This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer File: KN1yVzxbraKIuDKzmB_0yYsvjFE.cer (raw, json) Hash identifier: De1e58/bsmcs4emfNWq+R3wXZE0WCSeTRfQGTAtga7k= Subject key identifier: 28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02730B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft caRepository: rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 04 Nov 2025 19:17:46 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 133434 AS: 134731 IP: 103.172.108.0/24 IP: 103.198.106.0/24 IP: 2407:d0c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160523 (0x2730b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 4 19:17:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9180174, serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:cd:23:71:de:00:05:5d:8e:02:d8:f6:63: 46:73:22:fd:c8:8f:30:d8:f4:50:a1:f6:f8:57:b9: f0:11:1d:38:41:1b:54:8a:ec:07:d3:62:d4:64:90: 0c:68:1f:43:fa:ed:8f:e1:de:4f:10:56:d2:d2:c7: c2:c3:48:06:50:61:af:f7:70:f3:ed:84:52:d5:a5: 58:6a:d0:32:c0:db:cb:1b:f5:1a:59:2a:9f:8f:76: b3:c9:f5:31:da:ce:f0:8d:ee:5f:f4:40:78:b8:d9: 41:4c:51:7a:fc:c9:0d:c5:96:c5:97:15:af:95:a4: 83:eb:e1:75:c5:a0:d8:ae:9d:14:b1:1d:2e:73:43: ba:0f:88:cd:df:21:29:96:20:ae:04:0d:a3:fa:a1: 28:3f:de:c7:eb:3e:a5:46:78:ad:50:99:53:2c:22: e9:a4:46:4b:ae:2c:33:e1:f9:75:da:17:3a:6d:ad: 39:c8:73:06:ed:4e:8c:15:6b:0e:29:78:f1:47:11: 1f:15:cf:e3:c9:e8:78:d4:6f:56:8d:c1:f7:9f:cd: 50:b2:e8:34:17:8a:84:f0:5d:15:ea:56:38:01:d0: 89:ca:74:1d:0e:4d:13:61:6f:5a:78:c0:77:c2:aa: 80:74:e8:cd:6b:5b:dd:93:e7:bc:82:69:02:85:c0: 3f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133434 134731 sbgp-ipAddrBlock: critical IPv4: 103.172.108.0/24 103.198.106.0/24 IPv6: 2407:d0c0::/32 Signature Algorithm: sha256WithRSAEncryption 5a:df:c8:c5:82:10:f8:da:85:25:d1:90:43:5f:d1:08:8d:df: 98:82:bd:c3:ac:58:ad:34:a2:a9:c5:c0:96:62:ba:20:60:4b: bf:fe:49:0a:b0:7f:ff:9d:58:f0:4e:42:1b:58:36:42:cd:0f: b6:cf:90:29:af:2a:3c:73:e4:de:57:47:45:29:a3:6d:6f:14: ba:b3:b0:1b:2b:27:02:89:77:da:02:22:66:cb:ac:73:0e:6e: 84:98:6f:ea:74:c3:71:6a:a7:18:94:94:86:8f:55:c4:54:87: 44:01:85:2c:8f:b4:c3:69:9b:8f:5a:27:35:87:30:61:ec:82: 5d:f6:3a:fe:9a:cb:c0:95:74:52:e7:30:88:3e:24:06:5d:2a: 02:25:39:5a:cf:1d:b0:91:36:25:9b:a6:c6:6d:da:b6:16:7c: 74:a6:21:af:e3:59:0e:81:5c:c9:af:0c:62:c0:d5:d5:8a:2e: 7a:52:ef:4a:af:1a:9b:9f:76:de:71:cb:59:a7:3d:e3:38:04: d6:a1:61:5f:ab:e7:7d:86:28:0a:43:5d:6a:e7:a0:ac:30:b5: fa:76:ce:d8:c7:68:e8:74:cf:f8:97:ab:5f:ab:84:04:cc:a4: da:39:63:21:55:f4:62:31:79:99:76:89:57:3c:8e:e6:db:c0: f8:9c:af:bd -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIDAnMLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNDE5MTc0NloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxODAxNzQxMTAvBgNVBAUTKDI4REQ3MjU3M0M1QkFEQTI4OEI4MzJC Mzk4MUZGNEM5OEIyRjhDNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Sc0jcd4ABV2OAtj2Y0ZzIv3IjzDY9FCh9vhXufARHThBG1SK7AfTYtRkkAxo H0P67Y/h3k8QVtLSx8LDSAZQYa/3cPPthFLVpVhq0DLA28sb9RpZKp+PdrPJ9THa zvCN7l/0QHi42UFMUXr8yQ3FlsWXFa+VpIPr4XXFoNiunRSxHS5zQ7oPiM3fISmW IK4EDaP6oSg/3sfrPqVGeK1QmVMsIumkRkuuLDPh+XXaFzptrTnIcwbtTowVaw4p ePFHER8Vz+PJ6HjUb1aNwfefzVCy6DQXioTwXRXqVjgB0InKdB0OTRNhb1p4wHfC qoB06M1rW92T57yCaQKFwD9nAgMBAAGjggMpMIIDJTAdBgNVHQ4EFgQUKN1yVzxb raKIuDKzmB/0yYsvjFEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTgwMTc0Lzc5RDY2NjJBMTY4OTExRUM4MTYyNTgwQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4MDE3NC83OUQ2NjYyQTE2ODkxMUVDODE2MjU4MENDNEY5QUUwMi9LTjF5Vnp4 YnJhS0l1REt6bUJfMHlZc3ZqRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAgk6AgMCDkswNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBABnrGwD BABnxmowDQQCAAIwBwMFACQH0MAwDQYJKoZIhvcNAQELBQADggEBAFrfyMWCEPja hSXRkENf0QiN35iCvcOsWK00oqnFwJZiuiBgS7/+SQqwf/+dWPBOQhtYNkLND7bP kCmvKjxz5N5XR0Upo21vFLqzsBsrJwKJd9oCImbLrHMOboSYb+p0w3FqpxiUlIaP VcRUh0QBhSyPtMNpm49aJzWHMGHsgl32Ov6ay8CVdFLnMIg+JAZdKgIlOVrPHbCR NiWbpsZt2rYWfHSmIa/jWQ6BXMmvDGLA1dWKLnpS70qvGpufdt5xy1mnPeM4BNah YV+r532GKApDXWrnoKwwtfp2ztjHaOh0z/iXq1+rhATMpNo5YyFV9GIxeZl2iVc8 jubbwPicr70= -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:21 2025 by rpki-client