This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer File: GbmlLMkCUD7N4wK9Akd0fqkZO2A.cer (raw, json) Hash identifier: JiwTC7DwhMP1CVUYzvtmzy9kzvAxnJmIXZnYpbITtFE= Subject key identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0279BA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft caRepository: rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 30 Nov 2025 22:19:17 +0000 Certificate not after: Mon 30 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 131242 IP: 103.173.90.0/23 IP: 2001:df7:9380::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162234 (0x279ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 30 22:19:17 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=A91ED3AE, serialNumber=19B9A52CC902503ECDE302BD0247747EA9193B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:60:76:e5:ba:dd:ef:f5:71:62:df:4d:1b:90: 70:c5:f3:bc:b9:2c:7c:ad:4f:4f:bc:3e:9e:20:b9: 48:95:a4:26:e8:d0:81:e1:94:27:4d:a8:9a:84:79: 45:a6:b9:49:c1:83:65:f3:d0:f7:64:d8:93:50:ad: 65:8e:f3:50:2f:7c:63:79:b3:f4:c1:b1:e0:b9:ff: 4a:bf:99:ab:83:55:19:8d:58:80:ae:42:9f:40:8b: df:80:1a:9e:37:91:cb:c1:3d:04:93:f3:ab:32:6a: 4c:6c:ea:2f:2a:12:33:3b:99:ca:00:92:2b:4d:2b: 98:db:fc:6c:79:8c:34:11:2d:33:35:a9:c2:7d:4f: 23:a8:fb:b0:73:fb:90:3e:78:c6:4f:7f:23:0d:c2: 25:7b:0a:70:3c:d0:5c:2b:d2:60:41:54:fe:7f:68: 62:c1:bd:9b:66:7f:ee:bd:e2:10:ba:04:f9:39:67: 1b:a6:74:ee:91:34:51:40:76:8a:a3:95:31:5a:49: a8:04:b7:8b:73:76:19:cd:a9:69:ea:53:68:72:7c: cc:00:eb:27:ec:0a:9d:30:2e:b2:60:f6:ce:dc:3d: bc:be:85:25:0a:23:e0:07:a9:a1:93:30:47:ff:c0: 8f:24:d5:ce:bf:43:32:df:f8:2b:d3:44:ef:0e:d2: ed:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B9:A5:2C:C9:02:50:3E:CD:E3:02:BD:02:47:74:7E:A9:19:3B:60 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91ED3AE/4112CB58176511EC8B16A371C4F9AE02/GbmlLMkCUD7N4wK9Akd0fqkZO2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131242 sbgp-ipAddrBlock: critical IPv4: 103.173.90.0/23 IPv6: 2001:df7:9380::/48 Signature Algorithm: sha256WithRSAEncryption 06:7b:16:03:94:3d:80:7d:00:fe:79:50:e3:e0:fe:bc:27:ac: 24:a2:b2:e8:91:1b:e4:ad:0e:30:95:e2:3c:f2:e7:09:30:ed: f3:84:6e:4b:5d:92:f5:0b:e1:50:a6:c4:47:79:c9:e7:12:a1: 48:8e:c2:ba:35:0b:e2:ea:e9:79:e8:40:0a:e2:1d:9f:23:26: 5e:88:05:70:78:3e:4d:20:ed:19:07:8d:62:c9:91:d9:64:fe: 0e:ec:12:a2:27:cb:51:eb:a7:3c:c2:de:ad:ff:9e:f8:a1:fd: 0d:bb:a0:78:50:48:86:04:ac:6d:a0:cd:1e:8d:c5:9e:f1:e7: b7:10:d5:50:f2:b0:8f:82:63:a9:d4:52:a4:6b:15:e2:f5:3a: c2:c9:de:2a:14:9b:80:ba:db:bd:14:93:73:fd:9c:c9:6b:40: 4b:bd:37:99:51:29:7f:9f:e6:f3:19:11:d2:3f:0d:63:c7:89: a9:f2:bf:37:40:2e:7c:ae:2a:e0:4d:9c:78:1a:54:01:e2:fc: 6b:d9:e3:e8:e6:6b:bd:d6:a4:9b:d3:7d:c6:98:ac:c5:44:44: 53:af:40:4c:0c:51:96:96:a8:43:8b:9d:ef:e4:09:e0:98:97: 49:43:bd:7f:11:f5:6c:7b:e5:64:03:c3:74:f0:bd:11:58:d3: 01:6f:a5:4a -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnm6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEzMDIyMTkxN1oXDTI2MDMzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxRUQzQUUxMTAvBgNVBAUTKDE5QjlBNTJDQzkwMjUwM0VDREUzMDJC RDAyNDc3NDdFQTkxOTNCNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2YHblut3v9XFi300bkHDF87y5LHytT0+8Pp4guUiVpCbo0IHhlCdNqJqEeUWm uUnBg2Xz0Pdk2JNQrWWO81AvfGN5s/TBseC5/0q/mauDVRmNWICuQp9Ai9+AGp43 kcvBPQST86syakxs6i8qEjM7mcoAkitNK5jb/Gx5jDQRLTM1qcJ9TyOo+7Bz+5A+ eMZPfyMNwiV7CnA80Fwr0mBBVP5/aGLBvZtmf+694hC6BPk5ZxumdO6RNFFAdoqj lTFaSagEt4tzdhnNqWnqU2hyfMwA6yfsCp0wLrJg9s7cPby+hSUKI+AHqaGTMEf/ wI8k1c6/QzLf+CvTRO8O0u0RAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUGbmlLMkC UD7N4wK9Akd0fqkZO2AwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVEM0FFLzQxMTJDQjU4MTc2NTExRUM4QjE2QTM3MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFRDNBRS80MTEyQ0I1ODE3NjUxMUVDOEIxNkEzNzFDNEY5QUUwMi9HYm1sTE1r Q1VEN040d0s5QWtkMGZxa1pPMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgCqMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ61aMA8EAgAC MAkDBwAgAQ33k4AwDQYJKoZIhvcNAQELBQADggEBAAZ7FgOUPYB9AP55UOPg/rwn rCSisuiRG+StDjCV4jzy5wkw7fOEbktdkvUL4VCmxEd5yecSoUiOwro1C+Lq6Xno QAriHZ8jJl6IBXB4Pk0g7RkHjWLJkdlk/g7sEqIny1HrpzzC3q3/nvih/Q27oHhQ SIYErG2gzR6NxZ7x57cQ1VDysI+CY6nUUqRrFeL1OsLJ3ioUm4C6270Uk3P9nMlr QEu9N5lRKX+f5vMZEdI/DWPHianyvzdALnyuKuBNnHgaVAHi/GvZ4+jma73WpJvT fcaYrMVERFOvQEwMUZaWqEOLne/kCeCYl0lDvX8R9Wx75WQDw3TwvRFY0wFvpUo= -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:38 2025 by rpki-client