This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.cer (raw, json) Hash identifier: 2Y5UcjlwjEJBV/jVYGSdEU4zrTDxucZ7n77xSQ03LI8= Subject key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0276B8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 20 Nov 2025 17:58:05 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 149021 AS: 152608 IP: 103.176.204.0/23 IP: 2401:43e0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161464 (0x276b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 20 17:58:05 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:47:0d:f2:93:29:cf:cb:b8:e5:3b:d8:aa:63: 71:9c:a0:15:01:7c:56:5b:0a:ed:b7:35:86:5a:aa: 7b:c4:56:93:29:cc:c5:ad:33:6d:14:c0:b0:58:18: 33:b8:11:13:9b:aa:4a:e2:6b:c8:77:57:1e:a5:ce: 97:76:41:9e:71:a5:6f:1a:fd:7c:36:96:4d:e3:40: 3f:6e:05:87:67:55:48:4e:70:a5:34:79:75:9c:f2: 40:d1:5e:32:99:15:04:bc:38:53:75:8a:61:0c:e7: ab:ab:f7:a9:4a:ae:d5:47:d5:51:1e:b8:94:55:fa: 66:9d:46:4e:af:63:5d:a5:b8:22:51:2e:68:11:14: 0f:fc:20:cc:98:09:95:3b:f0:5a:f1:83:71:54:fc: e2:e7:98:e0:8d:0a:5a:19:57:88:37:3e:85:75:35: ab:48:d4:d5:f2:6a:a3:e9:4c:84:25:ee:6c:ef:ad: 74:e6:3d:8b:d4:8d:66:be:fa:3d:c6:17:e1:8e:95: 90:a7:43:50:6a:12:d5:70:1b:74:34:dd:3c:70:db: 33:d3:60:f8:c9:c1:03:56:74:c1:ea:ca:8b:87:08: ca:59:88:25:57:d4:0b:be:ab:1c:fd:40:e4:51:37: 68:aa:6f:86:c5:77:00:43:3d:fe:d3:7e:9c:d8:4e: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 149021 152608 sbgp-ipAddrBlock: critical IPv4: 103.176.204.0/23 IPv6: 2401:43e0::/32 Signature Algorithm: sha256WithRSAEncryption 17:01:cf:9e:71:57:49:ff:84:b6:a9:e8:2d:ba:8b:a4:e7:c1: c2:d0:dd:62:62:5a:59:19:61:fd:b5:11:d6:e1:1d:f2:f1:4a: ec:a1:37:69:19:a7:5d:2e:7e:fc:bf:91:9d:99:4c:18:4a:dd: 3f:9c:e4:02:fc:72:f6:a7:0a:1e:a0:1d:e7:30:4b:d9:7b:53: 64:88:68:4f:ab:4c:85:a0:51:5c:f8:b4:bc:17:bf:ae:a0:56: a2:84:b5:6b:82:40:f8:b9:7d:f7:bf:3d:21:30:dc:13:af:7e: 55:ef:f0:63:42:ff:87:8a:c9:98:fd:d7:be:f7:ba:66:cf:14: ff:82:bd:b4:02:ab:b3:2a:bf:ff:37:56:38:80:c0:66:7a:be: e8:d4:7b:3a:b1:c8:ed:e1:b2:8c:3e:d2:95:64:2a:1c:53:2d: c4:fe:5c:b1:b1:68:92:26:40:76:21:2b:37:06:4f:57:f7:e9: d0:7b:36:d8:cd:39:5d:39:0b:ce:65:fc:12:93:da:f1:0b:9f: 43:46:4e:df:ce:7f:d9:47:ae:c1:7c:63:91:b8:80:f1:ca:b9: 10:21:b3:76:f6:81:0c:30:08:6f:36:14:89:3b:b9:83:77:b4: b9:82:75:ec:95:e4:f6:69:cc:a5:9c:a3:06:4b:72:82:3b:e1: 0c:9a:40:e3 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIDAna4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMDE3NTgwNVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1 QzE5ODMzMUMzM0MyMjVBNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbRw3ykynPy7jlO9iqY3GcoBUBfFZbCu23NYZaqnvEVpMpzMWtM20UwLBYGDO4 ERObqkria8h3Vx6lzpd2QZ5xpW8a/Xw2lk3jQD9uBYdnVUhOcKU0eXWc8kDRXjKZ FQS8OFN1imEM56ur96lKrtVH1VEeuJRV+madRk6vY12luCJRLmgRFA/8IMyYCZU7 8Frxg3FU/OLnmOCNCloZV4g3PoV1NatI1NXyaqPpTIQl7mzvrXTmPYvUjWa++j3G F+GOlZCnQ1BqEtVwG3Q03Txw2zPTYPjJwQNWdMHqyouHCMpZiCVX1Au+qxz9QORR N2iqb4bFdwBDPf7TfpzYTp5ZAgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQU9JfRcWkn bUPFhSFcGYMxwzwiWnUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVDQzI0LzE2QzYxMzE2NkFGQTExRURCNzA2RkYzQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFQ0MyNC8xNkM2MTMxNjZBRkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1dr bmJVUEZoU0ZjR1lNeHd6d2lXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAkYdAgMCVCAwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFnsMww DQQCAAIwBwMFACQBQ+AwDQYJKoZIhvcNAQELBQADggEBABcBz55xV0n/hLap6C26 i6TnwcLQ3WJiWlkZYf21EdbhHfLxSuyhN2kZp10ufvy/kZ2ZTBhK3T+c5AL8cvan Ch6gHecwS9l7U2SIaE+rTIWgUVz4tLwXv66gVqKEtWuCQPi5ffe/PSEw3BOvflXv 8GNC/4eKyZj91773umbPFP+CvbQCq7Mqv/83VjiAwGZ6vujUezqxyO3hsow+0pVk KhxTLcT+XLGxaJImQHYhKzcGT1f36dB7NtjNOV05C85l/BKT2vELn0NGTt/Of9lH rsF8Y5G4gPHKuRAhs3b2gQwwCG82FIk7uYN3tLmCdeyV5PZpzKWcowZLcoI74Qya QOM= -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:42 2025 by rpki-client