This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer File: EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer (raw, json) Hash identifier: YaKVHb2TqNqUX9bZj060XYmotYAwt2NdhPbSdMvKks0= Subject key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A88 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 09:02:59 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 133161 IP: 103.135.13.0/24 IP: 103.253.118.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162440 (0x27a88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 09:02:59 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91E7222, serialNumber=11B44556B79627853F4031ED6DD57284056EFF53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7f:55:4d:26:0e:b0:b6:ec:03:71:f8:bd:7a: 30:50:2f:41:b7:7b:2c:9f:d6:a5:91:28:d4:a7:5c: ce:13:5b:b8:ee:b2:3f:70:de:18:13:94:12:df:48: fb:4c:de:6f:02:f5:c3:91:97:ec:1a:60:29:ef:ae: 10:69:9f:8b:79:7d:32:43:f1:a2:eb:7a:90:2f:f7: ea:b6:93:06:4e:c1:d7:7c:48:8d:94:bd:fd:3b:65: 18:8f:0c:19:52:88:e2:ed:a3:39:2c:34:8b:86:34: 99:d7:2c:cb:9b:6b:a8:0e:bc:69:ed:66:2c:aa:3b: f2:9d:77:e4:b4:77:54:bc:22:c9:b7:26:a8:40:c6: ae:26:8e:1c:96:88:55:d8:1a:e9:93:91:fc:f4:c7: 41:23:05:ee:89:a1:79:76:73:0f:d5:08:64:13:24: d2:da:83:92:88:f0:4f:65:c8:8b:d2:e9:62:3d:af: f3:70:81:47:4b:c9:95:96:22:99:ca:65:1d:cb:b9: 04:bd:69:7c:41:68:67:75:a6:14:7f:fc:c9:e2:4a: ba:35:13:f9:be:ef:9a:82:cb:77:33:57:9d:06:46: 1f:b4:fc:33:4d:26:75:1f:2c:5d:42:51:99:eb:f9: ec:84:19:63:d1:9a:76:30:7e:86:af:bf:cb:df:70: dc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133161 sbgp-ipAddrBlock: critical IPv4: 103.135.13.0/24 103.253.118.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:ca:3a:04:cc:18:9a:9f:d9:4c:21:4c:7a:6b:49:42:4e:f7: b2:33:33:e0:ab:18:0c:ad:86:a0:34:39:1a:6e:4f:a1:29:95: 10:0d:85:63:62:28:ea:45:2f:e1:02:61:21:d5:62:36:20:4d: 22:ca:fb:a7:2f:16:23:de:f2:dc:df:c5:60:10:3a:22:dd:7f: 57:e8:5c:dd:f7:aa:37:ca:a2:74:1c:af:d4:34:f6:c0:1d:7c: 5b:81:0a:b0:08:40:36:b1:4d:10:74:63:02:d7:28:95:4b:41: fb:be:e1:60:b9:ed:6c:da:f6:62:20:56:b7:b7:a3:77:94:3b: 10:b3:5c:66:0f:9e:61:e2:bc:e8:39:9f:fb:e7:12:cc:eb:fe: ca:8f:58:43:76:ca:f7:74:69:3d:cf:28:3f:e0:51:02:bc:e7: 6a:5b:e8:e3:5b:38:99:12:ea:01:62:6d:a2:af:a4:ea:4b:33: ae:55:8e:a0:c1:c5:2d:23:e6:cc:b6:bc:f2:b9:dd:f3:27:69: 0c:6c:71:53:f6:0e:b1:08:98:af:9a:27:91:cf:81:cd:07:be: 50:72:81:bf:de:29:9d:d4:da:6f:b9:36:7c:03:5f:09:25:c4: 74:d8:a7:f8:96:3b:1b:cf:27:54:59:c7:11:47:7a:ef:b7:0b: 08:6f:7e:d5 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAnqIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjA5MDI1OVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTcyMjIxMTAvBgNVBAUTKDExQjQ0NTU2Qjc5NjI3ODUzRjQwMzFF RDZERDU3Mjg0MDU2RUZGNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSf1VNJg6wtuwDcfi9ejBQL0G3eyyf1qWRKNSnXM4TW7jusj9w3hgTlBLfSPtM 3m8C9cORl+waYCnvrhBpn4t5fTJD8aLrepAv9+q2kwZOwdd8SI2Uvf07ZRiPDBlS iOLtozksNIuGNJnXLMuba6gOvGntZiyqO/Kdd+S0d1S8Ism3JqhAxq4mjhyWiFXY GumTkfz0x0EjBe6JoXl2cw/VCGQTJNLag5KI8E9lyIvS6WI9r/NwgUdLyZWWIpnK ZR3LuQS9aXxBaGd1phR//MniSro1E/m+75qCy3czV50GRh+0/DNNJnUfLF1CUZnr +eyEGWPRmnYwfoavv8vfcNzLAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUEbRFVreW J4U/QDHtbdVyhAVu/1MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU3MjIyL0NBMDc2MTU4ODA3NTExRUI4RENCOTg0RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFNzIyMi9DQTA3NjE1ODgwNzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJl V0o0VV9RREh0YmRWeWhBVnVfMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAggpMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ4cNAwQBZ/12 MA0GCSqGSIb3DQEBCwUAA4IBAQAcyjoEzBian9lMIUx6a0lCTveyMzPgqxgMrYag NDkabk+hKZUQDYVjYijqRS/hAmEh1WI2IE0iyvunLxYj3vLc38VgEDoi3X9X6Fzd 96o3yqJ0HK/UNPbAHXxbgQqwCEA2sU0QdGMC1yiVS0H7vuFgue1s2vZiIFa3t6N3 lDsQs1xmD55h4rzoOZ/75xLM6/7Kj1hDdsr3dGk9zyg/4FECvOdqW+jjWziZEuoB Ym2ir6TqSzOuVY6gwcUtI+bMtrzyud3zJ2kMbHFT9g6xCJivmieRz4HNB75QcoG/ 3imd1NpvuTZ8A18JJcR02Kf4ljsbzydUWccRR3rvtwsIb37V -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:06 2025 by rpki-client