This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer File: 9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer (raw, json) Hash identifier: ijYefYhIlk8+XNaGlSWdl+M5BY1ewF3Gc5RhwwUdd74= Subject key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027885 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 01:49:21 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 142618 IP: 103.111.38.0/23 IP: 2402:3b60::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161925 (0x27885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 27 01:49:21 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:8b:6a:40:fe:3a:41:54:d6:14:26:b7:47: 11:d5:cb:98:30:a8:50:f7:6f:40:c7:53:36:a4:f1: 56:5b:f3:5e:07:01:41:ba:81:2f:6f:ea:ca:ff:71: 90:52:29:bf:47:36:b3:97:62:5d:e6:2b:6f:6f:59: fa:3d:03:29:4b:28:a2:51:50:e1:4b:e1:b6:2b:0f: 84:0a:01:66:c7:a5:b9:36:6e:7b:b2:ef:51:6e:84: 38:4f:71:1e:52:b6:87:f0:2c:77:3a:13:1e:5e:f9: b2:bd:dc:bb:8e:1c:72:f8:50:06:a9:0f:5a:a9:99: 7a:60:ae:79:0d:4c:2a:5b:42:92:2c:4f:4a:b2:86: 2d:d7:be:37:50:bf:ad:c7:fe:6c:b8:24:5f:9f:aa: 44:41:a3:83:ab:6d:54:0c:5a:e8:11:0d:ef:49:7e: 80:70:ac:bb:f6:dc:ba:81:42:ff:0b:82:80:97:99: 31:8c:35:02:c9:74:a8:c8:60:b6:35:71:b2:d1:a2: f7:17:2a:13:10:39:dd:d8:a2:59:44:f9:0f:df:94: 97:42:b8:b4:46:2a:2b:02:8b:39:14:bd:7e:75:78: d2:3d:70:9f:0e:22:8b:3a:c2:d8:d5:c5:de:d2:f6: 49:c6:63:fd:c1:a8:ae:bc:ac:64:8d:53:82:d8:6c: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 142618 sbgp-ipAddrBlock: critical IPv4: 103.111.38.0/23 IPv6: 2402:3b60::/32 Signature Algorithm: sha256WithRSAEncryption 7d:0e:3b:ed:e7:c3:49:69:17:2b:94:43:7d:48:88:17:a3:32: f5:34:1f:82:9e:ce:ef:39:25:98:3e:7e:a3:9b:1c:37:8d:b1: de:3c:74:a4:18:75:6a:a5:98:6d:d9:cd:3e:60:c8:13:b9:68: f4:7d:6f:5c:0a:87:4e:dc:f2:01:a8:eb:1f:6f:e5:1c:07:95: e9:80:0b:c4:38:24:6c:96:f2:6f:dc:e6:39:97:36:fb:1c:02: 19:56:30:f3:c9:e7:22:c4:29:db:78:85:b4:a5:13:a2:29:e1: 6a:7c:6c:e1:c1:c1:5c:42:e0:10:09:0f:8a:28:9d:10:3d:b5: 11:39:2b:ef:21:61:55:54:54:02:c7:54:49:c2:e0:1a:32:0c: 01:11:e5:f6:27:c3:44:35:4a:90:1a:2e:0d:e7:8b:7e:ea:f7: d7:22:1a:35:bd:35:bb:61:11:6e:1c:d3:b4:08:6d:3a:d9:d9: 53:b5:8e:19:d2:00:87:c2:96:71:25:b8:fa:7b:e9:8b:d5:65: f3:de:24:12:36:f4:a1:a5:1a:26:c8:2a:89:dd:23:bf:65:9b: cd:2d:5c:4a:d3:2b:20:95:9e:6a:bf:f8:b4:75:cc:f3:6d:e6: c6:c0:39:47:4a:41:84:58:40:ec:58:e6:34:06:22:7e:0b:9a: e3:2a:e2:a5 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAniFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNzAxNDkyMVoXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzA1QUQxMTAvBgNVBAUTKEY1MTJBRDY2M0E2MzMyNjM1NUNBOEQ4 RTkxMDBCM0NFQUIzQ0I5RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzxYtqQP46QVTWFCa3RxHVy5gwqFD3b0DHUzak8VZb814HAUG6gS9v6sr/cZBS Kb9HNrOXYl3mK29vWfo9AylLKKJRUOFL4bYrD4QKAWbHpbk2bnuy71FuhDhPcR5S tofwLHc6Ex5e+bK93LuOHHL4UAapD1qpmXpgrnkNTCpbQpIsT0qyhi3XvjdQv63H /my4JF+fqkRBo4OrbVQMWugRDe9JfoBwrLv23LqBQv8LgoCXmTGMNQLJdKjIYLY1 cbLRovcXKhMQOd3YollE+Q/flJdCuLRGKisCizkUvX51eNI9cJ8OIos6wtjVxd7S 9knGY/3BqK68rGSNU4LYbJNJAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU9RKtZjpj MmNVyo2OkQCzzqs8ufswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUMwNUFELzk1QkUzQkQ2MUQzMzExRUQ5NkExMEE2MEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDMDVBRC85NUJFM0JENjFEMzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpw ak1tTlZ5bzJPa1FDenpxczh1ZnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAi0aMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ28mMA0EAgAC MAcDBQAkAjtgMA0GCSqGSIb3DQEBCwUAA4IBAQB9Djvt58NJaRcrlEN9SIgXozL1 NB+Cns7vOSWYPn6jmxw3jbHePHSkGHVqpZht2c0+YMgTuWj0fW9cCodO3PIBqOsf b+UcB5XpgAvEOCRslvJv3OY5lzb7HAIZVjDzyecixCnbeIW0pROiKeFqfGzhwcFc QuAQCQ+KKJ0QPbUROSvvIWFVVFQCx1RJwuAaMgwBEeX2J8NENUqQGi4N54t+6vfX Iho1vTW7YRFuHNO0CG062dlTtY4Z0gCHwpZxJbj6e+mL1WXz3iQSNvShpRomyCqJ 3SO/ZZvNLVxK0ysglZ5qv/i0dczzbebGwDlHSkGEWEDsWOY0BiJ+C5rjKuKl -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:35 2025 by rpki-client