This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer File: ByXySRgBUFGFyQaaQBNjXDi1a3I.cer (raw, json) Hash identifier: ia4hw15O3WVDhnL4ERiMMem7StAEAAZwxZRQ6QUf19c= Subject key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0273EB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft caRepository: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 07 Nov 2025 16:23:01 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 137189 IP: 103.104.140.0/23 IP: 103.104.143.0/24 IP: 2402:1340::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160747 (0x273eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 7 16:23:01 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A918D808, serialNumber=0725F2491801505185C9069A4013635C38B56B72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:7c:6e:7e:46:5b:2a:99:d0:ae:11:f5:0f: 1c:8c:f5:c3:f5:28:c3:54:a5:b6:5e:57:e1:13:f0: b7:de:4d:1b:28:95:31:ca:af:46:d3:19:0b:fe:d4: 5a:38:b1:d6:bb:da:cf:70:14:02:6d:90:70:f9:22: 38:5a:c6:61:0b:5b:67:0a:58:bb:90:f8:b1:af:e5: e3:01:37:8e:b3:64:ee:87:f9:e9:9e:c4:d9:0c:fb: ca:55:96:7f:cc:7b:96:ce:28:29:09:d4:34:2e:d1: 45:39:26:7b:01:e1:b2:e1:eb:99:80:2d:3e:03:64: 56:78:f0:83:2a:af:8e:70:c9:e8:75:ab:b5:6e:dd: 86:59:2c:b3:98:50:f4:03:81:65:b0:6e:19:d7:6d: 4d:3e:4f:ec:d0:18:ee:40:de:dd:97:3a:6d:8b:73: 4e:a6:71:92:6a:6c:ec:73:23:5c:a5:2c:97:e8:c0: b1:60:83:2d:be:5c:e8:da:26:80:d5:e2:39:0a:1a: 99:be:22:2e:f0:c0:ad:a2:b7:44:38:67:6d:24:cc: b2:5a:b9:09:5b:c6:c7:5b:d6:c6:ed:9b:19:e1:01: 10:d3:a6:d6:88:2a:8d:34:c5:cb:95:8d:6c:a7:ee: ab:79:6f:72:d6:a6:ca:ee:06:2b:43:f8:ef:ef:04: 92:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137189 sbgp-ipAddrBlock: critical IPv4: 103.104.140.0/23 103.104.143.0/24 IPv6: 2402:1340::/32 Signature Algorithm: sha256WithRSAEncryption 11:a9:99:80:1c:69:27:16:a7:a0:bf:9f:65:05:94:97:09:20: 6e:41:3e:56:08:b0:7d:fc:a8:6a:6e:0f:93:30:fb:46:34:dc: d3:f5:e9:19:4f:3b:86:d7:e9:b7:cf:af:f4:e9:a2:49:65:ef: d4:48:b5:d2:72:f6:ff:b5:05:35:b2:b1:81:30:ce:fe:66:57: 7c:2b:2c:ec:93:05:80:29:0b:ac:de:8b:ec:23:09:91:20:76: 30:57:99:8d:5f:bc:09:c7:34:64:68:53:b8:5c:45:3c:c8:44: 29:a8:35:fc:54:eb:75:63:a3:d3:ed:c1:85:5a:a2:50:20:92: b0:1b:b1:44:1f:4b:aa:2e:51:72:b7:db:84:d0:80:48:ac:bf: ff:6a:70:30:7b:0c:8d:42:31:4c:4b:ca:dd:84:86:07:01:5c: cd:77:fd:8b:28:fb:25:c3:32:50:2e:1f:c5:65:07:6c:ca:1f: 67:08:80:86:58:d3:92:26:ee:7a:6e:ab:49:dc:1a:fa:48:91: 02:56:c5:4f:78:d5:ec:1d:29:9b:32:f8:f9:81:8e:0c:7d:e4: 28:e3:e3:65:80:c2:4d:41:d3:31:af:d2:da:61:46:a9:9a:57: 29:b9:e1:72:53:2c:d4:1e:c1:4c:af:e0:3a:f5:19:2b:5d:95: 12:d5:fb:f3 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAnPrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNzE2MjMwMVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOEQ4MDgxMTAvBgNVBAUTKDA3MjVGMjQ5MTgwMTUwNTE4NUM5MDY5 QTQwMTM2MzVDMzhCNTZCNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxenxufkZbKpnQrhH1DxyM9cP1KMNUpbZeV+ET8LfeTRsolTHKr0bTGQv+1Fo4 sda72s9wFAJtkHD5IjhaxmELW2cKWLuQ+LGv5eMBN46zZO6H+emexNkM+8pVln/M e5bOKCkJ1DQu0UU5JnsB4bLh65mALT4DZFZ48IMqr45wyeh1q7Vu3YZZLLOYUPQD gWWwbhnXbU0+T+zQGO5A3t2XOm2Lc06mcZJqbOxzI1ylLJfowLFggy2+XOjaJoDV 4jkKGpm+Ii7wwK2it0Q4Z20kzLJauQlbxsdb1sbtmxnhARDTptaIKo00xcuVjWyn 7qt5b3LWpsruBitD+O/vBJIxAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUByXySRgB UFGFyQaaQBNjXDi1a3IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThEODA4L0UyNkI0NjQyRjRCMjExRTlCRjNDRTU2M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4RDgwOC9FMjZCNDY0MkY0QjIxMUU5QkYzQ0U1NjNDNEY5QUUwMi9CeVh5U1Jn QlVGR0Z5UWFhUUJOalhEaTFhM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhflMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBZ2iMAwQAZ2iP MA0EAgACMAcDBQAkAhNAMA0GCSqGSIb3DQEBCwUAA4IBAQARqZmAHGknFqegv59l BZSXCSBuQT5WCLB9/Khqbg+TMPtGNNzT9ekZTzuG1+m3z6/06aJJZe/USLXScvb/ tQU1srGBMM7+Zld8KyzskwWAKQus3ovsIwmRIHYwV5mNX7wJxzRkaFO4XEU8yEQp qDX8VOt1Y6PT7cGFWqJQIJKwG7FEH0uqLlFyt9uE0IBIrL//anAwewyNQjFMS8rd hIYHAVzNd/2LKPslwzJQLh/FZQdsyh9nCICGWNOSJu56bqtJ3Br6SJECVsVPeNXs HSmbMvj5gY4MfeQo4+NlgMJNQdMxr9LaYUapmlcpueFyUyzUHsFMr+A69RkrXZUS 1fvz -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:34 2025 by rpki-client