This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LCxcmnhfLqc0B5wUDjpHGbOG04M.cer File: LCxcmnhfLqc0B5wUDjpHGbOG04M.cer (raw, json) Hash identifier: A+dJbr/K5vTCdaMKp0hD+DAUcQrqN+g26EY7TXf5gLM= Subject key identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027992 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 30 Nov 2025 19:41:12 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 151983 IP: 103.253.18.0/23 IP: 2001:df3:8140::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162194 (0x27992) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 30 19:41:12 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91BA1D4, serialNumber=2C2C5C9A785F2EA734079C140E3A4719B386D383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:a7:eb:23:7a:f8:bc:8e:ec:f8:cf:ec:65: 9b:12:41:e3:9a:fd:75:73:46:20:f1:d7:dc:d2:32: 85:e4:2a:87:82:0b:67:0b:81:be:46:9c:4c:b3:eb: 79:3f:79:f0:08:12:b3:88:58:0c:1c:59:cc:00:f7: 18:ee:c2:49:1d:b0:15:55:7f:ef:66:bc:62:de:64: f0:53:af:f6:8b:e1:1e:f1:54:d7:a3:a8:cf:20:24: 03:4a:dc:45:46:cf:c9:12:14:80:55:8e:3c:e9:6f: ce:01:c7:19:92:84:58:35:f7:76:f1:a2:2a:34:94: 8a:dd:2a:cf:4b:db:98:ee:9c:c3:9b:7c:15:a7:46: af:72:0c:f6:67:7a:2f:87:d0:d1:88:cd:a5:10:33: e5:c9:c8:4c:b8:e0:39:e8:85:b0:42:48:05:17:62: 50:19:91:e4:c3:88:a7:d6:4d:00:5c:ce:1b:6a:48: 31:0b:72:40:f0:d2:6d:61:b0:4f:9f:fd:2b:10:c7: 6a:71:25:02:fa:26:38:d9:e5:75:77:ad:e7:80:f2: 94:cb:75:06:cc:1b:8f:43:61:71:78:59:f4:f2:a5: 3e:92:ee:94:f8:ca:dd:55:03:e0:d3:04:20:0c:15: cd:20:d4:97:d3:ac:08:bc:96:cf:8b:57:53:42:7a: 64:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2C:5C:9A:78:5F:2E:A7:34:07:9C:14:0E:3A:47:19:B3:86:D3:83 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BA1D4/5545E21CA93611EE884AB159C4F9AE02/LCxcmnhfLqc0B5wUDjpHGbOG04M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151983 sbgp-ipAddrBlock: critical IPv4: 103.253.18.0/23 IPv6: 2001:df3:8140::/48 Signature Algorithm: sha256WithRSAEncryption 19:13:39:0d:d9:dd:6b:8f:01:81:21:07:18:9a:97:65:c8:47: b7:42:21:1c:2d:4e:5e:c2:bc:40:9d:7f:fe:46:95:29:75:a6: 4d:59:12:10:66:73:75:d2:63:0d:a4:d0:05:af:de:07:99:34: 66:67:67:50:19:e8:09:09:46:7a:d9:46:5c:35:ba:a2:de:e3: 17:44:38:a5:c5:fe:5c:a9:a4:0d:b1:22:4d:ef:4b:d0:24:a9: 0b:a8:62:98:bb:75:65:9f:a1:d5:62:24:41:fd:bd:8b:29:b6: 76:51:c0:6f:70:ad:4e:2d:2c:78:43:a6:66:1e:c7:e8:02:a9: a1:a0:78:d6:81:6c:2e:3c:8b:52:44:fd:f3:1e:b2:f6:2c:de: 48:82:09:d9:9e:b8:e2:aa:6e:f8:41:6d:e7:93:48:4d:f4:b1: 96:f1:6a:2d:43:f6:dd:49:99:46:5d:53:cf:5b:1f:23:0a:3c: 03:2d:f3:78:9a:42:2f:9e:d0:8f:2e:71:65:03:cd:31:a6:f5: 8d:5d:17:f7:72:c0:6c:a4:d0:d9:46:79:cc:c0:b7:ac:4f:ab: 18:50:86:26:90:d1:d1:92:34:47:22:d8:0a:28:46:8a:18:03: ca:93:45:bd:07:21:28:c0:a1:a7:df:fa:6a:1c:e3:f2:77:2d: f3:9a:66:de -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnmSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEzMDE5NDExMloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkExRDQxMTAvBgNVBAUTKDJDMkM1QzlBNzg1RjJFQTczNDA3OUMx NDBFM0E0NzE5QjM4NkQzODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzC6frI3r4vI7s+M/sZZsSQeOa/XVzRiDx19zSMoXkKoeCC2cLgb5GnEyz63k/ efAIErOIWAwcWcwA9xjuwkkdsBVVf+9mvGLeZPBTr/aL4R7xVNejqM8gJANK3EVG z8kSFIBVjjzpb84BxxmShFg193bxoio0lIrdKs9L25junMObfBWnRq9yDPZnei+H 0NGIzaUQM+XJyEy44DnohbBCSAUXYlAZkeTDiKfWTQBczhtqSDELckDw0m1hsE+f /SsQx2pxJQL6JjjZ5XV3reeA8pTLdQbMG49DYXF4WfTypT6S7pT4yt1VA+DTBCAM Fc0g1JfTrAi8ls+LV1NCemT7AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQULCxcmnhf Lqc0B5wUDjpHGbOG04MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJBMUQ0LzU1NDVFMjFDQTkzNjExRUU4ODRBQjE1OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCQTFENC81NTQ1RTIxQ0E5MzYxMUVFODg0QUIxNTlDNEY5QUUwMi9MQ3hjbW5o ZkxxYzBCNXdVRGpwSEdiT0cwNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlGvMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ/0SMA8EAgAC MAkDBwAgAQ3zgUAwDQYJKoZIhvcNAQELBQADggEBABkTOQ3Z3WuPAYEhBxial2XI R7dCIRwtTl7CvECdf/5GlSl1pk1ZEhBmc3XSYw2k0AWv3geZNGZnZ1AZ6AkJRnrZ Rlw1uqLe4xdEOKXF/lyppA2xIk3vS9AkqQuoYpi7dWWfodViJEH9vYsptnZRwG9w rU4tLHhDpmYex+gCqaGgeNaBbC48i1JE/fMesvYs3kiCCdmeuOKqbvhBbeeTSE30 sZbxai1D9t1JmUZdU89bHyMKPAMt83iaQi+e0I8ucWUDzTGm9Y1dF/dywGyk0NlG eczAt6xPqxhQhiaQ0dGSNEci2AooRooYA8qTRb0HISjAoaff+moc4/J3LfOaZt4= -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:27 2025 by rpki-client