This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer File: 7N0mV0PpIRvOCq3LsCLObzO-CwY.cer (raw, json) Hash identifier: 8SGkzOlSQ4eV6AkYPVbwMRrrrmMpFr6dR5bkQlh1mNI= Subject key identifier: EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027373 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 05 Nov 2025 21:18:56 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 58701 IP: 103.20.89.0/24 IP: 2406:e9c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160627 (0x27373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 5 21:18:56 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91C1710, serialNumber=ECDD265743E9211BCE0AADCBB022CE6F33BE0B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:34:dd:79:e0:40:da:e7:35:b8:8e:3d:62: 93:1a:93:bd:f2:eb:f8:e7:ab:19:15:92:dc:f7:5f: 72:52:9e:a2:7b:63:c5:46:94:c3:0b:dc:1c:15:f3: ad:7d:11:c4:74:40:36:96:05:18:ea:cf:1e:fa:b5: 6c:ae:05:cb:8e:3f:51:f1:63:2c:96:2c:b3:54:88: cb:d6:1b:02:6e:73:b1:48:6d:20:54:b8:32:fb:13: 0b:39:60:b3:42:c2:1c:ca:38:66:1e:3e:f5:d9:41: 19:c6:2a:00:71:17:46:62:0e:d2:ac:54:7a:41:24: f1:49:e4:70:29:42:bb:8a:2e:9e:ce:16:44:e2:c7: 32:e9:f6:d4:8e:14:f9:61:b8:e5:d1:fa:b5:04:77: 1a:1b:b4:9d:17:4a:24:8f:66:15:32:9d:93:c6:bb: 51:af:94:29:d8:38:7a:21:e4:b3:b4:b5:60:b8:bd: 64:1d:3f:9f:d2:19:fb:0f:16:00:3e:96:0f:eb:03: de:21:72:cc:fa:7b:87:c1:a4:8c:3d:88:b6:ec:60: 27:62:da:e2:7b:b7:5d:8c:c6:b2:3a:ae:f7:77:23: 7b:28:08:df:4d:7b:eb:a8:54:3e:e6:ca:2a:83:89: 1a:17:b8:92:ee:bf:be:0c:30:8b:c3:b3:93:cc:c4: cc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 58701 sbgp-ipAddrBlock: critical IPv4: 103.20.89.0/24 IPv6: 2406:e9c0::/32 Signature Algorithm: sha256WithRSAEncryption d2:e5:fd:8a:73:fa:3c:30:82:c7:13:e2:06:f7:f5:e0:bb:55: 5e:30:f5:f8:72:33:9e:8a:70:dc:65:cd:9e:29:7c:eb:09:f3: 9d:88:b8:a6:db:aa:2c:cf:d6:c8:9c:dd:2b:37:f2:4e:77:49: 8f:52:6f:71:44:61:45:f0:1f:aa:cd:50:5c:e7:8e:c4:a9:55: f4:76:a4:af:e0:cc:0b:ae:77:4e:0b:1f:41:dd:7c:97:5e:d6: 9f:d0:2d:3d:17:c6:5d:8e:0a:13:d3:b1:0d:47:c3:b5:40:9c: 4b:24:f0:99:82:e2:b0:5d:bb:6e:6c:4c:c6:48:ac:99:9b:fc: 83:90:13:b3:1f:86:96:e7:3e:67:62:a5:b7:bd:2b:90:a9:d2: 24:f3:67:5e:26:6f:a3:11:3c:88:18:2d:f9:ad:48:79:73:44: ab:57:50:42:58:98:df:ae:7e:ed:b7:23:db:fd:79:e7:6f:d6: 31:35:b8:b2:65:1d:92:73:e1:b5:74:e9:b3:62:ad:3b:c0:9d: a6:75:9f:a0:cd:39:cc:b2:8c:cf:5e:02:d9:70:78:e4:76:3d: f7:89:a4:f1:f9:a3:be:94:25:67:4f:88:b5:3a:49:63:3a:bc: f9:ea:15:fb:51:ef:36:99:10:d5:fd:17:2e:ed:44:18:10:db: ec:34:be:63 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnNzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNTIxMTg1NloXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzE3MTAxMTAvBgNVBAUTKEVDREQyNjU3NDNFOTIxMUJDRTBBQURD QkIwMjJDRTZGMzNCRTBCMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC83jTdeeBA2uc1uI49YpMak73y6/jnqxkVktz3X3JSnqJ7Y8VGlMML3BwV8619 EcR0QDaWBRjqzx76tWyuBcuOP1HxYyyWLLNUiMvWGwJuc7FIbSBUuDL7Ews5YLNC whzKOGYePvXZQRnGKgBxF0ZiDtKsVHpBJPFJ5HApQruKLp7OFkTixzLp9tSOFPlh uOXR+rUEdxobtJ0XSiSPZhUynZPGu1GvlCnYOHoh5LO0tWC4vWQdP5/SGfsPFgA+ lg/rA94hcsz6e4fBpIw9iLbsYCdi2uJ7t12MxrI6rvd3I3soCN9Ne+uoVD7myiqD iRoXuJLuv74MMIvDs5PMxMwBAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU7N0mV0Pp IRvOCq3LsCLObzO+CwYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUMxNzEwLzE4MjI5QTg2ODI2QjExRUNBMTFCQTUyQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDMTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi83TjBtVjBQ cElSdk9DcTNMc0NMT2J6Ty1Dd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAOVNMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAZxRZMA0EAgAC MAcDBQAkBunAMA0GCSqGSIb3DQEBCwUAA4IBAQDS5f2Kc/o8MILHE+IG9/Xgu1Ve MPX4cjOeinDcZc2eKXzrCfOdiLim26osz9bInN0rN/JOd0mPUm9xRGFF8B+qzVBc 547EqVX0dqSv4MwLrndOCx9B3XyXXtaf0C09F8ZdjgoT07ENR8O1QJxLJPCZguKw XbtubEzGSKyZm/yDkBOzH4aW5z5nYqW3vSuQqdIk82deJm+jETyIGC35rUh5c0Sr V1BCWJjfrn7ttyPb/Xnnb9YxNbiyZR2Sc+G1dOmzYq07wJ2mdZ+gzTnMsozPXgLZ cHjkdj33iaTx+aO+lCVnT4i1OkljOrz56hX7Ue82mRDV/Rcu7UQYENvsNL5j -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:49 2025 by rpki-client