This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer File: GyXsWdB_k0JLkMItNOyrIq2FKpc.cer (raw, json) Hash identifier: 2V+FIMc60pnmqQgqc8E80qXnnj7KljSRpAXSwmOeE8k= Subject key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027494 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 11 Nov 2025 15:12:21 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 137028 AS: 142601 IP: 103.102.108.0/22 IP: 2001:df7:980::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160916 (0x27494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 11 15:12:21 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:35:b7:f2:da:cb:52:9f:26:54:d2:23:9d:61: 0f:3d:b0:73:05:9e:f8:f9:93:17:75:a4:e1:06:51: ab:68:f8:b0:14:32:d7:8b:b8:dc:30:ee:fc:93:56: f2:0c:13:d1:c6:b2:a7:e3:9c:46:c1:a0:4e:ef:fa: e9:b2:c7:bb:03:27:f5:3e:16:36:9c:63:70:f6:44: 87:8d:d2:dc:cd:d9:47:fc:9b:6f:5c:a4:d3:0a:e0: 9f:34:b7:d7:41:db:5b:03:d9:2c:9b:bd:5e:37:36: c9:c8:a4:9c:7d:3a:ee:e0:7d:b8:0a:a6:c0:ee:86: 4d:d4:88:f9:93:b1:b0:be:95:b4:cb:36:47:29:9a: b5:2d:e2:60:e5:26:31:0e:ac:dc:92:c9:65:be:34: b2:2f:df:15:39:51:17:94:46:51:eb:6e:8a:90:f2: df:a5:44:55:53:37:c8:8b:b4:b4:56:14:6a:55:34: 26:fc:70:d8:a5:81:18:55:0e:54:52:5f:20:6b:f4: 74:6a:2d:b5:9c:3d:b1:4e:d6:e1:a2:cb:a4:35:45: db:23:6a:74:ad:b7:65:1e:03:07:a6:41:89:74:10: 9c:91:30:9e:f9:d3:6d:fd:00:21:d0:b5:2d:e9:33: ce:20:62:28:98:ca:e0:b7:e4:81:c5:42:da:1a:e8: cb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137028 142601 sbgp-ipAddrBlock: critical IPv4: 103.102.108.0/22 IPv6: 2001:df7:980::/48 Signature Algorithm: sha256WithRSAEncryption 9e:87:ae:eb:81:cb:6f:4d:22:b8:07:e1:30:46:36:30:12:21: 78:f6:e3:16:ea:67:a2:c7:5c:96:ee:5f:09:c3:09:e7:90:17: bb:a7:05:72:4c:ca:23:81:61:0a:64:cd:f5:df:13:20:3e:ad: 5a:73:35:e5:fc:b1:cd:a4:32:ea:21:5c:f7:58:a1:c7:d6:0c: c1:e2:f9:68:db:c3:9a:63:15:ef:2e:27:20:5e:c7:f3:b2:c3: 07:c5:16:8e:30:40:d0:62:aa:cf:2b:47:1e:f4:f6:1b:d7:15: e6:5e:70:d1:ef:d9:64:05:ec:0d:ee:ad:b2:13:7c:56:7b:6c: 63:a9:9a:ca:95:de:56:f0:4d:08:54:2f:b7:35:37:68:ea:51: 8e:11:e0:22:af:e0:7d:c4:9f:f2:23:84:ae:a0:f4:3a:2b:71: 41:bd:68:7b:03:d8:8b:47:e1:d2:d9:d1:c4:9c:fe:d3:fa:bc: a7:53:f8:57:08:44:0d:a4:25:df:2b:5a:67:06:f0:54:04:22: b5:90:46:b7:00:02:7c:69:02:df:b9:d7:7b:d7:9f:ce:ce:77: 0a:9d:2a:da:95:a5:f9:49:b3:e1:ff:14:3a:96:43:49:d5:ca: 68:b9:8f:73:9e:8a:30:06:7f:42:55:48:b9:4b:87:20:da:9d: b9:db:17:de -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIDAnSUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMTE1MTIyMVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIy RDM0RUNBQjIyQUQ4NTJBOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvNbfy2stSnyZU0iOdYQ89sHMFnvj5kxd1pOEGUato+LAUMteLuNww7vyTVvIM E9HGsqfjnEbBoE7v+umyx7sDJ/U+FjacY3D2RIeN0tzN2Uf8m29cpNMK4J80t9dB 21sD2SybvV43NsnIpJx9Ou7gfbgKpsDuhk3UiPmTsbC+lbTLNkcpmrUt4mDlJjEO rNySyWW+NLIv3xU5UReURlHrboqQ8t+lRFVTN8iLtLRWFGpVNCb8cNilgRhVDlRS XyBr9HRqLbWcPbFO1uGiy6Q1RdsjanStt2UeAwemQYl0EJyRMJ750239ACHQtS3p M84gYiiYyuC35IHFQtoa6MsVAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUGyXsWdB/ k0JLkMItNOyrIq2FKpcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg4NkVBLzUyOTg4NEUwNkY2MDExRURBNUZGRkYwOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4ODZFQS81Mjk4ODRFMDZGNjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RC X2swSkxrTUl0Tk95cklxMkZLcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAhdEAgMCLQkwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAJnZmww DwQCAAIwCQMHACABDfcJgDANBgkqhkiG9w0BAQsFAAOCAQEAnoeu64HLb00iuAfh MEY2MBIhePbjFupnosdclu5fCcMJ55AXu6cFckzKI4FhCmTN9d8TID6tWnM15fyx zaQy6iFc91ihx9YMweL5aNvDmmMV7y4nIF7H87LDB8UWjjBA0GKqzytHHvT2G9cV 5l5w0e/ZZAXsDe6tshN8VntsY6maypXeVvBNCFQvtzU3aOpRjhHgIq/gfcSf8iOE rqD0OitxQb1oewPYi0fh0tnRxJz+0/q8p1P4VwhEDaQl3ytaZwbwVAQitZBGtwAC fGkC37nXe9efzs53Cp0q2pWl+Umz4f8UOpZDSdXKaLmPc56KMAZ/QlVIuUuHINqd udsX3g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:11 2025 by rpki-client