This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer (raw, json) Hash identifier: /dAg+kPd4LSIbTh52LV6+nHzC9PHF1Kdz9bDDVlCHGY= Subject key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027546 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft caRepository: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 14 Nov 2025 15:21:27 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 133154 IP: 103.252.247.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161094 (0x27546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 14 15:21:27 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:1c:19:c7:d4:c1:88:e6:b6:5a:35:01:eb: 61:ac:2d:7c:44:5b:b5:3e:75:82:89:ee:b4:83:73: fd:6c:9e:a8:00:73:65:66:2a:37:4e:2d:f5:2f:c5: 85:05:7a:ab:e2:fb:eb:22:f8:2a:58:e5:51:18:d6: 67:0e:96:da:3a:66:c1:99:b7:87:62:27:65:69:39: ed:e6:ae:6b:92:65:2c:fa:cf:eb:d3:ff:95:66:54: ef:b3:8d:d8:1c:c0:86:b5:04:4a:3d:3d:cf:af:cc: e9:7c:20:23:e5:16:81:f0:f8:b2:19:8e:2a:d3:64: 68:b4:35:aa:a1:6f:25:a5:48:3d:4f:f4:02:e5:25: 43:a9:88:79:e7:2f:f2:ae:19:ba:92:d8:5d:ef:62: af:18:72:ee:fa:33:fc:ed:03:05:5c:ed:47:ec:6d: 5d:64:09:89:10:e7:a5:07:78:54:72:9e:a8:ac:12: a5:e4:4a:95:f0:1b:b9:93:1d:9a:89:91:78:dc:96: 61:62:ff:76:3d:7d:9b:42:ac:4d:24:51:be:1d:e0: cc:56:cc:c6:71:e6:35:08:77:53:a0:a8:54:98:94: 31:67:f1:36:cf:7a:ec:25:63:91:f2:76:7d:51:57: 5b:6a:12:32:a2:0e:01:e6:46:18:fe:cf:d7:f5:9d: 74:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133154 sbgp-ipAddrBlock: critical IPv4: 103.252.247.0/24 Signature Algorithm: sha256WithRSAEncryption 45:63:23:3c:2b:41:36:60:d9:3e:38:7c:57:42:ac:00:d2:a5: 7b:6f:15:29:ab:68:6f:a5:94:1f:26:2e:c8:3b:b1:00:0c:d8: 58:65:0d:91:e1:6d:d7:00:69:23:6a:52:59:72:1d:53:43:f1: 02:77:d3:1b:a5:8f:52:f3:fc:f5:22:2e:64:da:08:4d:fb:2d: af:46:2e:44:14:e0:f2:3e:78:ed:92:51:21:06:2e:a9:d8:33: 31:ef:81:2f:7e:ec:0c:d9:0f:c6:c5:43:60:6d:61:0f:6d:1e: 86:24:4d:7a:ec:47:24:c8:2a:bd:37:b6:2b:9a:21:74:32:a1: d1:7b:7a:ba:4d:22:69:80:ec:34:82:b7:87:02:19:16:f2:b1: 3b:02:31:7a:28:84:f0:1d:35:05:c0:19:33:40:02:1f:1a:df: ec:52:5f:90:c4:11:52:f0:6a:ed:41:53:1b:d4:31:31:83:fc: a2:2a:e0:23:2f:2c:ec:41:d9:e2:8b:30:ff:db:ca:06:ab:f2: 9f:e9:27:84:cb:aa:4b:1d:54:f9:0b:c7:9e:d7:08:1b:eb:af: d9:a2:d4:29:31:a3:88:50:aa:5a:de:35:58:f9:af:38:94:54: 2f:40:9e:e7:aa:e9:e6:11:1a:2b:f2:7f:02:25:e3:2c:fd:a8: 70:ea:b5:27 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnVGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNDE1MjEyN1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFC MjY1MzFBM0U3MDlCRjY1OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFHxwZx9TBiOa2WjUB62GsLXxEW7U+dYKJ7rSDc/1snqgAc2VmKjdOLfUvxYUF eqvi++si+CpY5VEY1mcOlto6ZsGZt4diJ2VpOe3mrmuSZSz6z+vT/5VmVO+zjdgc wIa1BEo9Pc+vzOl8ICPlFoHw+LIZjirTZGi0NaqhbyWlSD1P9ALlJUOpiHnnL/Ku GbqS2F3vYq8Ycu76M/ztAwVc7UfsbV1kCYkQ56UHeFRynqisEqXkSpXwG7mTHZqJ kXjclmFi/3Y9fZtCrE0kUb4d4MxWzMZx5jUId1OgqFSYlDFn8TbPeuwlY5Hydn1R V1tqEjKiDgHmRhj+z9f1nXQzAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUCz66iPGt oaG1CJGyZTGj5wm/ZZowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFMEIyLzY3MDQyQzE4RUY2NDExRUI4MzNGQzgwREM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4RTBCMi82NzA0MkMxOEVGNjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBH dG9hRzFDSkd5WlRHajV3bV9aWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAggiMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/z3MA0GCSqG SIb3DQEBCwUAA4IBAQBFYyM8K0E2YNk+OHxXQqwA0qV7bxUpq2hvpZQfJi7IO7EA DNhYZQ2R4W3XAGkjalJZch1TQ/ECd9MbpY9S8/z1Ii5k2ghN+y2vRi5EFODyPnjt klEhBi6p2DMx74EvfuwM2Q/GxUNgbWEPbR6GJE167EckyCq9N7YrmiF0MqHRe3q6 TSJpgOw0greHAhkW8rE7AjF6KITwHTUFwBkzQAIfGt/sUl+QxBFS8GrtQVMb1DEx g/yiKuAjLyzsQdniizD/28oGq/Kf6SeEy6pLHVT5C8ee1wgb66/ZotQpMaOIUKpa 3jVY+a84lFQvQJ7nqunmERor8n8CJeMs/ahw6rUn -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:42 2025 by rpki-client