This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer (raw, json) Hash identifier: 4KZ+bXcSrDjlffj/dO48xhKRTHJSi0ZNyEvGb83r0A4= Subject key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0274CB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 12 Nov 2025 17:03:09 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 139708 IP: 103.143.234.0/23 IP: 2001:df1:9e80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160971 (0x274cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 12 17:03:09 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:4b:45:f2:da:ce:a6:54:bb:50:8a:74:4f: 0a:d6:7b:e4:80:79:d7:ec:3e:23:b6:70:11:7b:3c: 4d:09:3f:d2:0e:21:bd:8e:46:39:43:4d:8f:c1:bb: 63:de:3e:41:93:29:fc:7d:98:24:65:a9:a6:32:e9: a1:94:1d:27:2f:7d:7c:61:ed:f5:8b:e9:24:c6:de: 51:27:81:64:32:59:6d:62:b0:0f:d7:b3:05:3c:7d: 2b:14:b5:40:b9:85:d1:b9:84:8d:db:89:3b:9d:7d: b2:59:50:3d:30:4e:21:9c:a2:6f:20:1d:a5:f9:4b: 25:3e:f4:c3:fb:2d:66:5b:fb:c5:9d:7d:aa:43:88: 65:58:0a:f3:c4:c4:ea:13:22:5f:9a:75:fe:c7:d8: 9d:93:a1:90:5a:1a:d4:d2:ed:1a:d9:58:19:e5:cd: d8:c4:c0:9c:39:d2:c7:a8:dd:61:a0:da:b9:f8:e3: fb:3e:09:34:67:11:5c:65:3a:88:56:1b:1d:6d:bd: 0f:5a:e7:da:f4:c9:5f:7c:5c:18:43:1e:49:27:26: b8:4e:c4:ce:4f:8c:0f:2a:03:09:78:c8:ae:b0:67: bc:4c:87:0d:a0:8b:15:88:30:30:60:30:d3:db:6b: 79:5d:ac:ba:fe:92:13:eb:29:78:2f:ca:72:94:1c: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139708 sbgp-ipAddrBlock: critical IPv4: 103.143.234.0/23 IPv6: 2001:df1:9e80::/48 Signature Algorithm: sha256WithRSAEncryption 9c:04:73:7c:6a:3f:ad:cf:e8:68:b2:36:e4:bc:46:6d:96:55: aa:1e:d3:31:d9:c9:f1:b3:8e:39:8d:f0:97:25:05:79:53:5a: ad:63:0d:16:66:9e:65:86:20:23:d1:dd:f1:4e:e2:ad:47:45: 4e:84:ee:5b:fa:8c:c0:4f:c3:52:83:3d:10:05:7c:3e:5b:80: 81:03:01:c9:c3:10:19:80:e7:4c:0c:71:b9:9d:ad:4d:85:5f: 39:d8:56:3f:f0:18:c9:5e:ba:de:15:e4:ed:e8:d1:8d:22:a1: eb:4b:83:ba:35:1f:ff:a5:1c:39:ec:d8:aa:c8:dc:b4:61:d6: fa:43:20:66:a4:b7:08:f4:8f:0e:93:58:f7:a1:37:fb:fc:43: b8:f7:87:bf:6a:fd:b5:7a:f9:28:a1:c2:2a:69:a8:6b:b5:a0: c3:d4:42:90:9e:57:b4:e1:d5:69:9b:f0:a2:d4:d8:fe:1a:ed: 52:97:1b:08:26:bf:6a:44:0b:32:2f:d9:8d:7d:97:f7:08:45: d4:ba:ae:1f:88:71:68:9f:11:2e:c3:31:1f:53:c8:a2:b0:c4: a3:f8:65:bf:f1:cb:05:d0:18:80:0b:85:28:23:f0:85:4f:ce: 28:2d:32:0d:d5:61:af:08:77:6a:0c:07:43:7f:a0:ca:a3:eb: bd:8f:21:fd -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnTLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMjE3MDMwOVoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxRDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZF QzMxM0YxNURBNDdDQjQ0REQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQh0tF8trOplS7UIp0TwrWe+SAedfsPiO2cBF7PE0JP9IOIb2ORjlDTY/Bu2Pe PkGTKfx9mCRlqaYy6aGUHScvfXxh7fWL6STG3lEngWQyWW1isA/XswU8fSsUtUC5 hdG5hI3biTudfbJZUD0wTiGcom8gHaX5SyU+9MP7LWZb+8WdfapDiGVYCvPExOoT Il+adf7H2J2ToZBaGtTS7RrZWBnlzdjEwJw50seo3WGg2rn44/s+CTRnEVxlOohW Gx1tvQ9a59r0yV98XBhDHkknJrhOxM5PjA8qAwl4yK6wZ7xMhw2gixWIMDBgMNPb a3ldrLr+khPrKXgvynKUHOSVAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUAp+CEkMK jdfnlU/sMT8V2kfLRN0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQyRkMwLzJBODE1QTA4NDc1MDExRUE4Q0Q5NzYxRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEMkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtN S2pkZm5sVV9zTVQ4VjJrZkxSTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiG8MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ4/qMA8EAgAC MAkDBwAgAQ3xnoAwDQYJKoZIhvcNAQELBQADggEBAJwEc3xqP63P6GiyNuS8Rm2W Vaoe0zHZyfGzjjmN8JclBXlTWq1jDRZmnmWGICPR3fFO4q1HRU6E7lv6jMBPw1KD PRAFfD5bgIEDAcnDEBmA50wMcbmdrU2FXznYVj/wGMleut4V5O3o0Y0ioetLg7o1 H/+lHDns2KrI3LRh1vpDIGaktwj0jw6TWPehN/v8Q7j3h79q/bV6+SihwippqGu1 oMPUQpCeV7Th1Wmb8KLU2P4a7VKXGwgmv2pECzIv2Y19l/cIRdS6rh+IcWifES7D MR9TyKKwxKP4Zb/xywXQGIALhSgj8IVPzigtMg3VYa8Id2oMB0N/oMqj672PIf0= -----END CERTIFICATE-----Generated at Sat Dec 6 14:55:36 2025 by rpki-client