This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer File: FeAstOfcuwrM4igRnP-ANDhil78.cer (raw, json) Hash identifier: tcXsVYvukNO57Vh99mmMaG5GYldJH+X2X3iEfFkFq6Q= Subject key identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02784B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 26 Nov 2025 14:58:16 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 45931 IP: 103.29.88.0/23 IP: 202.58.240.0/23 IP: 2001:df0:60::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161867 (0x2784b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 26 14:58:16 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91BC15C, serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:9a:55:48:31:d1:d0:e8:4a:ca:b3:59:04: fe:2f:97:a1:b7:cd:d7:e5:12:c2:85:7f:84:c9:ee: 15:16:b6:46:85:d7:9a:06:65:ec:27:16:e7:b5:86: b3:93:ad:6b:a3:33:96:ac:13:1c:3a:09:fb:e9:c5: aa:03:0d:9d:83:f2:06:10:c3:15:74:14:90:8c:63: 0c:56:c9:1d:4d:f8:22:f4:2f:b2:6e:23:76:4e:00: fc:18:8a:ac:49:6e:c5:7b:5f:dd:7b:1a:97:ff:4b: 7d:4f:ec:6b:77:2f:57:8b:3e:c7:29:cf:73:01:92: 4d:e7:ca:77:16:41:0f:16:d0:12:09:c8:db:5a:01: f7:4c:6f:db:ef:82:0c:1b:5c:3d:00:7f:fa:50:a8: f3:50:26:79:91:85:1a:9d:9f:d5:e3:ed:b6:53:e9: 0c:87:bd:59:61:11:c7:0d:eb:d2:92:d5:f9:ff:35: 5c:8b:d2:54:bf:33:dc:1a:b0:68:55:74:92:fc:1b: 55:1c:5f:72:fb:c4:9f:a7:91:cd:cb:c6:45:fa:1f: d6:4b:b0:72:27:76:4a:ca:8a:ef:08:87:44:75:18: 1d:ad:48:a4:6c:bf:12:d5:e5:4d:0c:20:9f:19:11: 1c:bd:78:9b:a2:02:ff:de:b0:55:01:58:6c:c5:3c: 4b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45931 sbgp-ipAddrBlock: critical IPv4: 103.29.88.0/23 202.58.240.0/23 IPv6: 2001:df0:60::/48 Signature Algorithm: sha256WithRSAEncryption ba:81:ee:e6:f5:61:dd:38:ed:67:33:73:1f:c2:44:3d:3b:50: 34:b8:1b:8b:39:3b:39:eb:b5:c4:42:26:21:3c:0b:a3:87:8c: 72:b8:62:76:90:ea:d2:47:4a:9e:23:73:af:4f:85:06:f7:0b: e7:82:0a:f8:11:ee:b8:3c:ff:a9:37:40:40:b0:48:fe:7e:9e: 90:8e:8e:df:e7:27:03:53:d3:dd:c2:27:c0:c8:d3:78:75:89: 27:28:b4:0c:cc:81:de:c5:ed:89:5f:99:62:96:62:7c:84:56: 8f:c0:1c:fc:c3:41:ee:5b:84:fd:f7:2b:18:8b:1b:6d:e5:67: 1f:f6:18:a0:c8:f5:d0:99:c4:ee:38:20:25:0d:34:e0:8a:2c: f1:cb:0a:d1:cc:10:8e:ab:d2:86:c0:72:b3:b7:d9:1b:6e:6d: b2:fe:cc:74:ac:f7:01:27:f1:16:d2:e7:93:da:09:f9:5d:f8: 5c:e3:af:26:ae:c5:12:69:30:56:fd:a1:c7:b2:9f:9e:03:4c: 0f:90:4d:45:69:fc:96:e0:bd:ee:33:f9:c5:ed:e9:df:d0:65: 6f:6f:e9:d0:ce:c9:5c:8b:91:69:8e:52:ab:3d:c7:e0:71:e7: 57:d6:59:e5:f3:5b:7c:1c:91:4b:60:f1:a1:41:fc:72:1c:5a: c1:b3:0c:d6 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIDAnhLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNjE0NTgxNloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkMxNUMxMTAvBgNVBAUTKDE1RTAyQ0I0RTdEQ0JCMEFDQ0UyMjgx MTlDRkY4MDM0Mzg2Mjk3QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+YZpVSDHR0OhKyrNZBP4vl6G3zdflEsKFf4TJ7hUWtkaF15oGZewnFue1hrOT rWujM5asExw6CfvpxaoDDZ2D8gYQwxV0FJCMYwxWyR1N+CL0L7JuI3ZOAPwYiqxJ bsV7X917Gpf/S31P7Gt3L1eLPscpz3MBkk3nyncWQQ8W0BIJyNtaAfdMb9vvggwb XD0Af/pQqPNQJnmRhRqdn9Xj7bZT6QyHvVlhEccN69KS1fn/NVyL0lS/M9wasGhV dJL8G1UcX3L7xJ+nkc3LxkX6H9ZLsHIndkrKiu8Ih0R1GB2tSKRsvxLV5U0MIJ8Z ERy9eJuiAv/esFUBWGzFPEupAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUFeAstOfc uwrM4igRnP+ANDhil78wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJDMTVDLzZCQTM1OTMwMURBMjExRTJCNEI2NDQ5NTA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCQzE1Qy82QkEzNTkzMDFEQTIxMUUyQjRCNjQ0OTUwOEIwMkNEMi9GZUFzdE9m Y3V3ck00aWdSblAtQU5EaGlsNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALNrMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBZx1YAwQByjrw MA8EAgACMAkDBwAgAQ3wAGAwDQYJKoZIhvcNAQELBQADggEBALqB7ub1Yd047Wcz cx/CRD07UDS4G4s5OznrtcRCJiE8C6OHjHK4YnaQ6tJHSp4jc69PhQb3C+eCCvgR 7rg8/6k3QECwSP5+npCOjt/nJwNT093CJ8DI03h1iScotAzMgd7F7YlfmWKWYnyE Vo/AHPzDQe5bhP33KxiLG23lZx/2GKDI9dCZxO44ICUNNOCKLPHLCtHMEI6r0obA crO32RtubbL+zHSs9wEn8RbS55PaCfld+FzjryauxRJpMFb9oceyn54DTA+QTUVp /Jbgve4z+cXt6d/QZW9v6dDOyVyLkWmOUqs9x+Bx51fWWeXzW3wckUtg8aFB/HIc WsGzDNY= -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:52 2025 by rpki-client