This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer File: G2L9XgPTM3qi3E4VB5QUQEextjo.cer (raw, json) Hash identifier: ofWPDYJZTBFU+ITpVw7GL84EweSQvx669NfExl/tbug= Subject key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B69 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft caRepository: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 18:18:16 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 133493 AS: 138354 IP: 45.120.36.0/24 IP: 103.60.22.0/23 IP: 103.60.96.0/24 IP: 103.131.40.0/23 IP: 103.238.62.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162665 (0x27b69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 18:18:16 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:c9:e2:e3:74:3a:b6:72:45:ef:aa:8e:11: 1c:2e:a1:e0:25:6d:cc:5c:7b:1f:78:b2:40:42:da: 2d:99:75:03:0b:e2:5a:1e:55:bd:e0:9c:ba:a3:4d: 5b:d1:4d:3c:41:5c:77:7b:e0:a7:04:c9:58:2d:de: b9:4a:01:e6:f6:99:ff:e4:10:16:da:f2:58:d4:fd: ef:c0:00:d8:9d:d8:6b:06:d6:6a:48:c7:f8:9e:4e: 22:b2:d0:47:e7:ae:b7:24:ec:bf:de:20:6b:d6:8d: 72:dc:c9:44:95:9f:2d:7a:2e:5b:dd:0f:71:42:fa: df:cf:1b:17:2b:9a:03:94:74:a1:d6:6a:2f:5c:8c: dd:31:95:d3:8b:11:cc:f1:a7:92:de:1f:eb:e2:0e: 0f:bc:59:c1:68:aa:42:c7:25:af:42:68:a2:a1:64: 52:e8:9e:ac:fe:01:92:4b:f9:b2:43:db:7a:20:7c: b1:63:9a:34:9a:ef:90:bc:9e:d5:3b:7d:57:f0:7f: f4:24:f2:d9:6a:a3:f0:01:27:fb:6a:38:e4:2f:d0: 80:3a:19:1c:ad:48:2d:f0:50:df:b6:4a:84:33:06: e0:c2:9b:dc:27:e5:74:59:5d:3f:ba:15:e8:18:06: ed:9a:13:de:87:9b:d3:82:16:a8:5b:5d:7f:86:cf: 82:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133493 138354 sbgp-ipAddrBlock: critical IPv4: 45.120.36.0/24 103.60.22.0/23 103.60.96.0/24 103.131.40.0/23 103.238.62.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:e3:f4:31:ef:e6:d6:a4:18:90:a1:a7:bc:02:43:66:fb:3e: 1f:6f:5a:f3:7d:ba:a3:99:f5:a1:d7:63:29:18:97:1f:b4:25: 4e:0f:e1:79:79:6a:c9:9b:6c:7c:fe:ff:ed:18:86:91:13:24: 75:14:0f:c5:8d:5a:3c:5d:6c:60:1b:2f:7e:26:b9:c7:4a:57: 63:ea:1b:52:c8:52:44:ed:75:86:e6:fe:94:9f:79:3b:37:9a: 26:a9:e6:28:de:c9:51:3e:55:88:58:e0:59:10:31:1e:88:92: 54:73:ef:5a:1a:3a:18:97:81:6c:2b:43:be:51:d9:af:e0:73: 23:32:c3:66:af:d1:e1:28:f8:48:69:14:48:c5:f2:e9:34:e9: 38:ee:4f:15:ce:a8:dd:c5:52:02:d2:a2:3d:7e:32:24:a1:39: ad:47:26:b8:24:70:25:13:64:e9:e9:8d:61:eb:94:52:20:8b: 77:72:a8:2c:47:11:8e:da:b2:a9:a4:1f:4d:76:e0:5b:24:9a: df:a9:09:21:ba:78:15:47:59:f3:6c:29:3b:d5:07:d7:b8:f9: 32:9c:e4:94:04:d1:83:06:11:54:c0:25:d2:37:97:71:54:3e: 11:59:28:51:06:fb:44:85:d1:4e:1b:ed:45:0f:88:63:be:f5: 49:3d:19:eb -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgIDAntpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzE4MTgxNloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUx NTA3OTQxNDQwNDdCMUI2M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2vcni43Q6tnJF76qOERwuoeAlbcxcex94skBC2i2ZdQML4loeVb3gnLqjTVvR TTxBXHd74KcEyVgt3rlKAeb2mf/kEBba8ljU/e/AANid2GsG1mpIx/ieTiKy0Efn rrck7L/eIGvWjXLcyUSVny16LlvdD3FC+t/PGxcrmgOUdKHWai9cjN0xldOLEczx p5LeH+viDg+8WcFoqkLHJa9CaKKhZFLonqz+AZJL+bJD23ogfLFjmjSa75C8ntU7 fVfwf/Qk8tlqo/ABJ/tqOOQv0IA6GRytSC3wUN+2SoQzBuDCm9wn5XRZXT+6FegY Bu2aE96Hm9OCFqhbXX+Gz4JxAgMBAAGjggMsMIIDKDAdBgNVHQ4EFgQUG2L9XgPT M3qi3E4VB5QUQEextjowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZDNjQzL0E1RDg4NEM0MTUyQjExRUNBNTNFNEM2M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQ VE0zcWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAgl1AgMCHHIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAAteCQD BAFnPBYDBABnPGADBAFngygDBABn7j4wDQYJKoZIhvcNAQELBQADggEBAE3j9DHv 5takGJChp7wCQ2b7Ph9vWvN9uqOZ9aHXYykYlx+0JU4P4Xl5asmbbHz+/+0YhpET JHUUD8WNWjxdbGAbL34mucdKV2PqG1LIUkTtdYbm/pSfeTs3miap5ijeyVE+VYhY 4FkQMR6IklRz71oaOhiXgWwrQ75R2a/gcyMyw2av0eEo+EhpFEjF8uk06TjuTxXO qN3FUgLSoj1+MiShOa1HJrgkcCUTZOnpjWHrlFIgi3dyqCxHEY7asqmkH0124Fsk mt+pCSG6eBVHWfNsKTvVB9e4+TKc5JQE0YMGEVTAJdI3l3FUPhFZKFEG+0SF0U4b 7UUPiGO+9Uk9Ges= -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:29 2025 by rpki-client