This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer (raw, json) Hash identifier: 1hD7tBKtg2hFshAFwTrSxhbnyz5dmfvixQE4StTKims= Subject key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027518 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 13 Nov 2025 18:00:53 +0000 Certificate not after: Thu 28 May 2026 00:00:00 +0000 Subordinate resources: AS: 138619 IP: 103.134.202.0/23 IP: 2404:6ac0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161048 (0x27518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 13 18:00:53 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:70:24:de:33:0c:9c:8b:12:e1:87:59:12: cf:e7:55:23:f6:e3:45:0a:22:7a:14:e5:0b:ac:9d: 07:18:4e:98:e2:04:dd:7b:80:36:60:33:2f:84:23: ff:07:97:99:a8:86:7f:d1:de:a6:80:9d:b1:2c:1f: 46:17:af:6c:91:ce:1f:d0:05:95:8a:0e:a6:c3:3f: f7:fd:2a:4d:8b:99:b9:a7:7f:6b:7f:2f:d2:14:fe: 05:91:01:07:69:c2:3e:4e:a2:0c:75:b7:b6:18:09: 90:6f:ea:d4:87:91:3d:cf:e0:53:c6:9d:80:d3:6e: e1:ea:57:4f:7c:b9:c0:22:4d:b7:f3:84:cd:d5:66: 54:31:63:91:29:f3:27:80:50:97:47:7e:76:d5:96: df:8d:75:0a:41:e4:e2:2c:b1:e4:94:13:68:53:3a: ef:4d:e5:23:75:28:8a:e9:f8:0c:ae:43:93:9b:b2: 57:ce:fa:b4:44:62:da:ca:68:e9:a8:b1:0a:9e:c3: 21:e0:fc:cd:c5:e2:e9:d2:c8:cd:9d:02:57:28:57: 41:16:33:d3:db:fc:17:96:b3:28:5b:7f:cb:d5:cd: e0:a3:c3:79:92:c5:34:1d:e2:b9:03:6c:46:f4:1d: 50:79:92:24:76:3f:13:49:69:04:3d:db:6c:de:8a: 61:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138619 sbgp-ipAddrBlock: critical IPv4: 103.134.202.0/23 IPv6: 2404:6ac0::/32 Signature Algorithm: sha256WithRSAEncryption d3:0b:76:05:92:d7:24:fd:0b:f5:93:aa:50:98:5c:a0:ac:96: 2b:c9:98:10:90:1d:dc:07:f7:96:02:93:53:3a:b4:14:48:3a: 8a:a4:ef:a8:84:68:29:bb:de:6a:0c:89:f9:21:50:a3:06:4b: d0:3c:dd:46:0b:80:d4:45:5c:a0:f9:08:f1:ef:72:46:32:91: 40:1b:00:b9:a9:2e:83:be:b2:6f:0d:96:ab:d5:2a:fe:bd:4d: b4:b0:95:ab:23:a5:5b:8a:29:f8:35:80:36:5a:52:98:9e:05: 5c:d7:86:84:34:3b:68:7d:ab:29:68:74:55:00:01:5e:d3:c8: 10:6a:09:16:2d:ed:a8:75:80:43:98:b6:7f:2c:fa:6c:c4:ce: c2:3e:5c:31:1a:1f:01:c0:81:7e:11:15:6d:cb:2f:a2:03:c2: 52:2f:3a:28:55:ca:8c:9e:28:33:cc:10:6c:6f:bd:cd:b1:14: c1:48:2c:2f:ab:a5:e5:a6:be:8e:22:1b:4e:5c:16:2d:88:ed: 01:17:82:08:f1:ed:ea:ea:ac:6d:62:ea:ec:0c:f1:63:61:18: 7b:73:dd:d5:e5:41:20:cc:7c:57:9c:7c:01:40:59:a1:41:55: b1:c6:1b:63:2e:e3:a2:0c:2b:97:57:23:19:89:ed:a0:1d:d0: 47:28:e6:64 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnUYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMzE4MDA1M1oXDTI2MDUyODAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1 QjQwNkQ1OEFGRjc5RDFFMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw0nAk3jMMnIsS4YdZEs/nVSP240UKInoU5QusnQcYTpjiBN17gDZgMy+EI/8H l5mohn/R3qaAnbEsH0YXr2yRzh/QBZWKDqbDP/f9Kk2Lmbmnf2t/L9IU/gWRAQdp wj5Oogx1t7YYCZBv6tSHkT3P4FPGnYDTbuHqV098ucAiTbfzhM3VZlQxY5Ep8yeA UJdHfnbVlt+NdQpB5OIsseSUE2hTOu9N5SN1KIrp+AyuQ5ObslfO+rREYtrKaOmo sQqewyHg/M3F4unSyM2dAlcoV0EWM9Pb/BeWsyhbf8vVzeCjw3mSxTQd4rkDbEb0 HVB5kiR2PxNJaQQ922zeimExAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUF4F8uCiS MbRwfp1bQG1Yr/edHgEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI1MDczLzQzRjE2MjY0MzM5NTExRTlCRkIxQzIxQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNp U01iUndmcDFiUUcxWXJfZWRIZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAh17MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ4bKMA0EAgAC MAcDBQAkBGrAMA0GCSqGSIb3DQEBCwUAA4IBAQDTC3YFktck/Qv1k6pQmFygrJYr yZgQkB3cB/eWApNTOrQUSDqKpO+ohGgpu95qDIn5IVCjBkvQPN1GC4DURVyg+Qjx 73JGMpFAGwC5qS6DvrJvDZar1Sr+vU20sJWrI6Vbiin4NYA2WlKYngVc14aENDto faspaHRVAAFe08gQagkWLe2odYBDmLZ/LPpsxM7CPlwxGh8BwIF+ERVtyy+iA8JS LzooVcqMnigzzBBsb73NsRTBSCwvq6Xlpr6OIhtOXBYtiO0BF4II8e3q6qxtYurs DPFjYRh7c93V5UEgzHxXnHwBQFmhQVWxxhtjLuOiDCuXVyMZie2gHdBHKOZk -----END CERTIFICATE-----Generated at Sat Dec 6 09:38:13 2025 by rpki-client