This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer File: EMpiwqdJv5H1YirewPGWGEk8u6k.cer (raw, json) Hash identifier: 3WIYAGHr39xCzNoR+bpNesvuxhIgKIchoiI1DuWfI2Q= Subject key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02779E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft caRepository: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 00:11:41 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 150341 IP: 103.157.246.0/23 IP: 2001:df1:5a40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161694 (0x2779e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 00:11:41 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:b8:84:b1:24:63:12:8d:55:2f:d4:42:4a: dc:dc:1f:57:f8:74:a6:b4:1c:d1:18:85:fb:5d:e5: 02:ab:0f:1c:2e:44:71:36:cb:44:b8:b6:b3:92:aa: ed:bf:ab:61:bf:eb:3f:4e:54:f8:c3:f6:c9:2d:b3: d3:85:f9:32:58:bf:2d:cc:1b:ed:e6:25:f4:b0:e4: 81:b7:52:7f:04:bd:b4:01:b3:8d:ca:01:d7:a5:18: 9e:6e:bf:cc:00:7c:00:36:0d:ec:6e:f4:d3:a1:e8: b6:51:fc:a5:a9:cd:f8:0f:64:c2:58:0b:40:23:6a: 30:71:66:44:e4:10:c9:24:ff:da:1e:47:dc:22:c9: 61:16:a5:c1:1e:5f:bb:07:97:46:60:2c:ec:1d:79: 01:44:9c:9f:9b:ca:a1:2a:fd:ed:f2:5b:4a:a2:3f: 32:a5:cd:23:4b:d8:b9:94:ce:20:1d:e3:78:26:0d: 89:de:07:3b:ea:47:b3:1d:e5:7b:f3:e9:25:ba:59: 5e:a9:72:aa:3e:24:28:e3:af:7f:75:f9:b3:29:11: 6b:15:8f:fe:29:89:1c:65:08:18:71:84:5b:1d:3d: b4:23:d9:b6:07:2a:b2:a7:5d:71:c6:c7:94:9b:63: 3a:4b:0d:15:64:10:28:5b:90:ad:f5:3b:ff:07:58: 91:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 150341 sbgp-ipAddrBlock: critical IPv4: 103.157.246.0/23 IPv6: 2001:df1:5a40::/48 Signature Algorithm: sha256WithRSAEncryption 95:cb:14:98:be:1e:ea:5b:75:87:8c:f9:cc:40:29:4f:c8:b4: 4c:a9:d0:68:1e:c9:ab:a9:38:af:0b:f6:08:01:59:91:22:8b: c1:a5:b7:e5:05:79:21:d2:e8:14:42:8c:b5:7e:cb:ed:5b:d4: 28:20:2a:43:28:0e:0a:36:3c:7a:3f:7c:97:bf:9f:1d:b6:5a: df:8d:95:a1:8f:b7:b5:e9:13:ea:23:a6:fe:7e:9d:17:6a:0f: 82:a3:2b:ea:8f:03:55:20:90:2d:ef:39:14:c7:40:9f:42:e7: a4:bb:0e:7e:a4:49:8a:0e:30:3e:00:a2:ef:fb:22:fa:09:55: f8:9a:73:5c:71:e6:d4:99:aa:04:3e:31:82:d3:93:3a:29:f5: 9f:ff:22:a4:8d:c9:3b:f5:d0:b1:7f:03:35:1f:42:60:c2:c0: 7b:74:27:39:cb:e2:57:e2:1b:ea:e9:67:f5:0f:68:88:61:a5: fe:d5:71:3e:80:ab:71:bd:f7:2f:96:0c:6e:63:1c:45:c3:a6: a5:8f:a8:a8:05:d9:d0:7e:1f:1e:bb:9c:96:96:40:94:75:86: 9f:68:7f:dd:f7:6d:a2:0a:3f:b2:6f:bf:37:80:ba:6f:3f:e1: c1:b7:74:0f:05:1a:41:e5:61:ad:b1:29:29:ae:34:97:48:e4: c9:f9:13:5e -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAneeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTAwMTE0MVoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFE RUMwRjE5NjE4NDkzQ0JCQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7l7iEsSRjEo1VL9RCStzcH1f4dKa0HNEYhftd5QKrDxwuRHE2y0S4trOSqu2/ q2G/6z9OVPjD9skts9OF+TJYvy3MG+3mJfSw5IG3Un8EvbQBs43KAdelGJ5uv8wA fAA2Dexu9NOh6LZR/KWpzfgPZMJYC0AjajBxZkTkEMkk/9oeR9wiyWEWpcEeX7sH l0ZgLOwdeQFEnJ+byqEq/e3yW0qiPzKlzSNL2LmUziAd43gmDYneBzvqR7Md5Xvz 6SW6WV6pcqo+JCjjr391+bMpEWsVj/4piRxlCBhxhFsdPbQj2bYHKrKnXXHGx5Sb YzpLDRVkEChbkK31O/8HWJF9AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUEMpiwqdJ v5H1YirewPGWGEk8u6kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTMwNkIyLzMyMUZERDNFNEQ4MzExRUQ4N0ZCMUU2RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzMDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3Fk SnY1SDFZaXJld1BHV0dFazh1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAktFMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ532MA8EAgAC MAkDBwAgAQ3xWkAwDQYJKoZIhvcNAQELBQADggEBAJXLFJi+HupbdYeM+cxAKU/I tEyp0GgeyaupOK8L9ggBWZEii8Glt+UFeSHS6BRCjLV+y+1b1CggKkMoDgo2PHo/ fJe/nx22Wt+NlaGPt7XpE+ojpv5+nRdqD4KjK+qPA1UgkC3vORTHQJ9C56S7Dn6k SYoOMD4Aou/7IvoJVfiac1xx5tSZqgQ+MYLTkzop9Z//IqSNyTv10LF/AzUfQmDC wHt0JznL4lfiG+rpZ/UPaIhhpf7VcT6Aq3G99y+WDG5jHEXDpqWPqKgF2dB+Hx67 nJaWQJR1hp9of933baIKP7JvvzeAum8/4cG3dA8FGkHlYa2xKSmuNJdI5Mn5E14= -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:49 2025 by rpki-client