This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer (raw, json) Hash identifier: a6BefIIq1nCp6Jr/Y73SNqpN1eFKCVVR9GrqvNmwdfo= Subject key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A4C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 23:08:41 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 150402 IP: 103.30.72.0/23 IP: 2001:df1:7bc0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162380 (0x27a4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 23:08:41 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:81:45:b0:2d:a7:e5:79:05:bc:f7:ab:ae:41: 18:75:98:6e:b6:82:17:50:b6:07:c3:77:e4:46:cd: d9:64:f1:a2:79:bd:e0:9c:3d:00:2f:90:be:08:a5: 7a:f0:1d:50:d5:87:c2:96:ad:66:98:45:60:7d:69: 75:d5:0f:fe:fb:32:4f:77:e6:24:52:33:49:36:4d: 8c:39:78:5d:b5:ad:66:5e:a9:7f:4a:95:8c:46:88: 90:db:32:e2:19:7e:4a:84:14:1f:7c:48:2a:43:6b: 22:c5:f1:9e:b2:c1:07:22:43:3a:f4:dd:8c:3e:b0: 1d:2c:58:75:f5:fe:40:e4:03:9a:04:e6:7c:52:10: 33:ae:73:a9:1d:01:6d:37:ae:7c:07:1a:e0:ba:5a: c4:23:68:05:1e:34:1e:4b:5f:ee:82:9c:6f:10:89: 47:4e:6a:12:86:4b:a1:27:d3:8e:ca:55:0a:ce:41: a7:41:92:01:ba:6e:d8:a7:1b:56:9a:5d:77:76:18: 14:a7:1e:c8:5d:10:23:7f:80:f2:53:d8:4f:4e:c4: 06:50:cd:87:e2:e2:5e:ba:c3:4e:ac:a9:95:77:02: 46:54:da:e8:97:e2:37:a6:cf:02:d9:31:d2:e9:d3: dc:2d:28:2d:5f:a4:70:78:5d:66:10:2c:8b:ea:d9: 30:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 150402 sbgp-ipAddrBlock: critical IPv4: 103.30.72.0/23 IPv6: 2001:df1:7bc0::/48 Signature Algorithm: sha256WithRSAEncryption 0e:71:f1:50:b8:f4:f7:49:ba:85:1e:bb:b9:83:54:17:b2:80: ea:4c:75:63:db:d7:53:68:02:91:3f:c4:87:ac:a7:36:d2:f8: 11:e3:0d:22:31:e1:4b:a7:91:33:e2:4d:60:07:93:4c:7a:97: c7:4f:f1:35:b2:54:ac:43:e2:29:5e:01:6f:d8:ab:47:7d:fb: 17:d4:e8:e3:29:6b:6e:87:fb:87:45:89:f3:e0:2f:8d:45:31: 3c:20:05:4f:5f:6f:35:d1:1a:48:86:c4:8e:8f:7b:38:ba:82: b6:dd:16:53:92:99:92:ea:f2:c1:37:1f:0e:b6:b6:e6:ae:db: 86:12:01:23:3d:a7:22:0a:18:f1:d2:ec:af:0a:66:8f:62:4a: 16:db:43:6d:65:46:22:5e:66:9e:2e:8d:02:3b:dc:c8:23:d5: c0:0b:5e:df:33:01:18:28:b6:ad:da:a4:c8:0e:fd:cb:5c:29: 52:77:3d:e7:17:d1:51:25:97:d6:60:d8:85:64:dc:ff:f1:dc: 86:31:cb:2e:33:d9:14:6a:06:54:6c:a6:5d:00:35:04:81:5f: fc:10:eb:02:93:ed:c5:57:e9:42:5d:87:77:7a:d1:48:0e:6d: 09:c2:b8:73:99:f8:96:88:86:a6:c5:11:a4:30:e8:ba:86:0e: 05:35:c0:99 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnpMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTIzMDg0MVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JF OTQ3RUM1RDZGNEE4OTVDRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVgUWwLafleQW896uuQRh1mG62ghdQtgfDd+RGzdlk8aJ5veCcPQAvkL4IpXrw HVDVh8KWrWaYRWB9aXXVD/77Mk935iRSM0k2TYw5eF21rWZeqX9KlYxGiJDbMuIZ fkqEFB98SCpDayLF8Z6ywQciQzr03Yw+sB0sWHX1/kDkA5oE5nxSEDOuc6kdAW03 rnwHGuC6WsQjaAUeNB5LX+6CnG8QiUdOahKGS6En047KVQrOQadBkgG6btinG1aa XXd2GBSnHshdECN/gPJT2E9OxAZQzYfi4l66w06sqZV3AkZU2uiX4jemzwLZMdLp 09wtKC1fpHB4XWYQLIvq2TAtAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUDMq5RHoX rDyKeHvpR+xdb0qJXOkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE2RUEwL0Y5MTQwMEMyOEMyQzExRUQ5NjM4RTY3MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBNkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1Ukhv WHJEeUtlSHZwUi14ZGIwcUpYT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkuCMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZx5IMA8EAgAC MAkDBwAgAQ3xe8AwDQYJKoZIhvcNAQELBQADggEBAA5x8VC49PdJuoUeu7mDVBey gOpMdWPb11NoApE/xIespzbS+BHjDSIx4UunkTPiTWAHk0x6l8dP8TWyVKxD4ile AW/Yq0d9+xfU6OMpa26H+4dFifPgL41FMTwgBU9fbzXRGkiGxI6Pezi6grbdFlOS mZLq8sE3Hw62tuau24YSASM9pyIKGPHS7K8KZo9iShbbQ21lRiJeZp4ujQI73Mgj 1cALXt8zARgotq3apMgO/ctcKVJ3PecX0VEll9Zg2IVk3P/x3IYxyy4z2RRqBlRs pl0ANQSBX/wQ6wKT7cVX6UJdh3d60UgObQnCuHOZ+JaIhqbFEaQw6LqGDgU1wJk= -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:39 2025 by rpki-client