This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer File: KbnmrAGSmMyglt6Jcancj3144dk.cer (raw, json) Hash identifier: oxz8JfYW7zf593X+/9FTpxZCyc+XP+ABtHNH2XiJlBU= Subject key identifier: 29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027BDD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 13:06:54 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 138148 IP: 103.198.68.0/22 IP: 2001:df6:b400::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162781 (0x27bdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 13:06:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91371E4, serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:8c:38:da:d6:ee:4c:59:bf:ad:6c:f7:4e: 9f:79:ec:42:61:69:98:81:02:ed:d5:b8:ed:23:fe: 28:12:36:db:ed:99:37:5b:9b:30:b3:67:52:bb:92: 94:31:05:5a:db:a1:bb:b7:7d:39:f1:d3:17:b8:94: 7e:78:de:45:56:f0:c4:23:e1:e2:ec:4b:8d:9d:08: 19:04:0a:ef:22:ae:80:e8:d3:d8:9e:a4:49:b7:ba: 5e:11:c5:e2:36:f1:29:08:e3:97:c7:42:68:ed:57: 29:b6:ad:01:7a:8c:93:ce:61:81:ad:f2:1b:46:4d: 06:e4:7c:1b:2d:6a:6c:9f:20:5a:fd:f2:e6:9d:86: f6:16:ac:2e:c0:cd:55:89:ee:24:36:98:45:4a:b1: d2:76:01:b1:5d:71:8e:18:2f:01:d3:17:af:a4:d6: c4:5c:25:4b:3d:2a:03:c0:4c:af:60:54:84:da:ef: b1:be:75:c8:b4:36:55:f7:09:dd:ea:d0:d4:d6:14: 83:6d:ff:2f:f4:47:1d:b7:14:14:5a:90:ea:cc:62: 57:31:b7:f4:12:06:00:58:20:ac:e8:da:f8:37:52: d4:67:7e:b3:0d:53:06:fe:ad:08:bd:46:82:96:f7: e0:61:04:92:cd:2a:06:f6:a4:41:0d:23:a6:17:c8: eb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138148 sbgp-ipAddrBlock: critical IPv4: 103.198.68.0/22 IPv6: 2001:df6:b400::/48 Signature Algorithm: sha256WithRSAEncryption 4d:fc:68:69:b5:59:6b:1b:13:e0:34:60:fc:61:c5:34:c5:d8: ac:25:92:50:a8:b2:04:4f:1f:77:f2:b3:67:14:a5:58:28:52: bb:d6:89:03:07:a1:50:fb:4d:20:50:4d:4b:64:6b:72:50:05: 68:d0:8a:ff:2a:93:f1:d1:c4:07:89:6f:32:7b:d2:12:69:1b: ea:6f:2d:22:eb:7b:26:0d:77:68:5b:45:d1:86:81:ca:52:cc: d4:e4:90:b3:18:6d:fd:dd:b7:e0:ea:4f:94:0a:d8:bd:2b:29: 0f:26:7c:cf:d1:c5:b6:c7:31:e4:8a:5e:03:80:3f:1c:ef:00: af:96:6c:d9:e7:26:20:bb:72:d5:5c:eb:89:77:94:1c:c8:7e: d7:af:bc:d7:09:b8:65:ba:1f:bd:7d:72:66:5e:7f:a9:30:8b: 38:81:45:58:f3:60:e9:70:51:33:71:9f:ab:ea:67:ef:5e:5a: be:b2:32:a3:e1:8f:c0:40:e4:f5:96:20:fc:89:9b:ae:50:62: 3d:2a:99:52:7a:62:c6:55:77:0a:f4:fd:14:ba:e1:3a:30:77: 37:8a:4f:8d:b8:13:18:0a:85:ee:fa:ec:bd:ca:c8:39:e9:71: f0:12:ad:26:4b:d1:b5:e8:6c:e5:a7:19:33:5e:78:45:86:90: 46:b9:4d:55 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnvdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDEzMDY1NFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzcxRTQxMTAvBgNVBAUTKDI5QjlFNkFDMDE5Mjk4Q0NBMDk2REU4 OTcxQTlEQzhGN0Q3OEUxRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/NYw42tbuTFm/rWz3Tp957EJhaZiBAu3VuO0j/igSNtvtmTdbmzCzZ1K7kpQx BVrbobu3fTnx0xe4lH543kVW8MQj4eLsS42dCBkECu8iroDo09iepEm3ul4RxeI2 8SkI45fHQmjtVym2rQF6jJPOYYGt8htGTQbkfBstamyfIFr98uadhvYWrC7AzVWJ 7iQ2mEVKsdJ2AbFdcY4YLwHTF6+k1sRcJUs9KgPATK9gVITa77G+dci0NlX3Cd3q 0NTWFINt/y/0Rx23FBRakOrMYlcxt/QSBgBYIKzo2vg3UtRnfrMNUwb+rQi9RoKW 9+BhBJLNKgb2pEENI6YXyOu3AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUKbnmrAGS mMyglt6Jcancj3144dkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM3MUU0LzM4MjQ3QTcwRjE2OTExRThCM0E3OUQxRUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzNzFFNC8zODI0N0E3MEYxNjkxMUU4QjNBNzlEMUVDNEY5QUUwMi9LYm5tckFH U21NeWdsdDZKY2FuY2ozMTQ0ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhukMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCZ8ZEMA8EAgAC MAkDBwAgAQ32tAAwDQYJKoZIhvcNAQELBQADggEBAE38aGm1WWsbE+A0YPxhxTTF 2KwlklCosgRPH3fys2cUpVgoUrvWiQMHoVD7TSBQTUtka3JQBWjQiv8qk/HRxAeJ bzJ70hJpG+pvLSLreyYNd2hbRdGGgcpSzNTkkLMYbf3dt+DqT5QK2L0rKQ8mfM/R xbbHMeSKXgOAPxzvAK+WbNnnJiC7ctVc64l3lBzIftevvNcJuGW6H719cmZef6kw iziBRVjzYOlwUTNxn6vqZ+9eWr6yMqPhj8BA5PWWIPyJm65QYj0qmVJ6YsZVdwr0 /RS64TowdzeKT424ExgKhe767L3KyDnpcfASrSZL0bXobOWnGTNeeEWGkEa5TVU= -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:23 2025 by rpki-client