This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer File: 97sXL8rsr7-evvJQihVCZDOuyd4.cer (raw, json) Hash identifier: Ba4yhRxecRM1qf2dPxD7p0OxMV4lPQ11HmOuk+j9CLw= Subject key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02813D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 28 Dec 2025 14:04:45 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 150450 IP: 103.40.2.0/23 IP: 2400:c3a0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164157 (0x2813d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 28 14:04:45 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91CEDD3, serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:d5:08:fe:72:03:11:27:fc:63:01:61:71: bd:da:63:98:03:cd:44:2f:2e:5c:10:a7:55:43:2f: 47:3b:ae:b4:25:81:4f:d1:bb:27:93:ef:e5:53:3c: 4c:e9:b8:7d:68:0f:98:cf:b8:97:90:0a:c0:c2:a7: 30:e3:8e:9e:fc:e0:12:3c:8e:29:9f:86:b9:18:63: b6:44:34:8b:45:2d:18:bb:25:35:f0:ea:95:2f:9c: 74:0f:9d:83:44:c8:f5:d5:81:a4:d4:47:64:f0:a1: 4b:9b:03:ea:ec:a4:eb:29:9e:dd:74:c8:64:51:0f: 15:8f:8d:48:28:2d:c7:6f:29:5e:27:f4:dd:ea:6d: 90:e9:68:71:b8:2a:10:d3:c0:d8:ab:f1:d0:25:40: 48:0c:55:74:64:4a:d7:bd:94:e7:b0:9b:fc:50:df: 8f:97:3b:9a:4c:7e:3f:c7:75:f1:50:99:27:ff:fc: 26:d1:f7:77:78:87:f0:0d:09:5d:1c:06:08:61:40: 63:ec:65:b6:bc:53:4d:bc:9c:54:df:97:40:b0:e3: dd:c8:a1:d6:35:83:23:46:da:ed:8a:db:ae:e5:b6: 79:ff:54:0b:55:c5:63:4c:62:64:bf:bd:c9:ae:ce: ab:b5:30:0b:fe:60:c6:85:18:24:ab:2e:76:ba:41: 69:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 150450 sbgp-ipAddrBlock: critical IPv4: 103.40.2.0/23 IPv6: 2400:c3a0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:0d:fe:45:2c:1e:fa:9c:7f:ff:33:1c:f6:74:d5:91:ed:32: 3a:a6:0d:b0:a4:79:24:97:16:fb:d5:63:b8:1d:28:c1:cf:55: ef:94:b0:4f:44:51:b5:f9:dc:5d:16:a6:04:c0:99:3b:c2:25: 74:0d:0c:f0:ae:13:53:43:b6:cd:83:72:a7:57:a1:d4:98:c3: 89:df:11:74:29:02:69:59:38:6f:b1:96:dd:87:6f:b3:8f:64: c4:f9:a2:85:80:7e:8b:1c:79:76:05:4c:cb:26:f1:16:cf:3e: 88:06:47:f2:e4:cf:ca:e5:e7:64:54:cf:61:f2:b0:c8:9c:eb: e1:70:e0:b8:61:c9:bf:93:0d:da:30:2e:5f:ff:b3:0b:da:45: 31:00:62:be:2b:95:58:3b:bc:40:7a:0e:53:20:d4:ea:bf:b6: e0:b7:4e:86:4a:5e:ab:5c:9a:7d:61:ce:56:e6:18:07:d0:f7: 23:4e:4a:97:a2:c1:ee:10:cf:5b:08:32:ef:5a:fd:60:4d:4e: 4b:e9:cb:41:53:24:77:c1:b3:f9:03:78:1f:9b:1a:59:70:37: bb:63:24:8f:ce:ed:63:b5:91:02:fa:43:28:06:0d:dd:9e:77: ee:0b:66:e5:aa:ba:e2:a9:6a:b5:a4:ab:1a:52:0f:c9:d4:93: 83:a5:48:41 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoE9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyODE0MDQ0NVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxQ0VERDMxMTAvBgNVBAUTKEY3QkIxNzJGQ0FFQ0FGQkY5RUJFRjI1 MDhBMTU0MjY0MzNBRUM5REUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHINUI/nIDESf8YwFhcb3aY5gDzUQvLlwQp1VDL0c7rrQlgU/RuyeT7+VTPEzp uH1oD5jPuJeQCsDCpzDjjp784BI8jimfhrkYY7ZENItFLRi7JTXw6pUvnHQPnYNE yPXVgaTUR2TwoUubA+rspOspnt10yGRRDxWPjUgoLcdvKV4n9N3qbZDpaHG4KhDT wNir8dAlQEgMVXRkSte9lOewm/xQ34+XO5pMfj/HdfFQmSf//CbR93d4h/ANCV0c BghhQGPsZba8U028nFTfl0Cw493IodY1gyNG2u2K267ltnn/VAtVxWNMYmS/vcmu zqu1MAv+YMaFGCSrLna6QWkRAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU97sXL8rs r7+evvJQihVCZDOuyd4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNFREQzL0QwNjYzMzI4NzA1RTExRURBQ0FEODg1QkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDRUREMy9EMDY2MzMyODcwNUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhy c3I3LWV2dkpRaWhWQ1pET3V5ZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkuyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZygCMA0EAgAC MAcDBQAkAMOgMA0GCSqGSIb3DQEBCwUAA4IBAQA9Df5FLB76nH//Mxz2dNWR7TI6 pg2wpHkklxb71WO4HSjBz1XvlLBPRFG1+dxdFqYEwJk7wiV0DQzwrhNTQ7bNg3Kn V6HUmMOJ3xF0KQJpWThvsZbdh2+zj2TE+aKFgH6LHHl2BUzLJvEWzz6IBkfy5M/K 5edkVM9h8rDInOvhcOC4Ycm/kw3aMC5f/7ML2kUxAGK+K5VYO7xAeg5TINTqv7bg t06GSl6rXJp9Yc5W5hgH0PcjTkqXosHuEM9bCDLvWv1gTU5L6ctBUyR3wbP5A3gf mxpZcDe7YySPzu1jtZEC+kMoBg3dnnfuC2blqrriqWq1pKsaUg/J1JODpUhB -----END CERTIFICATE-----Generated at Sun Jan 25 04:29:19 2026 by rpki-client