This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer (raw, json) Hash identifier: y47jsQjslL/uwUBteIEGMDAF14uDy2ZT89pN3Sur9LM= Subject key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027AE3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 18:04:24 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 135637 IP: 103.77.100.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162531 (0x27ae3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 18:04:24 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5b:17:46:e0:7f:80:dd:94:ad:d9:74:fe:3a: 6d:cb:dc:13:cb:1e:fa:7a:0a:1b:63:1a:22:41:60: be:b9:a3:0e:b5:6a:fa:37:85:93:6c:23:c1:68:ce: 07:d5:c8:d3:e7:48:4f:cc:5b:55:df:23:1c:52:31: fb:43:0d:c5:45:67:ca:fa:06:a2:c0:50:ee:23:90: 63:08:f9:ee:91:0b:3f:82:75:e8:08:79:03:8e:f1: 6b:dd:6e:90:a4:05:28:c4:37:44:5d:5f:d1:a1:1f: 01:27:89:57:53:9a:68:5e:ca:0e:15:2f:23:fb:85: 78:e9:90:93:a8:11:93:49:5e:5e:80:15:23:8e:73: 77:04:78:05:2d:e4:52:02:42:24:8d:05:d0:cc:7b: 6a:3c:65:69:dd:c9:e8:d7:76:0b:d9:21:e4:80:c3: 41:d9:db:39:c0:d5:7c:93:ce:02:4d:eb:1d:3b:3d: 8e:54:69:ae:f5:95:b4:81:ae:d1:2a:73:ed:21:48: ec:95:26:82:aa:a6:f2:a2:fb:e5:82:78:97:43:77: 15:fd:de:c5:ef:d4:d0:85:12:12:0d:34:72:50:62: 75:4b:a9:1b:dd:12:12:b9:ab:48:be:62:dd:58:91: eb:53:a9:8d:f5:a2:eb:28:7a:fd:90:ac:91:27:62: 40:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135637 sbgp-ipAddrBlock: critical IPv4: 103.77.100.0/23 Signature Algorithm: sha256WithRSAEncryption 31:4d:0c:cd:09:77:10:67:1d:d0:b8:3c:12:16:94:5c:c1:f5: 2d:ca:70:6e:c2:15:a3:da:a1:df:07:a8:20:81:33:ed:90:2f: 4e:3c:82:a4:c7:45:07:c3:10:7b:fa:a9:09:d6:c3:d8:79:ff: 24:be:c0:e0:f0:27:cd:df:ae:ce:1f:b6:61:1b:0d:c7:41:d6: c6:68:3d:96:64:bb:ad:30:41:93:51:61:77:06:f5:c3:fa:5d: cc:bc:9e:2c:e6:77:79:a5:ee:dc:c3:cb:8d:71:f5:ce:9a:4f: 54:d2:2a:61:54:71:87:72:3e:64:db:7e:b1:27:cf:fb:2b:ab: 0d:fa:03:95:b3:c5:ae:b5:25:14:4b:34:d9:b2:72:e6:be:be: 08:52:ed:9f:c0:c8:57:ce:1e:67:eb:44:49:a9:8e:ca:8f:50: 52:61:1e:f6:cb:86:78:ab:15:c5:55:7d:c0:91:d8:e9:47:c1: dd:0a:bc:0d:24:d4:54:c8:d8:e0:48:2c:4b:2f:78:de:5e:ec: 45:9d:7d:4d:00:c1:e2:76:2a:87:8f:08:0b:d5:ac:a2:26:78: e7:0d:e7:ce:ac:90:0d:cc:db:42:44:81:24:1f:fb:45:62:fc: 8e:7e:e9:2c:74:ea:33:4a:e9:5d:fc:74:2d:c9:64:12:70:88: fd:3e:05:5c -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnrjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjE4MDQyNFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBG MEU2NTZGMjQzMTRFQUZCRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcWxdG4H+A3ZSt2XT+Om3L3BPLHvp6ChtjGiJBYL65ow61avo3hZNsI8FozgfV yNPnSE/MW1XfIxxSMftDDcVFZ8r6BqLAUO4jkGMI+e6RCz+CdegIeQOO8WvdbpCk BSjEN0RdX9GhHwEniVdTmmheyg4VLyP7hXjpkJOoEZNJXl6AFSOOc3cEeAUt5FIC QiSNBdDMe2o8ZWndyejXdgvZIeSAw0HZ2znA1XyTzgJN6x07PY5Uaa71lbSBrtEq c+0hSOyVJoKqpvKi++WCeJdDdxX93sXv1NCFEhINNHJQYnVLqRvdEhK5q0i+Yt1Y ketTqY31ousoev2QrJEnYkCLAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUCVXZHyyq UrtPfHDw5lbyQxTq+9UwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM2MTJFLzY1QkMxN0QyMEI2MTExRUFBRjA0MkY2OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDNjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5 cVVydFBmSER3NWxieVF4VHEtOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhHVMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ01kMA0GCSqG SIb3DQEBCwUAA4IBAQAxTQzNCXcQZx3QuDwSFpRcwfUtynBuwhWj2qHfB6gggTPt kC9OPIKkx0UHwxB7+qkJ1sPYef8kvsDg8CfN367OH7ZhGw3HQdbGaD2WZLutMEGT UWF3BvXD+l3MvJ4s5nd5pe7cw8uNcfXOmk9U0iphVHGHcj5k236xJ8/7K6sN+gOV s8WutSUUSzTZsnLmvr4IUu2fwMhXzh5n60RJqY7Kj1BSYR72y4Z4qxXFVX3Akdjp R8HdCrwNJNRUyNjgSCxLL3jeXuxFnX1NAMHidiqHjwgL1ayiJnjnDefOrJANzNtC RIEkH/tFYvyOfuksdOozSuld/HQtyWQScIj9PgVc -----END CERTIFICATE-----Generated at Sat Dec 6 10:46:50 2025 by rpki-client