This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer File: DttKNycL9JQYSkbmAjFI_tbjOh4.cer (raw, json) Hash identifier: LSq4KWjgIITLTcYSIxYhrQPQogvXNgWkAZBMe6drVV0= Subject key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0279E5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 03:04:43 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 133393 IP: 103.217.96.0/23 IP: 103.238.194.0/24 IP: 103.253.116.0/24 IP: 139.5.120.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162277 (0x279e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 03:04:43 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:10:9c:10:7e:90:b8:0a:8a:9f:bc:40:16: cb:86:82:75:24:f9:43:30:48:d2:89:20:a8:57:4f: 45:38:32:70:c6:d8:cc:27:6e:51:a5:13:20:35:52: 29:ed:39:8f:58:fe:53:c4:07:d5:f2:68:86:da:e4: 50:5b:8e:5a:2e:5d:fa:67:2b:4e:96:a1:7b:2a:ca: e7:b9:1d:c7:b1:b0:09:aa:93:ae:f9:9d:28:d4:40: 81:bd:09:8a:91:3d:02:b1:f7:54:66:bb:13:42:fb: 77:77:66:72:69:09:8e:5b:f7:3f:28:00:8b:2a:51: af:47:fd:53:9e:99:49:95:36:6b:a9:5c:53:65:e4: ac:5e:e4:14:c5:a0:95:68:98:09:b8:61:2f:bb:b4: 5c:eb:c1:c6:09:67:9d:1e:60:6c:2e:dc:8c:55:94: 01:97:f7:40:1c:48:cb:15:89:cb:16:d9:35:56:ea: bf:cb:ac:ff:b1:39:81:bd:7f:6c:15:1a:fc:de:e9: 85:95:1d:9e:11:7b:ee:6f:34:b5:47:e2:c7:a4:e0: ac:5a:15:33:02:5f:46:e3:6b:59:17:7d:f3:39:97: 3d:4a:77:39:bc:ac:af:5f:18:4c:50:86:63:02:df: ef:b4:f3:ec:9f:d5:3f:b0:c7:3e:c3:2b:26:1f:6d: fa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133393 sbgp-ipAddrBlock: critical IPv4: 103.217.96.0/23 103.238.194.0/24 103.253.116.0/24 139.5.120.0/22 Signature Algorithm: sha256WithRSAEncryption 77:3f:23:f7:df:8b:ec:44:4e:f7:07:f4:b1:a0:7a:fb:6a:10: 23:32:39:6c:7a:67:67:22:55:f7:6c:24:64:60:23:32:16:aa: 47:da:e6:f2:ca:ae:a6:fc:9e:9d:57:26:e2:dc:25:e9:2c:76: f9:14:80:35:5c:96:a3:5b:c7:02:e8:14:b7:6c:a5:2a:de:ea: ba:ac:fd:ae:30:6a:df:07:a0:b6:f9:81:12:e5:2b:9b:6c:ed: b0:b5:f8:8e:e0:cb:29:a9:1b:fd:d0:ee:ec:fc:9a:93:0d:e0: fe:44:55:d7:c5:18:12:cc:1c:a2:a6:a4:35:97:2d:3e:1c:2f: 4d:a6:e4:02:87:f8:38:4a:0a:c1:84:33:97:a2:e0:fa:36:97: 5d:f4:a3:ff:c2:05:ed:a0:e4:93:09:05:d8:97:99:46:92:05: bd:92:a0:be:7b:74:b1:92:48:be:03:78:b5:55:a3:a5:dc:1a: 3a:7b:a3:dd:e7:56:77:4d:4b:9b:56:7d:11:a7:3b:9d:11:66: 5f:bb:d8:1e:b3:4f:d8:08:54:d3:c8:3b:05:7c:29:a1:92:bf: 92:92:9b:59:3e:09:f5:c2:32:d5:f5:c5:d2:1f:4c:eb:e1:05: 95:c4:63:70:ee:29:bf:d9:31:3a:58:dc:46:16:9a:9e:bb:1d: 8b:7f:04:33 -----BEGIN CERTIFICATE----- MIIGLDCCBRSgAwIBAgIDAnnlMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTAzMDQ0M1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZF NjAyMzE0OEZFRDZFMzNBMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC05hCcEH6QuAqKn7xAFsuGgnUk+UMwSNKJIKhXT0U4MnDG2MwnblGlEyA1Uint OY9Y/lPEB9XyaIba5FBbjlouXfpnK06WoXsqyue5HcexsAmqk675nSjUQIG9CYqR PQKx91RmuxNC+3d3ZnJpCY5b9z8oAIsqUa9H/VOemUmVNmupXFNl5Kxe5BTFoJVo mAm4YS+7tFzrwcYJZ50eYGwu3IxVlAGX90AcSMsVicsW2TVW6r/LrP+xOYG9f2wV Gvze6YWVHZ4Re+5vNLVH4sek4KxaFTMCX0bja1kXffM5lz1Kdzm8rK9fGExQhmMC 3++08+yf1T+wxz7DKyYfbfrDAgMBAAGjggMhMIIDHTAdBgNVHQ4EFgQUDttKNycL 9JQYSkbmAjFI/tbjOh4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg3OEUyL0FGMzIwODNFRkM2ODExRUU5OTYxREQ1REM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnlj TDlKUVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgkRMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBZ9lgAwQAZ+7C AwQAZ/10AwQCiwV4MA0GCSqGSIb3DQEBCwUAA4IBAQB3PyP334vsRE73B/SxoHr7 ahAjMjlsemdnIlX3bCRkYCMyFqpH2ubyyq6m/J6dVybi3CXpLHb5FIA1XJajW8cC 6BS3bKUq3uq6rP2uMGrfB6C2+YES5SubbO2wtfiO4MspqRv90O7s/JqTDeD+RFXX xRgSzByipqQ1ly0+HC9NpuQCh/g4SgrBhDOXouD6Npdd9KP/wgXtoOSTCQXYl5lG kgW9kqC+e3Sxkki+A3i1VaOl3Bo6e6Pd51Z3TUubVn0RpzudEWZfu9ges0/YCFTT yDsFfCmhkr+SkptZPgn1wjLV9cXSH0zr4QWVxGNw7im/2TE6WNxGFpqeux2LfwQz -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:31 2025 by rpki-client