This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer File: 6o2GS70rsdeM2IkKFQThETZ_ehM.cer (raw, json) Hash identifier: 1cgMVa1qKrtw7Lu+10YjeF/mdjZkETo2sFxBP9MhtlU= Subject key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027829 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 26 Nov 2025 03:05:12 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 132069 IP: 103.11.164.0/22 IP: 2402:6500::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161833 (0x27829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 26 03:05:12 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91F6E65, serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5d:b8:46:9b:9b:a5:2b:17:82:f9:1e:e1:17: 8a:0f:93:2a:ca:5a:ec:02:2e:c8:28:4c:1b:f8:4c: 1c:34:fa:d5:58:88:80:5d:96:35:f9:1a:22:ee:3e: 70:36:af:e7:b0:dc:40:91:8e:90:10:bb:52:f1:b0: 4a:e6:c0:ea:04:f0:ff:b0:6f:d1:09:69:6f:7e:a8: c6:23:df:6f:b0:7d:8a:54:c3:ef:28:19:96:15:f4: ad:d8:05:54:67:ef:ca:59:78:3c:63:9a:99:80:44: 62:a0:3c:07:5d:bc:b5:cf:6d:99:39:88:84:be:54: 2e:ca:cc:9d:df:c8:3e:5c:2b:5d:07:94:f6:16:26: 46:f4:78:5a:02:a6:7d:62:8b:3c:c2:a1:bf:c3:cd: 0c:c7:c9:75:db:3a:ee:a0:a3:c2:92:52:88:0f:f7: c4:fe:e1:76:f8:a1:22:53:7a:c5:cd:d3:e2:6d:3d: ae:14:6f:9a:43:b0:72:dc:ef:35:ca:05:3f:e3:c5: 70:64:66:6d:5d:31:d3:a8:18:2c:1f:fe:7e:74:1f: be:47:1e:a6:98:86:f4:5b:86:34:19:88:0e:64:5d: 54:76:70:7c:45:fc:e5:76:9a:43:bb:6c:ed:b8:40: 73:f2:1d:e5:fd:49:4f:58:cc:6a:9c:84:16:6f:06: 0c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 132069 sbgp-ipAddrBlock: critical IPv4: 103.11.164.0/22 IPv6: 2402:6500::/32 Signature Algorithm: sha256WithRSAEncryption 3c:85:66:aa:39:9e:8f:e5:9b:70:8c:1a:82:2e:73:dc:bd:10: 20:7a:96:46:0d:d4:fa:c2:91:f8:03:51:db:a5:45:34:5a:14: 50:5c:25:29:db:af:03:d2:71:f3:75:02:cf:3f:d1:ba:fc:2d: ca:18:d2:a2:36:40:19:b0:69:83:8b:bb:89:86:34:53:ae:99: e4:8c:a2:fc:4f:2d:05:2a:4b:0c:c5:e3:4c:67:b3:60:59:dd: c4:95:cb:74:6b:11:c0:17:89:0b:88:2b:29:39:e4:07:e3:ab: 51:13:63:0b:21:c7:1f:06:b8:72:23:0d:4e:40:bb:46:0c:0c: c5:dc:35:6a:60:ff:f4:af:a0:9e:24:e7:11:ca:bd:c0:4e:d9: d8:ea:ee:16:99:c4:4d:cd:f4:d7:4d:0d:ed:5d:7c:5a:3c:55: 21:29:7d:8f:82:bd:2c:8c:9b:81:c1:b5:b0:8a:78:ef:a0:8d: 4f:b7:41:23:e9:6f:88:8b:6e:ca:ee:ac:32:5c:85:3d:5d:52: 57:fb:ad:1e:9d:ed:6b:67:f2:c8:ec:d4:d5:b4:6b:80:e8:40: b9:2a:30:41:41:11:a7:6c:54:68:c6:32:d6:53:ce:6c:e7:6d: 05:e0:b5:fc:fc:d5:ff:36:48:16:05:d9:9f:d5:85:21:8e:62: ca:d1:24:28 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAngpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNjAzMDUxMloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjZFNjUxMTAvBgNVBAUTKEVBOEQ4NjRCQkQyQkIxRDc4Q0Q4ODkw QTE1MDRFMTExMzY3RjdBMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRXbhGm5ulKxeC+R7hF4oPkyrKWuwCLsgoTBv4TBw0+tVYiIBdljX5GiLuPnA2 r+ew3ECRjpAQu1LxsErmwOoE8P+wb9EJaW9+qMYj32+wfYpUw+8oGZYV9K3YBVRn 78pZeDxjmpmARGKgPAddvLXPbZk5iIS+VC7KzJ3fyD5cK10HlPYWJkb0eFoCpn1i izzCob/DzQzHyXXbOu6go8KSUogP98T+4Xb4oSJTesXN0+JtPa4Ub5pDsHLc7zXK BT/jxXBkZm1dMdOoGCwf/n50H75HHqaYhvRbhjQZiA5kXVR2cHxF/OV2mkO7bO24 QHPyHeX9SU9YzGqchBZvBgyjAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU6o2GS70r sdeM2IkKFQThETZ/ehMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY2RTY1L0ZFRDkzQTdDRDg4QTExRThBM0VDRkY0REM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGNkU2NS9GRUQ5M0E3Q0Q4OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcw cnNkZU0ySWtLRlFUaEVUWl9laE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgPlMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZwukMA0EAgAC MAcDBQAkAmUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8hWaqOZ6P5ZtwjBqCLnPcvRAg epZGDdT6wpH4A1HbpUU0WhRQXCUp268D0nHzdQLPP9G6/C3KGNKiNkAZsGmDi7uJ hjRTrpnkjKL8Ty0FKksMxeNMZ7NgWd3Elct0axHAF4kLiCspOeQH46tRE2MLIccf BrhyIw1OQLtGDAzF3DVqYP/0r6CeJOcRyr3ATtnY6u4WmcRNzfTXTQ3tXXxaPFUh KX2Pgr0sjJuBwbWwinjvoI1Pt0Ej6W+Ii27K7qwyXIU9XVJX+60ene1rZ/LI7NTV tGuA6EC5KjBBQRGnbFRoxjLWU85s520F4LX8/NX/NkgWBdmf1YUhjmLK0SQo -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:42 2025 by rpki-client