This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer File: 5k3PxJR4oTweMa6HKi-sEL-4lTE.cer (raw, json) Hash identifier: 30YRzoZKenPqv05UCyQsO7zpuk9fR1348hggGHNBNsg= Subject key identifier: E6:4D:CF:C4:94:78:A1:3C:1E:31:AE:87:2A:2F:AC:10:BF:B8:95:31 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027501 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft caRepository: rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 13 Nov 2025 14:24:28 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 23659 IP: 103.235.28.0/22 IP: 202.171.32.0/20 IP: 2401:5200::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161025 (0x27501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 13 14:24:28 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A915F67F, serialNumber=E64DCFC49478A13C1E31AE872A2FAC10BFB89531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:df:2b:b7:6c:19:dd:52:48:35:f1:b4:ef:23: 79:11:68:c6:c1:6d:7d:eb:53:54:8b:c2:37:7a:93: dc:71:69:a9:39:ee:56:3a:3c:4e:2b:8a:c7:82:2c: be:a9:39:53:fa:de:fe:a5:38:44:2d:2f:37:56:84: 88:5e:51:b7:c5:e4:35:ad:3c:ec:9e:8b:92:54:da: ad:2b:e3:73:2d:96:ed:3a:9a:07:25:85:57:89:23: 9f:7b:a5:da:30:3c:88:94:b9:0e:49:5f:9f:03:7a: 27:64:aa:35:c5:28:55:37:e8:ab:e8:45:38:46:d4: c6:2a:81:97:a2:18:5e:f0:5d:92:79:01:12:c2:f5: 39:a5:a8:39:52:61:eb:03:c0:46:8c:30:30:68:b2: 36:8a:3c:fc:50:8c:69:2f:1d:88:6c:be:6b:ad:42: 32:45:58:e9:05:75:64:92:22:57:99:52:29:9e:09: c3:ac:01:64:87:dc:a0:45:e6:e7:00:d3:96:43:1c: 89:16:2d:23:40:c0:2b:4b:d0:73:b3:96:d1:00:84: 3c:40:2a:ee:d5:2e:ad:8a:7e:f6:b0:01:3d:76:2d: bb:f6:b4:6e:ab:2e:c8:35:eb:4c:ca:cd:ed:a0:6a: 67:58:a6:f6:d4:f8:72:22:b6:de:91:74:1a:5e:b7: aa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4D:CF:C4:94:78:A1:3C:1E:31:AE:87:2A:2F:AC:10:BF:B8:95:31 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 23659 sbgp-ipAddrBlock: critical IPv4: 103.235.28.0/22 202.171.32.0/20 IPv6: 2401:5200::/32 Signature Algorithm: sha256WithRSAEncryption 2d:ea:eb:47:e9:13:88:46:91:a7:59:ce:8a:47:35:73:cd:bb: a6:bc:e8:c4:ca:04:b6:b1:81:bc:ee:ea:5a:8e:77:04:ce:31: 0c:60:2f:4e:9c:3d:0f:cd:7d:30:ed:d7:32:42:a6:b9:35:f7: 02:44:34:c6:43:aa:c5:a9:c2:e4:83:4b:33:4c:ed:c3:8b:1b: 52:df:f2:84:57:df:5a:74:81:7e:b1:4d:e7:e6:ff:b0:ca:f2: ef:51:08:f1:62:31:6a:88:b5:55:1a:06:13:7e:8b:36:6e:d3: 9a:a9:b6:7d:47:02:24:b6:57:01:43:e7:5f:fe:d4:02:fb:30: 0f:f8:4b:53:e3:56:64:50:76:96:e7:49:85:5f:89:b8:77:93: 02:f0:42:37:b4:9d:1c:00:86:9c:56:15:3c:39:a0:4d:5c:5e: f4:3d:3b:dd:74:d9:f9:7b:f4:23:23:af:bc:31:c3:80:67:a8: 62:e9:ef:cb:be:0f:9e:39:34:d4:dc:9d:dc:6f:d6:3c:49:02: 24:05:fb:99:63:c2:3e:fd:eb:5c:80:9b:75:31:aa:c0:a5:b9: 1d:e6:0c:04:14:a3:9b:7e:30:69:70:70:c0:08:b7:9b:6a:c0: fa:6d:3e:0f:dd:c5:26:18:de:c5:ec:16:40:20:90:a6:37:ff: 8d:7c:97:8e -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIDAnUBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMzE0MjQyOFoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNUY2N0YxMTAvBgNVBAUTKEU2NERDRkM0OTQ3OEExM0MxRTMxQUU4 NzJBMkZBQzEwQkZCODk1MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCf3yu3bBndUkg18bTvI3kRaMbBbX3rU1SLwjd6k9xxaak57lY6PE4riseCLL6p OVP63v6lOEQtLzdWhIheUbfF5DWtPOyei5JU2q0r43Mtlu06mgclhVeJI597pdow PIiUuQ5JX58DeidkqjXFKFU36KvoRThG1MYqgZeiGF7wXZJ5ARLC9TmlqDlSYesD wEaMMDBosjaKPPxQjGkvHYhsvmutQjJFWOkFdWSSIleZUimeCcOsAWSH3KBF5ucA 05ZDHIkWLSNAwCtL0HOzltEAhDxAKu7VLq2KfvawAT12Lbv2tG6rLsg160zKze2g amdYpvbU+HIitt6RdBpet6r1AgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQU5k3PxJR4 oTweMa6HKi+sEL+4lTEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVGNjdGLzkxQjk4M0M4MUQ4QTExRTJCMEU0OTRFNDA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1RjY3Ri85MUI5ODNDODFEOEExMUUyQjBFNDk0RTQwOEIwMkNEMi81azNQeEpS NG9Ud2VNYTZIS2ktc0VMLTRsVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICXGswNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJn6xwDBATKqyAw DQQCAAIwBwMFACQBUgAwDQYJKoZIhvcNAQELBQADggEBAC3q60fpE4hGkadZzopH NXPNu6a86MTKBLaxgbzu6lqOdwTOMQxgL06cPQ/NfTDt1zJCprk19wJENMZDqsWp wuSDSzNM7cOLG1Lf8oRX31p0gX6xTefm/7DK8u9RCPFiMWqItVUaBhN+izZu05qp tn1HAiS2VwFD51/+1AL7MA/4S1PjVmRQdpbnSYVfibh3kwLwQje0nRwAhpxWFTw5 oE1cXvQ9O9102fl79CMjr7wxw4BnqGLp78u+D545NNTcndxv1jxJAiQF+5ljwj79 61yAm3UxqsCluR3mDAQUo5t+MGlwcMAIt5tqwPptPg/dxSYY3sXsFkAgkKY3/418 l44= -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:12 2025 by rpki-client