This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer File: 8Os9EfDsrmhzaV1az7e0rcVfNFg.cer (raw, json) Hash identifier: bOyfmaGt0yNjczEDeTHDahfWlqXxYw6bz1iq2TRiUrA= Subject key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02817E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 12:55:44 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 132427 IP: 103.81.172.0/22 IP: 203.194.116.0/22 IP: 2400:7b40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164222 (0x2817e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 29 12:55:44 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91499BB, serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cb:a7:2d:19:66:36:f6:64:6b:53:78:23:b2: 36:5f:80:17:2f:bf:2a:75:c2:1c:6b:97:37:b9:18: f4:97:c7:f7:94:72:a7:2d:5f:d6:5a:36:eb:64:14: 4e:90:be:d4:4d:ce:06:cb:2f:74:3b:a4:3f:76:0d: a5:2b:d0:5f:bf:7b:a4:52:65:8f:aa:a1:67:7b:1d: c2:95:dd:b9:df:e3:8e:1d:cd:c9:e0:a6:3d:87:14: 85:15:61:fb:7a:db:07:4e:be:5e:15:fc:1c:bd:21: a9:a9:e2:89:95:5d:25:b5:b5:1e:e3:cf:32:5a:b8: b3:9e:f8:37:e4:72:67:92:e9:b8:f0:28:8d:2d:b8: b6:e5:08:27:4d:4e:92:2b:82:41:c9:2e:ac:9f:6a: ba:01:44:23:35:e6:08:7d:49:43:be:91:84:a5:b7: fc:48:41:d0:e1:01:a7:a1:38:e9:13:fd:89:0f:ee: 3f:fc:11:a9:24:07:25:0f:a7:ec:df:dc:27:27:93: 7d:47:a6:93:71:4b:d1:40:6c:f1:df:96:c8:c5:b8: 01:ed:ab:8c:0d:af:d9:81:f0:bf:49:18:24:0e:bc: f0:d8:bf:93:3c:17:49:7e:d0:50:71:ff:7c:82:fe: 2e:c1:19:f0:c5:f6:85:01:0d:97:b5:02:cb:78:d9: 71:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 132427 sbgp-ipAddrBlock: critical IPv4: 103.81.172.0/22 203.194.116.0/22 IPv6: 2400:7b40::/32 Signature Algorithm: sha256WithRSAEncryption 46:49:c2:4f:12:a5:35:07:c7:da:06:62:f7:4c:89:f8:3f:5a: 9c:94:c2:d8:30:d0:09:a9:e1:17:92:96:cd:2f:f7:c0:06:1e: 74:6d:f7:d4:6a:19:fb:b5:c9:ae:f3:ec:f8:68:c7:e2:bd:b4: 2d:01:30:24:33:c1:04:ec:df:e3:4d:c4:87:db:62:51:54:43: e1:ad:ae:b1:1e:71:8f:2a:05:17:ea:cc:cf:c3:80:a8:8e:f9: 77:8e:d4:7b:9c:89:a4:46:34:b8:2f:fd:ca:6f:cd:5c:1b:a6: 0e:2b:d3:ab:37:89:2e:9e:e3:eb:72:a1:3a:b6:31:fc:7c:ad: de:38:0e:48:07:fc:13:23:36:3a:80:56:d9:87:6d:41:30:4c: e3:d2:e9:33:14:c5:91:59:9b:73:e3:7b:fd:a1:3b:8f:e2:46: 64:c3:e8:65:f7:ad:0e:53:34:8e:d0:96:23:fe:b2:b1:48:9e: 10:60:8d:3c:a7:7f:2a:be:1f:9e:ca:23:77:b0:b7:f7:c5:14: 82:6a:cd:7b:49:38:db:8f:88:bf:8c:0c:10:32:36:5f:33:4e: 17:0c:50:a0:9a:e5:b8:a1:c3:96:b7:23:14:0f:b9:f8:99:98: fa:95:f2:e2:ae:bd:3c:11:01:29:7d:26:bd:64:c4:77:07:e3: 5a:6b:d3:97 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAoF+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyOTEyNTU0NFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNDk5QkIxMTAvBgNVBAUTKEYwRUIzRDExRjBFQ0FFNjg3MzY5NUQ1 QUNGQjdCNEFEQzU1RjM0NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqy6ctGWY29mRrU3gjsjZfgBcvvyp1whxrlze5GPSXx/eUcqctX9ZaNutkFE6Q vtRNzgbLL3Q7pD92DaUr0F+/e6RSZY+qoWd7HcKV3bnf444dzcngpj2HFIUVYft6 2wdOvl4V/By9Iamp4omVXSW1tR7jzzJauLOe+DfkcmeS6bjwKI0tuLblCCdNTpIr gkHJLqyfaroBRCM15gh9SUO+kYSlt/xIQdDhAaehOOkT/YkP7j/8EakkByUPp+zf 3Ccnk31HppNxS9FAbPHflsjFuAHtq4wNr9mB8L9JGCQOvPDYv5M8F0l+0FBx/3yC /i7BGfDF9oUBDZe1Ast42XETAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQU8Os9EfDs rmhzaV1az7e0rcVfNFgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ5OUJCL0FCMUNBQzg2NjA5NzExRThCNzRBODYxQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0OTlCQi9BQjFDQUM4NjYwOTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZE c3JtaHphVjFhejdlMHJjVmZORmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgVLMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ1GsAwQCy8J0 MA0EAgACMAcDBQAkAHtAMA0GCSqGSIb3DQEBCwUAA4IBAQBGScJPEqU1B8faBmL3 TIn4P1qclMLYMNAJqeEXkpbNL/fABh50bffUahn7tcmu8+z4aMfivbQtATAkM8EE 7N/jTcSH22JRVEPhra6xHnGPKgUX6szPw4Cojvl3jtR7nImkRjS4L/3Kb81cG6YO K9OrN4kunuPrcqE6tjH8fK3eOA5IB/wTIzY6gFbZh21BMEzj0ukzFMWRWZtz43v9 oTuP4kZkw+hl960OUzSO0JYj/rKxSJ4QYI08p38qvh+eyiN3sLf3xRSCas17STjb j4i/jAwQMjZfM04XDFCgmuW4ocOWtyMUD7n4mZj6lfLirr08EQEpfSa9ZMR3B+Na a9OX -----END CERTIFICATE-----Generated at Sun Jan 25 02:49:07 2026 by rpki-client