This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer File: As_3eY8FPpyB_czteWLsu3bB0ho.cer (raw, json) Hash identifier: 7nb9/UpzCNyAKmVHnEopZEhKlZSX7Ogh7EEmtcby2fA= Subject key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027801 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 19:49:30 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 134741 IP: 59.153.160.0/22 IP: 103.198.204.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161793 (0x27801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 19:49:30 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4f:df:10:33:ac:4a:52:10:ed:b6:12:34:5d: fa:c9:ab:29:b0:cc:9b:de:b1:ab:16:71:b0:21:0c: 7b:3a:e5:e4:0f:2d:56:2c:f4:1b:48:ee:86:3f:30: e1:3f:12:1c:c7:40:80:3b:0e:36:27:ca:24:86:fd: 19:26:99:19:b7:16:0d:db:5f:57:bc:69:4e:55:55: b0:0d:4b:a3:94:a3:34:a8:9c:eb:87:9f:9e:9d:3c: f9:c2:b9:d6:56:ea:1a:df:93:19:6c:4f:5f:d1:87: e4:1f:91:80:8e:8e:2a:86:5e:d6:ca:3c:44:85:c2: 14:13:91:37:0c:75:3f:9a:d3:20:b2:07:d7:d4:9c: c8:4b:8c:72:ec:52:a0:fc:b2:7c:9a:0e:ae:5e:9d: d3:df:0a:8a:e3:47:c6:48:9e:4e:16:aa:62:08:6c: 01:bb:8d:8a:eb:f6:2a:05:eb:47:47:fd:97:cd:ae: d1:d9:ae:43:7c:8e:42:66:3a:bc:ae:b1:a3:36:c3: a2:a2:72:03:f9:89:5d:1e:b9:ff:04:bd:8c:89:b0: ce:b9:b4:59:ef:2b:95:46:61:2a:d5:92:64:96:dc: 06:cd:72:e0:f3:87:6e:ef:53:b2:fe:90:d3:0a:b5: 61:0e:05:89:d3:be:a2:66:54:ac:da:2b:6f:27:ca: 5a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134741 sbgp-ipAddrBlock: critical IPv4: 59.153.160.0/22 103.198.204.0/22 Signature Algorithm: sha256WithRSAEncryption 73:04:99:52:38:ac:cc:15:e3:fc:43:98:21:9b:27:b1:ba:e9: f3:0c:f2:de:58:7d:56:8a:f0:72:13:77:e0:59:43:20:c5:30: 04:b2:74:49:f4:2a:f4:b5:6f:fc:6a:e5:2b:f4:0f:e2:88:36: eb:fe:7b:e8:3d:da:04:d2:71:02:9f:e7:4f:ed:a0:92:a4:2c: d1:57:2d:22:fe:81:07:7f:ef:51:49:fe:5a:31:ab:ec:39:22: cb:21:68:0e:fa:7b:6c:85:28:52:7b:43:09:4c:f3:da:da:d5: e1:6e:1d:47:3e:a9:3e:93:d6:08:94:c5:fb:4e:38:e0:e1:32: ec:53:91:b8:69:20:47:14:cc:f9:79:b0:0a:f6:dd:c6:22:dd: 97:70:75:1b:92:ea:ef:58:f2:b7:78:be:be:d2:c2:50:0c:9c: 19:2b:0f:f5:70:15:75:7f:7d:95:90:87:de:42:74:61:63:5b: b4:18:be:9e:bc:99:44:a2:9d:6a:91:5f:62:cc:c7:47:52:20: e6:52:98:02:47:76:e0:75:2a:52:ed:4c:b2:d7:6d:3e:f6:9a: a8:89:9f:7a:6d:2b:16:f5:bc:4b:36:03:3e:71:2e:4b:0c:fc: e5:68:2d:5c:0f:38:4f:95:00:24:dd:01:68:7e:d5:2e:ab:ef: 48:c7:85:6b -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAngBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTE5NDkzMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NF RDc5NjJFQ0JCNzZDMUQyMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTT98QM6xKUhDtthI0XfrJqymwzJvesasWcbAhDHs65eQPLVYs9BtI7oY/MOE/ EhzHQIA7DjYnyiSG/RkmmRm3Fg3bX1e8aU5VVbANS6OUozSonOuHn56dPPnCudZW 6hrfkxlsT1/Rh+QfkYCOjiqGXtbKPESFwhQTkTcMdT+a0yCyB9fUnMhLjHLsUqD8 snyaDq5endPfCorjR8ZInk4WqmIIbAG7jYrr9ioF60dH/ZfNrtHZrkN8jkJmOryu saM2w6KicgP5iV0euf8EvYyJsM65tFnvK5VGYSrVkmSW3AbNcuDzh27vU7L+kNMK tWEOBYnTvqJmVKzaK28nylo9AgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUAs/3eY8F PpyB/czteWLsu3bB0howHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE0NjkwLzQwOUM5NzBBNUFFMDExRUY4NTgyNzA3RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBNDY5MC80MDlDOTcwQTVBRTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4 RlBweUJfY3p0ZVdMc3UzYkIwaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg5VMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCO5mgAwQCZ8bM MA0GCSqGSIb3DQEBCwUAA4IBAQBzBJlSOKzMFeP8Q5ghmyexuunzDPLeWH1WivBy E3fgWUMgxTAEsnRJ9Cr0tW/8auUr9A/iiDbr/nvoPdoE0nECn+dP7aCSpCzRVy0i /oEHf+9RSf5aMavsOSLLIWgO+ntshShSe0MJTPPa2tXhbh1HPqk+k9YIlMX7Tjjg 4TLsU5G4aSBHFMz5ebAK9t3GIt2XcHUbkurvWPK3eL6+0sJQDJwZKw/1cBV1f32V kIfeQnRhY1u0GL6evJlEop1qkV9izMdHUiDmUpgCR3bgdSpS7Uyy120+9pqoiZ96 bSsW9bxLNgM+cS5LDPzlaC1cDzhPlQAk3QFoftUuq+9Ix4Vr -----END CERTIFICATE-----Generated at Sat Dec 6 10:36:14 2025 by rpki-client