d:76:2a:f2: 6a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135655 sbgp-ipAddrBlock: critical IPv4: 103.78.50.0/24 103.151.39.0/24 IPv6: 2001:df6:1200::/48 Signature Algorithm: sha256WithRSAEncryption 9a:93:d6:bb:08:d7:f4:0f:f9:a1:c0:84:20:8c:f0:51:97:72: 14:46:c6:cb:06:52:b2:dd:10:f3:0b:71:db:7e:af:c7:4a:ba: 92:ba:d2:5d:d7:ba:7f:0f:90:73:de:77:ae:7d:07:09:c4:37: ea:57:2e:56:d9:2b:7f:c1:84:58:90:f6:33:72:f7:57:bf:49: f1:d7:18:ee:12:41:17:f7:3c:b2:64:84:d2:30:a0:a7:dc:40: b2:bf:07:62:59:7f:b1:1d:e2:85:ba:67:63:10:d0:fb:fd:d6: a4:4c:0a:30:fc:d8:bd:a8:e9:e4:90:ee:72:98:a1:d8:e9:25: 47:d1:c8:7b:c3:c2:f9:fd:21:8b:7b:bd:52:17:48:12:d8:80: d3:de:e3:1f:c2:22:98:22:5f:35:1a:4c:8b:f5:9e:3e:17:b4: 51:12:f5:fb:70:17:6f:b5:ab:a6:07:d9:fc:59:b5:11:60:b9: 42:f5:ff:c4:94:8e:94:db:c3:fd:40:6f:ae:94:7c:4b:92:98: d6:c7:06:56:7c:4f:a3:ac:9f:fc:bd:eb:18:6d:d2:0c:89:d6: d0:c9:f3:66:ba:0c:cb:fc:26:67:03:98:93:c8:17:b6:65:87: 3e:f7:84:cc:2f:55:93:cb:a8:e4:e0:58:fd:b2:64:13:76:39: 96:f2:1f:48 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIDAnpSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjAwMjYzOFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUz OTVERjcxMUU4M0Y4QUQzRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC42jC51DQ33AZRQ6yRtFhqzkkjvKEjBgROdHOgxv/lSrFdk6Mc258aGIDW9kBy orSBsJLTjY3WKG9v+ipakseEq4n8s9BKHxJ0JPjTPtj8aJ992NIvBw5xhql1E1dK Ren61M+0iDuTJMthe4x/wbQIQlStlrvYC8nroS48fkxW98Wfq+/aY44W1cRFC7Zf tI60QJgkQMqwEmbsVTMrWxx/iV3xRPEOkUJXQ17EpN6jctjDEWA4Xhlc3iGZyGHH dNX+RV8AN4UD7+Usmus6L24+CzD8xCSVEAuM1bPONuufhSIjZgq2h5JrxCdmL1cl si0eDti2JlAcd5HDXXYq8mrPAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQU2zxJsbLa pmnoFyU5XfcR6D+K09EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUIxODMzL0ZFNjhFMEIyOEUzMzExRUNBRDY3NDY3NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCMTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JM YXBtbm9GeVU1WGZjUjZELUswOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhHnMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ04yAwQAZ5cn MA8EAgACMAkDBwAgAQ32EgAwDQYJKoZIhvcNAQELBQADggEBAJqT1rsI1/QP+aHA hCCM8FGXchRGxssGUrLdEPMLcdt+r8dKupK60l3Xun8PkHPed659BwnEN+pXLlbZ K3/BhFiQ9jNy91e/SfHXGO4SQRf3PLJkhNIwoKfcQLK/B2JZf7Ed4oW6Z2MQ0Pv9 1qRMCjD82L2o6eSQ7nKYodjpJUfRyHvDwvn9IYt7vVIXSBLYgNPe4x/CIpgiXzUa TIv1nj4XtFES9ftwF2+1q6YH2fxZtRFguUL1/8SUjpTbw/1Ab66UfEuSmNbHBlZ8 T6Osn/y96xht0gyJ1tDJ82a6DMv8JmcDmJPIF7Zlhz73hMwvVZPLqOTgWP2yZBN2 OZbyH0g= -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:56 2025 by rpki-client