This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer File: Grie9bKOyC1q4hD8Kb3opxdWsbA.cer (raw, json) Hash identifier: 75CWoSNDMEhLM2wgMwkLLz4TM825vUZmVTbHo8VXjBY= Subject key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027462 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 10 Nov 2025 16:27:41 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 137078 IP: 103.175.130.0/23 IP: 2400:1a20::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160866 (0x27462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 10 16:27:41 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:3d:88:33:a7:46:ce:8e:e7:8e:8f:a1:6f: 20:d7:38:f9:e3:3c:ad:b8:fe:6b:7b:d8:c9:5f:28: c9:6f:ca:13:56:2f:fd:12:19:cf:f3:57:ee:04:ba: 62:35:39:c4:9d:c6:6e:54:87:e2:28:e0:ef:73:7f: 8b:d8:e7:c7:fa:e5:84:1a:ef:6a:a8:84:5e:28:ef: 33:95:52:99:7e:bb:21:af:ce:80:be:1d:12:dd:a0: 7b:68:e7:0a:6c:a7:ed:84:58:0a:2b:7f:6a:f7:8d: 80:5b:25:76:cb:22:1d:fe:2f:04:72:94:81:f0:9d: 21:3d:12:e4:7c:64:35:0a:61:3e:05:32:f3:bc:b9: 51:79:57:16:8c:09:ed:5f:7a:cc:fb:e4:d2:17:a6: ea:bc:8e:92:0e:8a:94:43:53:8a:3e:c2:3a:f8:d0: f1:10:91:c2:36:8e:ac:80:35:0f:95:73:56:21:61: 06:c5:c7:3b:bc:a5:3b:3b:24:6f:d3:af:ad:67:ad: db:c8:c5:44:e0:c0:7a:98:c1:59:63:62:cd:b0:a1: 2b:70:c6:0a:fa:f9:d2:a4:b3:b5:c7:d6:a2:3a:6a: 55:6a:fc:1e:7d:d2:fc:f0:87:11:8d:eb:34:43:a7: 47:48:fa:4e:d5:eb:87:aa:71:9d:db:3f:10:10:5f: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137078 sbgp-ipAddrBlock: critical IPv4: 103.175.130.0/23 IPv6: 2400:1a20::/32 Signature Algorithm: sha256WithRSAEncryption a1:73:99:ba:00:e0:8d:88:54:44:40:a3:22:f8:71:e2:32:3b: bb:9e:e3:1c:35:a6:c2:b6:a9:57:2c:e0:ac:33:38:16:9b:73: 2f:14:d8:b5:3f:b8:23:e9:93:87:7b:b2:ea:67:07:80:ea:b4: 18:f8:8a:24:0c:49:52:67:8f:cf:42:c4:71:41:8d:5a:ac:16: 68:4c:a7:94:7d:04:2f:e2:54:0a:03:39:ef:1f:7a:04:a9:9c: 82:02:6a:66:bf:b3:0d:a1:d8:15:cc:be:97:d0:9b:bb:a0:65: fc:3e:89:31:07:96:3f:d5:e5:24:4f:02:9c:38:da:a1:1c:e6: 2b:e5:2b:b6:0b:3b:ca:6b:1e:3c:e7:d4:d5:c5:5b:1a:4b:6d: 90:ce:8b:73:f8:85:03:92:5b:ef:6b:09:7d:c8:93:8a:2a:e4: 9a:2c:96:b6:8c:d0:bb:91:41:8c:0b:1b:0c:fb:18:25:38:6c: eb:9c:2c:6b:f6:22:57:e7:9a:77:38:5f:24:d6:6d:dc:e4:f7: 1d:d6:b6:6f:e3:47:e5:50:7e:41:2f:14:dc:7f:83:dd:9a:dc: cb:08:09:c3:6d:48:00:b3:19:0c:83:00:ce:d8:f8:48:f8:5d: 1d:57:9f:f7:1e:af:a0:ef:f5:cf:db:4d:38:68:e6:42:0f:71: 0a:c7:44:e8 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnRiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMDE2Mjc0MVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBG QzI5QkRFOEE3MTc1NkIxQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqkD2IM6dGzo7njo+hbyDXOPnjPK24/mt72MlfKMlvyhNWL/0SGc/zV+4EumI1 OcSdxm5Uh+Io4O9zf4vY58f65YQa72qohF4o7zOVUpl+uyGvzoC+HRLdoHto5wps p+2EWAorf2r3jYBbJXbLIh3+LwRylIHwnSE9EuR8ZDUKYT4FMvO8uVF5VxaMCe1f esz75NIXpuq8jpIOipRDU4o+wjr40PEQkcI2jqyANQ+Vc1YhYQbFxzu8pTs7JG/T r61nrdvIxUTgwHqYwVljYs2woStwxgr6+dKks7XH1qI6alVq/B590vzwhxGN6zRD p0dI+k7V64eqcZ3bPxAQX9aBAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUGrie9bKO yC1q4hD8Kb3opxdWsbAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU5MERELzZEODdFRDAyNERFNDExRUNBMzE3OTE1REM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFOTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJL T3lDMXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhd2MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ6+CMA0EAgAC MAcDBQAkABogMA0GCSqGSIb3DQEBCwUAA4IBAQChc5m6AOCNiFREQKMi+HHiMju7 nuMcNabCtqlXLOCsMzgWm3MvFNi1P7gj6ZOHe7LqZweA6rQY+IokDElSZ4/PQsRx QY1arBZoTKeUfQQv4lQKAznvH3oEqZyCAmpmv7MNodgVzL6X0Ju7oGX8PokxB5Y/ 1eUkTwKcONqhHOYr5Su2CzvKax4859TVxVsaS22Qzotz+IUDklvvawl9yJOKKuSa LJa2jNC7kUGMCxsM+xglOGzrnCxr9iJX55p3OF8k1m3c5Pcd1rZv40flUH5BLxTc f4PdmtzLCAnDbUgAsxkMgwDO2PhI+F0dV5/3Hq+g7/XP2004aOZCD3EKx0To -----END CERTIFICATE-----Generated at Sun Dec 7 01:59:03 2025 by rpki-client