This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer File: CNP7qN3CGMuzA5wDdh5qtwduT6I.cer (raw, json) Hash identifier: nZ1DUZfXa3MPgOe0u7vFkG6Ra5APxrN2AXH1rtRf/sU= Subject key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0272FB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft caRepository: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 04 Nov 2025 16:40:18 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 137012 IP: 103.102.8.0/22 IP: 2401:dac0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160507 (0x272fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 4 16:40:18 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:65:7f:64:8d:5d:7a:bb:2c:f9:e2:93:ed:f9: d3:60:6f:63:00:b7:1c:14:f4:1b:71:e8:a2:1f:e3: 2b:db:c0:95:2c:a4:34:f0:d8:02:6f:fe:76:77:a8: 48:05:06:03:62:8a:30:3b:57:e2:f0:13:3e:d0:67: 52:0a:97:f9:33:96:1a:05:45:25:c5:69:72:21:a6: 54:25:98:7c:fe:54:50:0e:7a:04:4e:67:69:05:c4: f2:6c:5d:52:ff:44:0a:91:56:fd:e4:dd:16:b7:90: ed:68:82:8a:a3:d3:7f:b9:0e:f3:1a:d7:b6:94:ba: 0c:69:9e:b6:f0:4c:06:e0:35:f9:53:ab:9a:56:3f: ac:42:8e:48:04:b9:91:91:e4:e0:e4:82:f9:59:eb: b7:ef:bb:cf:3e:bc:5a:fa:37:c1:6f:04:6d:82:04: 2e:cd:3a:bc:8e:9e:fe:91:bd:cf:05:e5:04:04:45: a2:ad:fd:23:c0:8e:74:bb:69:07:b1:e6:f8:88:6d: 0d:53:f4:4a:75:11:83:4c:00:c2:e7:ef:95:a0:a6: 27:e9:50:d9:83:56:5a:7b:0a:96:e6:fd:28:f9:f0: 9d:4f:1e:34:a2:17:39:65:bb:1e:a1:05:f5:17:7b: 6a:8b:e4:1a:c4:55:e4:86:36:7c:3c:49:d0:37:bf: 15:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137012 sbgp-ipAddrBlock: critical IPv4: 103.102.8.0/22 IPv6: 2401:dac0::/32 Signature Algorithm: sha256WithRSAEncryption 7b:65:b6:35:08:ab:e3:6f:54:7e:fb:b7:b5:93:ba:e7:37:d5: ec:2e:21:c0:6e:59:6d:94:4c:e4:2a:b9:01:cf:1e:b1:80:0a: f7:9a:a0:72:39:d2:54:4d:34:6c:4c:d6:1f:23:3a:72:ff:34: ee:6c:09:13:76:14:41:3f:ea:f9:07:73:61:be:79:21:db:05: cd:14:f1:8d:23:0e:ed:28:b8:0d:b1:c9:55:e6:6b:a1:8a:59: f2:18:bf:1f:80:54:ab:ed:c8:13:1c:f6:b8:3a:3b:24:49:99: 53:81:cf:d6:94:5c:28:09:42:19:17:62:6f:b7:6e:2b:06:fd: b4:e2:77:4d:7b:c5:57:49:41:4d:d0:fc:e5:67:60:e9:7d:66: 77:c0:85:01:9d:49:7f:16:78:71:99:fc:06:4a:ea:fd:46:10: 07:3c:10:93:aa:d3:77:30:8f:26:e6:47:a9:f6:29:de:76:78: 23:57:ee:92:87:df:3d:47:48:a5:f5:77:06:a0:96:df:d7:21: 48:f7:c3:f1:8d:f6:65:40:9c:40:b4:d9:8d:7d:ec:8f:d8:e9: 66:ab:c6:5b:4b:0a:1f:61:2d:c0:44:11:cf:cc:ed:62:33:f1: 16:28:d8:d6:20:24:77:91:b9:b7:ca:85:36:ab:cc:70:bb:99: 20:41:34:b7 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnL7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNDE2NDAxOFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNEMxMEIxMTAvBgNVBAUTKDA4RDNGQkE4RERDMjE4Q0JCMzAzOUMw Mzc2MUU2QUI3MDc2RTRGQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/ZX9kjV16uyz54pPt+dNgb2MAtxwU9Btx6KIf4yvbwJUspDTw2AJv/nZ3qEgF BgNiijA7V+LwEz7QZ1IKl/kzlhoFRSXFaXIhplQlmHz+VFAOegROZ2kFxPJsXVL/ RAqRVv3k3Ra3kO1ogoqj03+5DvMa17aUugxpnrbwTAbgNflTq5pWP6xCjkgEuZGR 5ODkgvlZ67fvu88+vFr6N8FvBG2CBC7NOryOnv6Rvc8F5QQERaKt/SPAjnS7aQex 5viIbQ1T9Ep1EYNMAMLn75WgpifpUNmDVlp7Cpbm/Sj58J1PHjSiFzllux6hBfUX e2qL5BrEVeSGNnw8SdA3vxU5AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUCNP7qN3C GMuzA5wDdh5qtwduT6IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRDMTBCLzdCNkNBMTIyQUY2MjExRUI4QkExRjcxNEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0QzEwQi83QjZDQTEyMkFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4z Q0dNdXpBNXdEZGg1cXR3ZHVUNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhc0MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ2YIMA0EAgAC MAcDBQAkAdrAMA0GCSqGSIb3DQEBCwUAA4IBAQB7ZbY1CKvjb1R++7e1k7rnN9Xs LiHAblltlEzkKrkBzx6xgAr3mqByOdJUTTRsTNYfIzpy/zTubAkTdhRBP+r5B3Nh vnkh2wXNFPGNIw7tKLgNsclV5muhilnyGL8fgFSr7cgTHPa4OjskSZlTgc/WlFwo CUIZF2Jvt24rBv204ndNe8VXSUFN0PzlZ2DpfWZ3wIUBnUl/FnhxmfwGSur9RhAH PBCTqtN3MI8m5kep9inedngjV+6Sh989R0il9XcGoJbf1yFI98PxjfZlQJxAtNmN feyP2Olmq8ZbSwofYS3ARBHPzO1iM/EWKNjWICR3kbm3yoU2q8xwu5kgQTS3 -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:50 2025 by rpki-client