This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer File: Cxopcl-6iizdVPJWV-WHR46_u68.cer (raw, json) Hash identifier: 76Riwv58eEJsaj3V21Ub1mjNiukPbrsLw7k3EVzLfQg= Subject key identifier: 0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027420 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft caRepository: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 09 Nov 2025 05:35:09 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 23664 IP: 103.208.208.0/22 IP: 137.59.244.0/22 IP: 203.91.192.0/19 IP: 2405:8080::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160800 (0x27420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 9 05:35:09 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A911793C, serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:af:47:d8:d0:4e:95:ec:ef:cc:6e:17:2d:64: a8:04:20:4b:38:db:86:9d:4b:2a:12:aa:d4:cb:f0: e4:04:35:85:45:c2:97:fe:8d:a1:f1:bc:3f:b9:8a: f6:dd:2b:02:44:d4:19:e4:e8:30:ee:cb:d7:02:61: f6:8e:49:de:bf:55:5d:e4:55:b6:47:ba:b7:b4:aa: 02:2f:06:0f:79:8e:dd:39:c2:0d:a8:63:24:53:cf: c0:ef:4e:ba:3d:c3:0e:3d:7c:ab:73:6d:d6:20:f5: 20:d7:df:88:d2:16:f9:d8:d2:ba:fd:9a:c5:47:c8: d3:05:30:42:f3:4c:5c:db:67:9f:d1:b6:bd:88:cf: cd:e6:c0:52:2f:e8:16:47:f5:f0:f0:98:b0:b8:ce: 24:d2:43:4c:87:0c:e1:7b:a5:1a:c4:9b:36:c0:cf: ba:c8:93:46:14:ab:65:12:bb:fc:78:96:e4:5d:2a: ec:69:6e:12:86:32:66:f3:34:6b:1b:01:1e:56:48: c4:f4:bc:34:0d:70:cd:11:b5:ae:42:e2:74:4c:6b: af:67:3f:ca:13:85:79:3f:c9:f8:f9:a5:13:73:2a: e3:c9:d8:2a:82:58:6f:81:db:0f:fe:04:a0:6c:8e: ba:22:93:c0:27:a6:76:b3:b6:92:d8:71:54:f9:4a: 94:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 23664 sbgp-ipAddrBlock: critical IPv4: 103.208.208.0/22 137.59.244.0/22 203.91.192.0/19 IPv6: 2405:8080::/32 Signature Algorithm: sha256WithRSAEncryption a0:dc:48:28:65:ab:52:5a:3e:1b:ed:86:53:58:4a:7d:f9:c0: 72:67:56:0b:83:62:a9:71:50:00:fe:16:02:c7:c3:ac:df:04: ab:79:85:85:3d:60:9b:ae:2f:97:1e:0c:85:69:6d:b5:8d:80: e7:40:bb:c4:13:b0:52:03:98:25:ec:6e:a0:08:f5:36:9d:a4: e6:4d:6b:a7:ed:61:46:6b:ca:18:fc:6c:03:fc:26:bf:12:7c: 1f:ff:5e:fd:37:1f:27:07:79:c6:78:8e:6d:df:bd:17:33:dc: bc:1b:4b:b2:6a:7a:87:59:dd:5f:f1:f7:2d:55:25:43:f8:2d: a4:e1:57:7d:35:b0:08:e5:24:9d:e0:9b:c9:90:64:30:84:5c: 5d:93:c1:d7:38:07:f7:55:ef:79:44:70:f2:3b:d7:2a:65:c8: b3:11:89:ea:e6:9e:d2:a6:33:c7:32:86:64:2c:61:be:27:d9: 0e:a8:68:4f:93:6f:62:6e:04:cc:53:b6:ed:db:35:ef:fa:58: ce:98:12:e6:70:78:78:81:0a:50:13:17:7e:66:e1:6a:f3:85: 22:ea:b2:51:a9:ff:ee:a0:0b:d1:2a:80:3d:93:0d:3f:4a:7d: f9:a9:a6:96:dc:35:13:28:05:95:0c:ff:d2:6e:7d:ca:64:e8: 1f:19:77:9b -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIDAnQgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwOTA1MzUwOVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMTc5M0MxMTAvBgNVBAUTKDBCMUEyOTcyNUZCQThBMkNERDU0RjI1 NjU3RTU4NzQ3OEVCRkJCQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcr0fY0E6V7O/MbhctZKgEIEs424adSyoSqtTL8OQENYVFwpf+jaHxvD+5ivbd KwJE1Bnk6DDuy9cCYfaOSd6/VV3kVbZHure0qgIvBg95jt05wg2oYyRTz8DvTro9 ww49fKtzbdYg9SDX34jSFvnY0rr9msVHyNMFMELzTFzbZ5/Rtr2Iz83mwFIv6BZH 9fDwmLC4ziTSQ0yHDOF7pRrEmzbAz7rIk0YUq2USu/x4luRdKuxpbhKGMmbzNGsb AR5WSMT0vDQNcM0Rta5C4nRMa69nP8oThXk/yfj5pRNzKuPJ2CqCWG+B2w/+BKBs jroik8AnpnaztpLYcVT5SpR5AgMBAAGjggMpMIIDJTAdBgNVHQ4EFgQUCxopcl+6 iizdVPJWV+WHR46/u68wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE3OTNDLzI2MUY4NTAwQTk4RjExRjBCNjU3Rjk2NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExNzkzQy8yNjFGODUwMEE5OEYxMUYwQjY1N0Y5NjVDNEY5QUUwMi9DeG9wY2wt NmlpemRWUEpXVi1XSFI0Nl91NjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICXHAwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJn0NADBAKJO/QD BAXLW8AwDQQCAAIwBwMFACQFgIAwDQYJKoZIhvcNAQELBQADggEBAKDcSChlq1Ja PhvthlNYSn35wHJnVguDYqlxUAD+FgLHw6zfBKt5hYU9YJuuL5ceDIVpbbWNgOdA u8QTsFIDmCXsbqAI9TadpOZNa6ftYUZryhj8bAP8Jr8SfB//Xv03HycHecZ4jm3f vRcz3LwbS7JqeodZ3V/x9y1VJUP4LaThV301sAjlJJ3gm8mQZDCEXF2Twdc4B/dV 73lEcPI71yplyLMRiermntKmM8cyhmQsYb4n2Q6oaE+Tb2JuBMxTtu3bNe/6WM6Y EuZweHiBClATF35m4WrzhSLqslGp/+6gC9EqgD2TDT9KffmpppbcNRMoBZUM/9Ju fcpk6B8Zd5s= -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:16 2025 by rpki-client