This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer
File: CB6icKn0s2sOyJai0hSO5Ok-Xys.cer (raw, json)
Hash identifier: 1cC3nPwSX/quZb5Pbr4Q8AlHTa4WlQfy+dNzvhX00gE=
Subject key identifier: 08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027A58
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Dec 2025 01:42:04 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 147056
IP: 103.173.187.0/24
IP: 2001:df7:a680::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 06:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162392 (0x27a58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 2 01:42:04 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91BB921, serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:7e:7a:b4:5e:ed:87:3c:d7:5c:ca:f6:e0:
2f:37:52:f2:f2:f8:cc:22:1a:62:41:ea:b8:ce:3e:
09:bf:2b:20:09:9c:fd:12:45:30:2f:ba:83:ab:35:
48:b7:3e:d4:3b:0d:ad:55:a9:e6:84:32:33:8f:12:
b8:c8:9b:c3:9d:eb:18:19:8a:0a:94:45:ab:45:12:
2d:38:e9:05:50:a6:a8:19:25:b6:f6:57:58:72:41:
9a:19:3c:eb:73:bd:b3:02:1c:ca:68:8f:6e:25:fd:
79:16:cb:80:cc:e3:1b:62:c9:e9:66:b9:d1:01:1a:
d7:22:5a:4a:6c:7c:ad:0d:7a:86:da:5f:84:2d:ab:
0d:21:1f:23:a2:cc:36:40:2a:d8:e5:bd:9b:51:cd:
68:fc:19:b6:21:48:c4:61:8c:0e:0b:6e:3d:24:89:
0d:bc:3b:cc:3d:51:90:d8:b9:b6:df:19:d7:f5:03:
e9:15:a6:2b:5d:99:22:43:e3:e8:b4:43:7f:4d:d4:
15:ac:93:66:c7:0d:10:6a:bd:80:a2:f2:3e:bf:87:
34:dc:61:a7:bb:4b:81:f3:f8:9a:86:c0:52:34:c9:
c7:eb:4b:b5:fb:49:cf:5f:8b:db:0e:ad:24:a9:7b:
d4:87:bf:6c:22:79:b4:9e:8f:f7:1a:6d:34:be:47:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
147056
sbgp-ipAddrBlock: critical
IPv4:
103.173.187.0/24
IPv6:
2001:df7:a680::/48
Signature Algorithm: sha256WithRSAEncryption
c4:1c:24:6e:25:75:06:48:c8:0a:0f:ea:00:e2:a9:fe:32:55:
67:39:2f:fd:2b:8d:e7:81:7e:a5:f8:0f:e9:5b:fc:63:ed:76:
8d:e2:3d:9d:04:61:1a:92:f8:7c:9f:b2:be:2c:11:43:00:72:
8f:b9:32:e4:ad:c3:1a:04:7b:40:ff:fd:45:77:a9:66:bd:8b:
c9:55:44:78:31:0a:9f:6e:e0:ea:ea:76:f2:86:35:ad:10:f0:
06:2f:5c:63:85:8b:10:b0:3d:43:d0:32:5b:10:f2:8a:d7:0b:
7a:cc:96:25:87:8b:85:27:ef:8b:c2:67:f7:a6:f9:49:d5:c5:
98:25:06:89:98:c5:04:ec:93:b9:c3:95:7d:54:bb:68:da:5f:
3d:92:8b:f4:34:13:08:e1:e6:7c:cf:5e:93:1d:18:06:8f:e1:
a9:8a:a5:bf:89:ff:11:1c:cb:7e:fb:35:73:a6:8a:56:45:51:
6f:fd:92:ce:da:09:0e:8f:c6:f6:fb:93:f0:98:0e:c1:b5:51:
fa:a8:19:fe:fe:07:5b:f8:e3:0b:af:67:72:85:95:3f:86:32:
8b:70:1a:cb:c0:0b:4c:b2:9f:af:e7:49:ba:b6:a0:ed:1e:e4:
cf:dd:31:30:87:34:dd:86:f9:1b:64:0c:9b:a2:6e:f3:86:48:
81:e8:7a:0b
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAnpYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTIwMjAxNDIwNFoXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQkI5MjExMTAvBgNVBAUTKDA4MUVBMjcwQTlGNEIzNkIwRUM4OTZB
MkQyMTQ4RUU0RTkzRTVGMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCcnH56tF7thzzXXMr24C83UvLy+MwiGmJB6rjOPgm/KyAJnP0SRTAvuoOrNUi3
PtQ7Da1VqeaEMjOPErjIm8Od6xgZigqURatFEi046QVQpqgZJbb2V1hyQZoZPOtz
vbMCHMpoj24l/XkWy4DM4xtiyelmudEBGtciWkpsfK0NeobaX4Qtqw0hHyOizDZA
KtjlvZtRzWj8GbYhSMRhjA4Lbj0kiQ28O8w9UZDYubbfGdf1A+kVpitdmSJD4+i0
Q39N1BWsk2bHDRBqvYCi8j6/hzTcYae7S4Hz+JqGwFI0ycfrS7X7Sc9fi9sOrSSp
e9SHv2wiebSej/cabTS+R4VnAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUCB6icKn0
s2sOyJai0hSO5Ok+XyswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUJCOTIxL0REQjhFMTRDNzU2MjExRUVCQjgyNTI1N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFCQjkyMS9EREI4RTE0Qzc1NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tu
MHMyc095SmFpMGhTTzVPay1YeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAj5wMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ627MA8EAgAC
MAkDBwAgAQ33poAwDQYJKoZIhvcNAQELBQADggEBAMQcJG4ldQZIyAoP6gDiqf4y
VWc5L/0rjeeBfqX4D+lb/GPtdo3iPZ0EYRqS+Hyfsr4sEUMAco+5MuStwxoEe0D/
/UV3qWa9i8lVRHgxCp9u4OrqdvKGNa0Q8AYvXGOFixCwPUPQMlsQ8orXC3rMliWH
i4Un74vCZ/em+UnVxZglBomYxQTsk7nDlX1Uu2jaXz2Si/Q0Ewjh5nzPXpMdGAaP
4amKpb+J/xEcy377NXOmilZFUW/9ks7aCQ6Pxvb7k/CYDsG1UfqoGf7+B1v44wuv
Z3KFlT+GMotwGsvAC0yyn6/nSbq2oO0e5M/dMTCHNN2G+RtkDJuibvOGSIHoegs=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:33:23 2025 by rpki-client