This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer File: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer (raw, json) Hash identifier: JJtvCUtaB8BdYnOtt4PQFUNI5nvJkcKPOfJTYZX8bA4= Subject key identifier: E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E89 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 16 Dec 2025 08:42:20 +0000 Certificate not after: Mon 31 Aug 2026 00:00:00 +0000 Subordinate resources: AS: 135356 IP: 45.251.104.0/21 IP: 103.150.28.0/24 IP: 103.215.0.0/22 IP: 103.220.72.0/21 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 05:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163465 (0x27e89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 16 08:42:20 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=A91E1887, serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:99:b7:38:c3:0e:a1:ef:23:c7:9e:d4:0e: df:79:2f:e8:1a:7d:8d:a9:fc:85:81:a5:cb:b9:3f: 83:ba:27:2e:b4:39:48:17:6c:6b:f7:1b:8e:c1:5e: 08:91:5b:89:87:7e:56:a9:b9:88:a4:5c:4d:6f:7b: 18:f1:db:d0:8d:72:fc:a3:27:31:15:bf:98:89:31: 7b:46:9a:bd:ef:dc:bc:b0:1c:99:9e:0c:30:1d:d5: 1e:7f:c1:4f:b2:b7:7d:75:24:23:6b:99:2e:72:2b: 7a:48:49:96:bf:8e:0f:27:ab:b2:36:d9:fe:af:9f: 12:39:07:cf:cc:4b:04:06:64:6a:fa:e6:ca:53:a1: 77:7b:b2:9b:c7:d1:0f:e6:5a:29:26:3d:c6:e3:e8: 0f:28:61:db:5f:35:9d:ed:35:29:52:55:0e:1d:91: 4e:c2:72:00:8e:5b:4a:af:c2:cf:37:2b:f5:e2:c7: 3b:1b:ec:9a:6c:76:a7:72:0f:a6:33:f7:1d:f4:63: 79:18:34:b1:1b:ac:12:6f:0a:af:a7:96:38:55:2b: 89:1a:7f:05:a8:9f:2e:49:06:3d:70:58:28:32:11: e4:e3:1e:49:1b:05:82:fe:15:f8:1b:45:f4:d6:7d: 84:24:6f:b9:ca:58:37:21:45:fc:cb:62:09:19:23: 13:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135356 sbgp-ipAddrBlock: critical IPv4: 45.251.104.0/21 103.150.28.0/24 103.215.0.0/22 103.220.72.0/21 Signature Algorithm: sha256WithRSAEncryption 00:18:28:a7:f4:52:dc:f1:9f:6f:1a:85:f8:2c:54:24:68:29: fd:d2:52:98:e1:73:47:62:0d:94:2a:ce:02:bf:53:02:1d:d4: c8:8d:b0:fb:6c:99:82:08:21:0a:4f:5f:38:3b:90:d7:35:65: f7:87:f5:62:46:3b:29:0d:9e:72:0e:2a:8b:1f:9c:d7:e0:d7: dd:c8:d4:1c:8b:8e:f4:61:c7:08:e6:76:f3:2a:07:6f:59:64: 35:36:f0:9f:8b:40:c9:3d:98:db:da:c3:63:09:28:11:65:c7: 55:ef:02:90:2e:06:36:00:ac:e8:52:be:ef:24:11:70:65:87: e4:36:77:43:fb:4a:d3:9b:61:d6:ed:56:ac:f3:4b:94:e5:86: 58:2d:f0:6a:ea:b0:84:07:51:fe:c5:aa:31:2f:13:c0:98:21: c2:40:91:b6:13:c8:d9:de:f0:66:1e:76:da:0a:8b:26:9c:9c: c7:76:71:e8:73:50:b8:e8:19:55:f0:3a:38:c5:25:0b:d2:fe: 75:2a:f3:65:65:0a:61:ac:aa:69:8d:6e:24:51:a8:91:cb:54: 75:2f:ef:3e:fd:3b:c8:f9:95:52:aa:78:c1:54:4a:c5:6f:a7: 6a:9b:ce:90:33:25:b0:72:25:77:2d:a3:5f:23:1e:09:70:bc: d4:f7:56:c6 -----BEGIN CERTIFICATE----- MIIGLDCCBRSgAwIBAgIDAn6JMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNjA4NDIyMFoXDTI2MDgzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTE4ODcxMTAvBgNVBAUTKEUwRTlCOTM5OUI4QTRBNUZEQ0RFMjA5 RkM1QkVDMDc4QUY5NUNGN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9vJm3OMMOoe8jx57UDt95L+gafY2p/IWBpcu5P4O6Jy60OUgXbGv3G47BXgiR W4mHflapuYikXE1vexjx29CNcvyjJzEVv5iJMXtGmr3v3LywHJmeDDAd1R5/wU+y t311JCNrmS5yK3pISZa/jg8nq7I22f6vnxI5B8/MSwQGZGr65spToXd7spvH0Q/m WikmPcbj6A8oYdtfNZ3tNSlSVQ4dkU7CcgCOW0qvws83K/Xixzsb7JpsdqdyD6Yz 9x30Y3kYNLEbrBJvCq+nljhVK4kafwWony5JBj1wWCgyEeTjHkkbBYL+FfgbRfTW fYQkb7nKWDchRfzLYgkZIxODAgMBAAGjggMhMIIDHTAdBgNVHQ4EFgQU4Om5OZuK Sl/c3iCfxb7AeK+Vz3swHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUxODg3Lzg0RUU4QjYwMzU1MTExRUI5RjQxOTUwRUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMTg4Ny84NEVFOEI2MDM1NTExMUVCOUY0MTk1MEVDNEY5QUUwMi80T201T1p1 S1NsX2MzaUNmeGI3QWVLLVZ6M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhC8MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDLftoAwQAZ5Yc AwQCZ9cAAwQDZ9xIMA0GCSqGSIb3DQEBCwUAA4IBAQAAGCin9FLc8Z9vGoX4LFQk aCn90lKY4XNHYg2UKs4Cv1MCHdTIjbD7bJmCCCEKT184O5DXNWX3h/ViRjspDZ5y DiqLH5zX4NfdyNQci470YccI5nbzKgdvWWQ1NvCfi0DJPZjb2sNjCSgRZcdV7wKQ LgY2AKzoUr7vJBFwZYfkNndD+0rTm2HW7Vas80uU5YZYLfBq6rCEB1H+xaoxLxPA mCHCQJG2E8jZ3vBmHnbaCosmnJzHdnHoc1C46BlV8Do4xSUL0v51KvNlZQphrKpp jW4kUaiRy1R1L+8+/TvI+ZVSqnjBVErFb6dqm86QMyWwciV3LaNfIx4JcLzU91bG -----END CERTIFICATE-----Generated at Thu Dec 18 07:41:57 2025 by rpki-client