This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer (raw, json) Hash identifier: Zl7c1w0HGMppyx8b6LCHhAppzxYrv7Mfot90JSxY0lk= Subject key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0278E0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 21:43:29 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 134228 IP: 103.156.166.0/23 IP: 2001:df1:9140::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162016 (0x278e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 27 21:43:29 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:2f:44:91:f3:29:56:0f:bd:b5:22:64:9c: 6e:dd:d9:23:a5:2a:20:76:a3:5b:67:94:c4:26:8f: 6e:0e:a9:bf:b3:59:76:0e:43:32:08:e8:e6:06:70: ba:06:09:d2:1a:80:0d:e8:d5:08:f7:d2:7f:eb:89: 87:0a:56:28:dc:11:7e:9b:a8:7c:2f:af:13:bf:dd: ae:8c:dc:41:0f:cd:a1:48:a4:a6:ae:72:04:3d:f0: 58:65:aa:b4:15:ac:38:d8:ba:ed:2e:9e:71:9e:e1: 60:4c:77:58:9d:72:1f:2a:2b:79:a1:f5:72:45:4a: a6:27:1d:2b:24:71:bf:c4:0b:7a:7d:55:6f:e7:c5: eb:2e:6a:09:fb:4b:a1:df:54:06:88:1e:94:fd:5b: 3e:6d:64:f2:14:a9:73:ae:75:bb:91:40:f3:ca:09: c2:a6:d8:de:05:b5:4a:b9:20:cf:b2:79:2a:fe:36: 9e:fc:c9:f7:b1:31:f3:dd:65:98:6c:f0:c4:ba:bd: 4a:75:a5:21:80:ea:e7:96:0e:2e:4c:64:f2:46:55: f7:a0:50:a7:95:74:d3:6e:2d:e2:bc:b1:7e:4d:d9: 53:1e:20:81:43:fb:bd:56:44:76:bb:08:90:85:0a: 38:e1:7f:b4:68:5d:65:97:24:4b:8a:46:3e:af:fd: 29:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134228 sbgp-ipAddrBlock: critical IPv4: 103.156.166.0/23 IPv6: 2001:df1:9140::/48 Signature Algorithm: sha256WithRSAEncryption ce:86:2f:1c:39:cc:da:76:0c:77:ed:01:38:82:e8:87:1e:4e: a0:7e:8f:58:a2:75:4c:45:56:2f:4d:48:70:54:12:30:5a:38: f4:a8:7f:ba:87:04:17:bc:40:ce:5d:7e:6d:30:da:11:d2:59: b9:20:90:57:5a:6a:50:85:f3:49:01:2d:92:ab:2d:c5:17:ae: eb:d2:0b:51:e5:6a:b5:ee:e4:e4:fb:aa:49:b2:c0:94:0a:a1: 8e:ce:7b:71:97:fd:30:fc:ec:ef:20:96:e7:17:0a:05:10:bc: e0:1a:65:bb:e0:d2:38:95:aa:e1:b0:7a:ef:02:e8:43:4a:0c: 8b:0f:6c:5c:14:59:ec:f0:ad:1a:36:2a:9b:15:20:16:5b:db: fd:d1:9f:df:98:17:d9:84:93:43:21:c6:b5:c9:01:98:81:09: 9d:ee:3c:06:c2:0b:e1:3a:74:75:27:54:4f:6d:f9:32:36:97: 34:bd:be:42:fa:8e:1c:5d:ab:80:59:4e:39:58:2f:5f:90:55: 60:d4:e8:d6:d4:e8:66:88:0f:32:51:5f:ac:1c:e6:2a:b0:43: e8:18:3b:c9:7a:c0:44:ae:fa:75:5e:78:c3:7f:cb:65:65:ca: cc:4b:69:45:c9:a0:16:77:7a:c7:f7:68:80:93:b3:93:e8:b4: 54:29:c2:b2 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnjgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNzIxNDMyOVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZD NUJDQjM4NDkxMjE0N0Q1NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt6S9EkfMpVg+9tSJknG7d2SOlKiB2o1tnlMQmj24Oqb+zWXYOQzII6OYGcLoG CdIagA3o1Qj30n/riYcKVijcEX6bqHwvrxO/3a6M3EEPzaFIpKaucgQ98FhlqrQV rDjYuu0unnGe4WBMd1idch8qK3mh9XJFSqYnHSskcb/EC3p9VW/nxesuagn7S6Hf VAaIHpT9Wz5tZPIUqXOudbuRQPPKCcKm2N4FtUq5IM+yeSr+Np78yfexMfPdZZhs 8MS6vUp1pSGA6ueWDi5MZPJGVfegUKeVdNNuLeK8sX5N2VMeIIFD+71WRHa7CJCF Cjjhf7RoXWWXJEuKRj6v/SnLAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUEZbN39o+ vcWtqP/FvLOEkSFH1UQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZENEExLzYyQjQyM0JBNkIwMTExRUQ5QTMwRjE1NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGRDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlv LXZjV3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgxUMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5ymMA8EAgAC MAkDBwAgAQ3xkUAwDQYJKoZIhvcNAQELBQADggEBAM6GLxw5zNp2DHftATiC6Ice TqB+j1iidUxFVi9NSHBUEjBaOPSof7qHBBe8QM5dfm0w2hHSWbkgkFdaalCF80kB LZKrLcUXruvSC1HlarXu5OT7qkmywJQKoY7Oe3GX/TD87O8glucXCgUQvOAaZbvg 0jiVquGweu8C6ENKDIsPbFwUWezwrRo2KpsVIBZb2/3Rn9+YF9mEk0MhxrXJAZiB CZ3uPAbCC+E6dHUnVE9t+TI2lzS9vkL6jhxdq4BZTjlYL1+QVWDU6NbU6GaIDzJR X6wc5iqwQ+gYO8l6wESu+nVeeMN/y2VlysxLaUXJoBZ3esf3aICTs5PotFQpwrI= -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:37 2025 by rpki-client