This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer File: BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer (raw, json) Hash identifier: J/N5NcfIyVz4yxdSsi+/yWliD73U7dEqYJcLHEY/dEQ= Subject key identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027953 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft caRepository: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 30 Nov 2025 12:45:42 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 134967 IP: 103.22.244.0/22 IP: 2404:3980::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162131 (0x27953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 30 12:45:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9120BC1, serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:66:6a:e1:cc:ef:34:98:fb:93:79:cb:1a:f0: f9:54:6c:1a:2f:f9:3e:99:87:ff:10:b3:5f:54:f3: 44:80:f7:19:b4:a1:81:67:81:b5:06:e7:52:15:5a: f6:df:77:c5:9b:03:7d:6d:80:f3:8a:08:83:a6:27: 59:f0:a1:d3:f9:8c:03:4e:54:12:f7:65:7f:4c:5d: ff:28:53:90:3c:9d:7f:30:4a:65:fd:25:01:f2:3a: f6:28:b7:ff:6d:8e:18:99:b6:ed:1b:91:ab:fe:24: 7c:35:2f:cd:a4:f0:83:ae:24:e6:6d:01:0c:62:1e: 3a:61:0c:9d:79:87:97:70:fa:dc:09:b9:7f:7a:1d: ab:c8:21:de:ec:62:0f:70:f9:0d:2a:65:46:fb:c1: 36:96:51:9f:c1:6b:87:2f:91:98:6b:21:4f:a8:07: b9:97:3c:fe:74:7f:23:7d:7e:2c:39:ed:0f:74:69: e6:ab:51:cb:a7:28:13:e0:76:90:19:9e:9f:62:5e: 87:d4:78:ae:b1:f1:fb:a7:85:ea:cb:20:a4:ef:46: 86:6e:bf:36:11:05:e6:cd:37:2e:92:bd:b2:d7:40: 36:bc:9b:9e:4e:29:36:5a:ec:22:89:12:27:ae:f3: 2d:45:ad:58:df:8f:3d:79:47:3b:69:c6:9a:33:07: 7e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134967 sbgp-ipAddrBlock: critical IPv4: 103.22.244.0/22 IPv6: 2404:3980::/32 Signature Algorithm: sha256WithRSAEncryption d1:08:12:eb:e8:e2:86:3f:fc:1e:b2:57:15:41:7f:a8:bd:b9: 04:c9:50:af:17:e0:b2:6e:6d:6d:db:a1:a2:39:1a:f6:9e:56: ef:6e:5b:08:2f:7b:0f:65:3d:8f:1b:5c:e5:e8:c1:4c:af:e4: 3b:6e:6c:b7:59:bd:f5:61:27:24:ca:d3:30:03:52:0a:1b:c3: f0:3b:90:c9:19:3a:7f:52:7b:80:34:99:74:87:91:0f:59:7f: 08:e9:16:0e:fa:ef:08:6f:19:f0:6d:5a:59:4b:83:18:9f:82: b7:91:84:6b:c3:48:d3:8f:57:10:57:5e:91:8f:13:af:27:41: 38:7f:13:c1:a7:29:e1:e8:84:93:df:8f:0b:a5:ef:89:4e:06: e2:ae:c6:07:0a:fb:16:30:a6:d9:af:26:ca:39:4f:ad:12:b6: f1:b4:0a:c8:86:b4:96:8c:4c:3d:9f:60:75:e5:58:41:af:4a: 42:b2:e9:99:17:ec:81:ae:a2:c3:88:80:ac:6b:48:2f:6c:f4: 8b:e8:7b:d8:b9:c7:02:5f:35:e2:86:8d:26:cf:49:cc:19:0a: ed:28:eb:43:b1:56:0b:ba:38:0e:3f:de:25:c6:63:1e:fd:11: d3:96:dc:48:0e:5c:74:13:17:7f:42:f6:ee:44:38:4e:b7:92: bd:c3:c0:55 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnlTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEzMDEyNDU0MloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMjBCQzExMTAvBgNVBAUTKDA0QThGMjhGNTI3RTE4OTE2N0FDQzkw MzBDQkVEQUQ4QTlDNDE3QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeZmrhzO80mPuTecsa8PlUbBov+T6Zh/8Qs19U80SA9xm0oYFngbUG51IVWvbf d8WbA31tgPOKCIOmJ1nwodP5jANOVBL3ZX9MXf8oU5A8nX8wSmX9JQHyOvYot/9t jhiZtu0bkav+JHw1L82k8IOuJOZtAQxiHjphDJ15h5dw+twJuX96HavIId7sYg9w +Q0qZUb7wTaWUZ/Ba4cvkZhrIU+oB7mXPP50fyN9fiw57Q90aearUcunKBPgdpAZ np9iXofUeK6x8funherLIKTvRoZuvzYRBebNNy6SvbLXQDa8m55OKTZa7CKJEieu 8y1FrVjfjz15RztpxpozB35LAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUBKjyj1J+ GJFnrMkDDL7a2KnEF7kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTIwQkMxL0RBQzYwMzg4OEM3MjExRjBBMkIwQUU1NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyMEJDMS9EQUM2MDM4ODhDNzIxMUYwQTJCMEFFNTZDNEY5QUUwMi9CS2p5ajFK LUdKRm5yTWtEREw3YTJLbkVGN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg83MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZxb0MA0EAgAC MAcDBQAkBDmAMA0GCSqGSIb3DQEBCwUAA4IBAQDRCBLr6OKGP/weslcVQX+ovbkE yVCvF+Cybm1t26GiORr2nlbvblsIL3sPZT2PG1zl6MFMr+Q7bmy3Wb31YSckytMw A1IKG8PwO5DJGTp/UnuANJl0h5EPWX8I6RYO+u8IbxnwbVpZS4MYn4K3kYRrw0jT j1cQV16RjxOvJ0E4fxPBpynh6IST348Lpe+JTgbirsYHCvsWMKbZrybKOU+tErbx tArIhrSWjEw9n2B15VhBr0pCsumZF+yBrqLDiICsa0gvbPSL6HvYuccCXzXiho0m z0nMGQrtKOtDsVYLujgOP94lxmMe/RHTltxIDlx0Exd/QvbuRDhOt5K9w8BV -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:51 2025 by rpki-client