This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer File: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer (raw, json) Hash identifier: 2/uvntGrA+G12WI/IA7vPItIsia4QWvua9MqajzoPfk= Subject key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0277AE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 03:44:32 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 150399 IP: 103.30.60.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161710 (0x277ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 03:44:32 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91B31CB, serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:35:53:e4:50:ec:5c:5e:d4:e9:e6:0c:55: 5c:af:e6:5f:4a:23:5c:bc:b8:93:03:e1:1e:e9:d0: 6b:16:5e:39:ae:60:39:3b:8e:1a:ab:d7:0b:15:bc: 4d:3d:29:29:1c:dd:77:01:f8:1e:d7:04:8f:66:1e: 49:4a:96:cb:ad:8a:8b:06:35:c4:d0:0a:75:3f:1e: d0:e0:31:82:68:e8:37:8b:85:e3:f3:83:12:a6:45: 44:2f:93:73:48:13:11:86:4d:b6:ce:5f:57:00:65: be:82:38:dc:ad:0f:ae:3f:55:e5:72:29:9f:ad:65: 99:ad:ec:e7:ed:b3:65:d6:4e:62:2e:ed:ba:33:10: d1:0f:b8:87:cb:82:02:e7:4e:48:bc:18:2d:cd:a8: 97:8b:1e:ad:24:f0:2b:14:d3:c0:b2:50:66:05:20: e1:e2:f0:5b:e1:6e:d5:9d:9d:fb:12:8a:1c:12:08: 97:cb:85:24:0c:ad:24:01:2b:34:a9:0f:4a:b3:fa: 74:e8:54:6a:1d:41:70:39:c7:69:54:a8:8b:3d:29: 98:e1:b0:7a:60:a7:dc:44:1b:88:88:fa:fd:03:73: 42:9a:17:c0:b5:b7:40:5c:bd:d3:54:26:8d:f5:fe: 7a:8c:ae:6b:54:43:4b:a2:3c:8f:c5:73:a8:fc:81: 31:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 150399 sbgp-ipAddrBlock: critical IPv4: 103.30.60.0/23 Signature Algorithm: sha256WithRSAEncryption d4:21:f6:63:2e:26:61:1a:65:8a:57:7a:b0:09:d0:a6:aa:f3: 59:01:c0:01:d1:b3:aa:4f:86:8b:55:be:06:ef:23:65:3c:5b: 11:cf:6c:eb:76:b7:97:51:1e:2d:1b:07:b2:b3:82:6e:4a:f0: db:27:f0:9b:7a:06:2c:af:a6:10:8f:9a:d0:dd:d6:ee:f4:d6: b1:b0:39:d0:25:2c:7e:f8:45:7e:78:92:2d:67:2f:ff:ac:e0: 9d:2a:e5:fa:31:2d:e7:d8:36:93:61:0f:66:8e:d3:70:4c:02: 85:0b:7a:14:76:3f:d1:09:d9:b9:18:54:b4:6b:2b:d0:63:75: b8:0a:c8:a5:56:e6:a7:a0:dc:b4:8f:e2:d2:f2:3f:d4:51:02: 5c:ed:90:ad:f7:1c:33:a4:8f:d1:29:f0:66:46:7a:d0:ae:fa: e9:0d:e2:7b:7c:f6:2a:05:04:1a:42:c1:f4:db:9a:b5:8f:7c: 93:ff:c8:c3:e5:29:a8:87:60:f0:e2:1c:e0:90:e1:57:7f:3f: 27:35:11:27:16:ce:af:75:dd:df:e5:02:fb:c5:b7:40:e9:00: d8:24:08:c4:d6:f4:d8:1a:9c:92:d9:91:8b:64:99:f1:be:8e: d4:9c:9d:88:cf:88:09:fa:08:db:9d:c0:0f:c3:f7:32:e6:a2: 71:f6:23:5f -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAneuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTAzNDQzMloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjMxQ0IxMTAvBgNVBAUTKERGRTRBQ0RDQTBBNjIyNDM2NTRCRDIw OTM2ODIwNTc4RTkyRDI1MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNXjVT5FDsXF7U6eYMVVyv5l9KI1y8uJMD4R7p0GsWXjmuYDk7jhqr1wsVvE09 KSkc3XcB+B7XBI9mHklKlsutiosGNcTQCnU/HtDgMYJo6DeLhePzgxKmRUQvk3NI ExGGTbbOX1cAZb6CONytD64/VeVyKZ+tZZmt7Ofts2XWTmIu7bozENEPuIfLggLn Tki8GC3NqJeLHq0k8CsU08CyUGYFIOHi8FvhbtWdnfsSihwSCJfLhSQMrSQBKzSp D0qz+nToVGodQXA5x2lUqIs9KZjhsHpgp9xEG4iI+v0Dc0KaF8C1t0BcvdNUJo31 /nqMrmtUQ0uiPI/Fc6j8gTHRAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQU3+Ss3KCm IkNlS9IJNoIFeOktJSQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUIzMUNCL0Y0NENDRjdFODlGMDExRUZBRDI2Qjk3QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCMzFDQi9GNDRDQ0Y3RTg5RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tD bUlrTmxTOUlKTm9JRmVPa3RKU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkt/MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZx48MA0GCSqG SIb3DQEBCwUAA4IBAQDUIfZjLiZhGmWKV3qwCdCmqvNZAcAB0bOqT4aLVb4G7yNl PFsRz2zrdreXUR4tGweys4JuSvDbJ/CbegYsr6YQj5rQ3dbu9NaxsDnQJSx++EV+ eJItZy//rOCdKuX6MS3n2DaTYQ9mjtNwTAKFC3oUdj/RCdm5GFS0ayvQY3W4Csil VuanoNy0j+LS8j/UUQJc7ZCt9xwzpI/RKfBmRnrQrvrpDeJ7fPYqBQQaQsH025q1 j3yT/8jD5Smoh2Dw4hzgkOFXfz8nNREnFs6vdd3f5QL7xbdA6QDYJAjE1vTYGpyS 2ZGLZJnxvo7UnJ2Iz4gJ+gjbncAPw/cy5qJx9iNf -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:57 2025 by rpki-client