This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer File: 7qM-huKBrRPcYp8y2NU3YK4dAEc.cer (raw, json) Hash identifier: Vol4aVOSrbY35uCIxZN588tOBOrCkhd1+bQjNnowVQc= Subject key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027327 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 04 Nov 2025 23:48:33 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 147178 IP: 103.174.12.0/24 IP: 2001:df7:b280::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160551 (0x27327) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 4 23:48:33 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91F30AE, serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:9e:86:12:bc:98:b4:2c:5e:cf:b7:5f:d4: 3f:8f:5d:b6:c6:69:f5:15:bd:c6:a2:4f:db:5a:19: ff:f0:ab:c4:e6:ca:80:f2:b2:3b:6e:cd:a1:35:cb: 53:54:8f:98:de:d8:63:e5:54:e8:35:74:69:e2:d7: 9c:bf:26:b0:98:3f:29:0b:cb:e8:31:10:17:f2:f6: 75:39:4c:10:e9:8b:06:c4:86:fc:33:c3:d8:25:4e: 1e:b8:f7:35:00:0c:77:b1:84:c2:a6:c0:cf:48:a3: 65:31:55:82:71:02:86:01:bb:03:6a:a4:47:22:02: 3e:cc:ff:2b:32:b4:8b:77:8c:35:df:e7:3a:6f:63: 6e:0f:22:0f:4d:fb:26:1e:03:f9:6f:88:47:82:ec: 78:fa:51:09:ae:c8:cd:28:5d:ab:ad:86:48:83:ca: 09:18:0d:b5:ff:c9:0b:b4:aa:09:75:3c:39:ed:86: 84:29:4d:d6:8e:fb:42:63:b0:10:10:cf:f8:34:8e: e9:3b:58:92:d6:8a:7e:1b:a6:f7:e6:51:c7:9e:e7: d6:56:ee:ff:1f:ea:1b:7b:c6:91:98:3c:d5:4a:26: 0e:aa:7f:7a:0e:98:de:5c:fa:70:4d:cc:3a:e3:6d: 22:02:38:35:22:9b:33:c3:44:66:17:a4:10:0c:45: d0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 147178 sbgp-ipAddrBlock: critical IPv4: 103.174.12.0/24 IPv6: 2001:df7:b280::/48 Signature Algorithm: sha256WithRSAEncryption af:7b:0d:53:e4:1d:50:d3:e0:d7:42:f8:5b:81:f6:a1:3c:48: 79:eb:2e:47:79:49:02:d6:e3:58:40:39:af:23:c3:55:a3:4a: 17:0a:3d:df:c9:41:62:7a:77:eb:68:45:e6:22:f8:81:b9:7a: 04:5d:c4:75:9e:48:fb:c6:36:76:69:15:c7:8c:66:e6:aa:07: 55:56:dc:e8:92:ac:02:99:47:28:42:db:66:87:af:53:08:36: 63:04:f5:ca:56:3d:f6:21:96:99:3a:81:9b:a7:a2:5b:72:dd: b0:b2:4a:9e:ee:34:f6:c9:51:fc:95:f6:22:5a:0d:23:e6:0e: 24:d7:d6:60:43:30:4e:4d:37:94:db:52:2d:f5:89:12:a2:e2: 6b:31:97:f2:71:91:5e:f0:ac:61:5c:79:7c:3a:f9:c7:54:ff: a2:72:18:ba:b1:48:32:01:72:5a:b5:81:cb:11:dc:13:37:a7: 19:28:9a:11:01:5b:a7:af:16:78:a3:c3:38:3a:b0:5e:50:64: 08:87:ce:85:1e:72:82:0e:c9:37:26:64:65:ba:f5:5a:68:4f: e4:05:2a:c0:2a:9d:cd:d0:4e:c8:6f:a2:6d:f5:25:f9:32:55: b5:61:97:78:de:23:cd:02:35:cb:45:81:ae:8f:7b:4b:5f:e1: e8:12:bc:2d -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnMnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNDIzNDgzM1oXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjMwQUUxMTAvBgNVBAUTKEVFQTMzRTg2RTI4MUFEMTNEQzYyOUYz MkQ4RDUzNzYwQUUxRDAwNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC21J6GEryYtCxez7df1D+PXbbGafUVvcaiT9taGf/wq8TmyoDysjtuzaE1y1NU j5je2GPlVOg1dGni15y/JrCYPykLy+gxEBfy9nU5TBDpiwbEhvwzw9glTh649zUA DHexhMKmwM9Io2UxVYJxAoYBuwNqpEciAj7M/ysytIt3jDXf5zpvY24PIg9N+yYe A/lviEeC7Hj6UQmuyM0oXauthkiDygkYDbX/yQu0qgl1PDnthoQpTdaO+0JjsBAQ z/g0juk7WJLWin4bpvfmUcee59ZW7v8f6ht7xpGYPNVKJg6qf3oOmN5c+nBNzDrj bSICODUimzPDRGYXpBAMRdB9AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU7qM+huKB rRPcYp8y2NU3YK4dAEcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYzMEFFL0U3RkMwRDE0Mzc4RTExRUM4NDNDRDI0NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGMzBBRS9FN0ZDMEQxNDM3OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVL QnJSUGNZcDh5Mk5VM1lLNGRBRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAj7qMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ64MMA8EAgAC MAkDBwAgAQ33soAwDQYJKoZIhvcNAQELBQADggEBAK97DVPkHVDT4NdC+FuB9qE8 SHnrLkd5SQLW41hAOa8jw1WjShcKPd/JQWJ6d+toReYi+IG5egRdxHWeSPvGNnZp FceMZuaqB1VW3OiSrAKZRyhC22aHr1MINmME9cpWPfYhlpk6gZunolty3bCySp7u NPbJUfyV9iJaDSPmDiTX1mBDME5NN5TbUi31iRKi4msxl/JxkV7wrGFceXw6+cdU /6JyGLqxSDIBclq1gcsR3BM3pxkomhEBW6evFnijwzg6sF5QZAiHzoUecoIOyTcm ZGW69VpoT+QFKsAqnc3QTshvom31JfkyVbVhl3jeI80CNctFga6Pe0tf4egSvC0= -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:04 2025 by rpki-client