This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer File: 9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer (raw, json) Hash identifier: 1L/LlAiAem9iBQAtKmO5RpJN9tghRUbwAHshs0OAqNQ= Subject key identifier: F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027BE6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft caRepository: rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 14:39:15 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 134816 IP: 103.201.68.0/22 IP: 175.158.100.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162790 (0x27be6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 14:39:15 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A915AA2E, serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:29:75:87:5e:e2:1f:0f:a3:81:1d:e0:3a:d2: ba:df:0f:1a:7d:79:ba:9e:a7:76:14:3d:e1:73:b4: 60:57:2a:d8:c6:9b:1c:48:72:e5:bd:09:e0:f8:03: b2:f3:c3:74:3f:3a:23:7d:4e:4a:29:92:6c:c6:e9: 41:8b:4e:1d:07:3f:0a:1c:90:f3:4c:0a:16:9d:db: f1:8a:ca:a9:cc:9c:6d:dc:b1:25:c8:07:96:f2:86: af:6d:8c:64:1f:55:86:bc:c4:29:9a:8f:03:1e:30: 5d:81:ca:0b:80:9b:d6:98:86:9b:cd:31:7c:fb:fd: 29:1c:27:e8:05:f6:b6:2b:24:e2:5e:3d:63:f1:92: 58:64:a0:59:00:09:53:10:42:c8:4a:00:b0:fd:de: 08:00:1c:b4:25:33:23:64:c9:b9:ec:fc:2e:2b:fb: cd:be:a1:0d:4d:2a:fb:f0:0a:a4:c4:1b:03:01:94: ed:29:c3:0a:0e:b7:10:e1:f3:0a:94:2c:7e:f5:ea: 7c:2e:35:96:fb:d7:c5:3d:72:5d:be:ef:2a:68:dc: 5e:af:14:8b:81:d3:19:a5:53:36:ac:b2:d0:92:9e: 4b:d8:22:33:82:a1:e8:d4:77:65:c7:7f:fa:91:e6: 7b:35:46:80:64:72:27:6f:d1:dc:53:de:b5:d6:12: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134816 sbgp-ipAddrBlock: critical IPv4: 103.201.68.0/22 175.158.100.0/22 Signature Algorithm: sha256WithRSAEncryption ab:83:92:22:84:f2:b9:d4:16:39:ca:7e:ac:71:39:af:ca:eb: 8d:46:24:8f:97:e0:c8:95:48:a0:2c:94:75:fb:cf:b8:26:a7: 46:19:76:52:3f:4a:85:0d:94:f3:95:92:e1:e9:ba:d5:30:05: 0f:48:a2:ff:2b:88:99:45:5d:af:f0:4c:9c:a5:ea:bd:1e:33: 32:a4:6f:d6:4f:8f:6a:fa:d5:6e:4d:58:12:65:c5:a0:6a:81: 14:77:c9:b7:c4:c2:67:f8:b9:cf:c2:dc:c0:28:52:af:eb:97: c9:84:71:08:63:f8:03:f0:4c:9b:17:35:4c:36:2e:0f:a4:db: 2b:70:47:71:9f:1a:20:16:6c:bf:09:33:43:93:c4:37:85:e6: 09:95:b3:d1:8f:46:12:de:41:89:e9:7f:67:13:5f:fc:93:09: 50:b0:46:bc:86:a0:e1:1d:70:e2:b3:a4:24:54:bb:68:9b:10: 21:d7:df:ac:b6:0c:9a:6e:df:9d:7f:20:82:e4:08:73:66:cd: 5e:b6:82:32:4d:1c:bf:69:3f:4e:25:5b:98:e3:40:f0:50:4a: de:5f:5f:24:48:c6:d4:70:3f:84:b2:ca:56:e2:5d:4f:5d:b9: 32:a7:7c:1a:15:3c:40:98:4c:20:d3:aa:0e:81:f4:ce:d7:5f: bc:f5:8a:e3 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAnvmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDE0MzkxNVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNUFBMkUxMTAvBgNVBAUTKEY1ODAyRDkwM0RBMTBDRDAzRkNGM0U4 RTE2NTVGNTIxQzFEODU3ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeKXWHXuIfD6OBHeA60rrfDxp9ebqep3YUPeFztGBXKtjGmxxIcuW9CeD4A7Lz w3Q/OiN9TkopkmzG6UGLTh0HPwockPNMChad2/GKyqnMnG3csSXIB5byhq9tjGQf VYa8xCmajwMeMF2ByguAm9aYhpvNMXz7/SkcJ+gF9rYrJOJePWPxklhkoFkACVMQ QshKALD93ggAHLQlMyNkybns/C4r+82+oQ1NKvvwCqTEGwMBlO0pwwoOtxDh8wqU LH716nwuNZb718U9cl2+7ypo3F6vFIuB0xmlUzasstCSnkvYIjOCoejUd2XHf/qR 5ns1RoBkcidv0dxT3rXWElCpAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQU9YAtkD2h DNA/zz6OFlX1IcHYV4MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVBQTJFLzdBRkM5REYwNUFFNTExRUZCMTFDNDk0NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1QUEyRS83QUZDOURGMDVBRTUxMUVGQjExQzQ5NDVDNEY5QUUwMi85WUF0a0Qy aEROQV96ejZPRmxYMUljSFlWNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg6gMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZ8lEAwQCr55k MA0GCSqGSIb3DQEBCwUAA4IBAQCrg5IihPK51BY5yn6scTmvyuuNRiSPl+DIlUig LJR1+8+4JqdGGXZSP0qFDZTzlZLh6brVMAUPSKL/K4iZRV2v8Eycpeq9HjMypG/W T49q+tVuTVgSZcWgaoEUd8m3xMJn+LnPwtzAKFKv65fJhHEIY/gD8EybFzVMNi4P pNsrcEdxnxogFmy/CTNDk8Q3heYJlbPRj0YS3kGJ6X9nE1/8kwlQsEa8hqDhHXDi s6QkVLtomxAh19+stgyabt+dfyCC5AhzZs1etoIyTRy/aT9OJVuY40DwUEreX18k SMbUcD+EsspW4l1PXbkyp3waFTxAmEwg06oOgfTO11+89Yrj -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:46 2025 by rpki-client