This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer File: LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer (raw, json) Hash identifier: fcunV9x4IMKE3H11DH13mQHNRUeNOaKjNHh0OSjrPI8= Subject key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B7B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 20:40:49 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 141392 IP: 103.158.19.0/24 IP: 2001:df5:3c80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162683 (0x27b7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 20:40:49 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:41:fd:83:d3:f1:4d:ab:e1:83:98:93:3e: 1e:ed:52:5c:0b:c1:d9:8d:e9:39:df:7c:16:ac:fc: 1c:ee:30:18:1b:17:22:19:c3:a6:cc:55:b7:67:74: b9:d1:e5:50:c7:62:69:c3:d6:ac:6f:43:21:ef:d4: 06:60:de:3a:c4:41:29:b4:c8:52:4a:8e:0a:cc:09: 89:6c:31:6c:4b:18:fe:f5:0e:55:af:a8:a4:1e:85: 4f:3f:31:a6:42:59:18:dd:64:f4:0b:70:d1:dd:0d: 6b:08:cc:ac:c1:ce:ed:a3:3a:11:d0:97:12:ae:e4: 30:5b:90:b2:aa:4c:3e:cc:04:4b:bd:46:09:e7:eb: 87:63:68:3c:50:89:c5:b7:97:2c:3b:15:35:48:6c: 18:4e:2c:9b:a0:91:6d:5d:9a:c1:64:35:95:62:48: 13:5b:1e:26:20:f7:cf:a7:e1:63:07:d5:72:02:02: ab:90:d2:bc:80:02:78:e8:4d:cf:fe:fb:78:9e:31: 69:c8:bb:be:fd:b8:e0:22:dc:4e:c4:18:66:de:f6: 23:1a:b8:24:15:ae:cc:fe:32:28:51:c1:8e:9a:29: c8:b1:4b:0d:38:c7:e0:97:1b:8b:93:74:0e:d6:ea: b7:e0:1d:80:1b:26:99:ac:a0:aa:e2:60:a9:a4:9d: f0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141392 sbgp-ipAddrBlock: critical IPv4: 103.158.19.0/24 IPv6: 2001:df5:3c80::/48 Signature Algorithm: sha256WithRSAEncryption 4d:ef:c5:7f:2d:12:cd:cd:e2:f6:db:e0:f5:3c:a7:81:51:b7: 1b:ed:4b:d4:9c:f5:79:9b:1a:5d:9d:e2:0b:b3:54:7a:b2:07: 3a:7e:3a:bc:9f:42:63:cb:5d:db:03:83:5c:31:e3:83:76:9e: 67:7a:27:ac:73:23:25:2f:a2:e5:0f:7d:1c:a2:b1:40:27:81: 8b:88:db:fc:a6:35:2c:5d:ae:7c:3e:b1:d5:4e:b1:af:55:65: dd:cd:f8:30:eb:32:de:06:74:37:76:c4:71:f7:82:a4:d6:67: 0b:ff:7b:95:51:ba:91:a1:6f:39:cf:cb:f1:d2:93:39:9c:99: 4e:8b:3f:85:b3:e6:c3:35:d7:b3:85:67:62:76:9f:7a:be:21: 57:ca:9d:35:e5:ed:f6:9d:ff:03:f1:04:36:bf:e4:99:55:62: a2:68:05:9b:9a:ab:58:f7:26:d5:82:12:8c:52:4a:4b:42:f1: 7a:4c:7b:77:c6:30:dc:9f:d5:3c:69:4a:02:25:cd:54:5e:68: 3f:21:ce:ce:36:dc:a1:6c:83:1a:d4:8f:b3:17:41:bd:15:73: 08:1f:f1:ac:27:4c:fc:aa:7b:63:b1:28:a4:ff:d4:39:ac:59: 4b:60:8c:ca:be:78:18:bf:a3:f5:3e:b3:c5:ad:be:10:9e:1f: c1:6d:61:a5 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnt7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzIwNDA0OVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxODU1QjMxMTAvBgNVBAUTKDJEMDFBMTk0MkJBRkQ5RDNCMzFEREJG RTc1MzI0QkFENjJCNjA5NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJIkH9g9PxTavhg5iTPh7tUlwLwdmN6TnffBas/BzuMBgbFyIZw6bMVbdndLnR 5VDHYmnD1qxvQyHv1AZg3jrEQSm0yFJKjgrMCYlsMWxLGP71DlWvqKQehU8/MaZC WRjdZPQLcNHdDWsIzKzBzu2jOhHQlxKu5DBbkLKqTD7MBEu9Rgnn64djaDxQicW3 lyw7FTVIbBhOLJugkW1dmsFkNZViSBNbHiYg98+n4WMH1XICAquQ0ryAAnjoTc/+ +3ieMWnIu779uOAi3E7EGGbe9iMauCQVrsz+MihRwY6aKcixSw04x+CXG4uTdA7W 6rfgHYAbJpmsoKriYKmknfB7AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQULQGhlCuv 2dOzHdv+dTJLrWK2CVgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg1NUIzLzI2QjFFMThBMzFFRDExRjA4OURDNzczQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4NTVCMy8yNkIxRTE4QTMxRUQxMUYwODlEQzc3M0JDNEY5QUUwMi9MUUdobEN1 djJkT3pIZHYtZFRKTHJXSzJDVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAihQMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ54TMA8EAgAC MAkDBwAgAQ31PIAwDQYJKoZIhvcNAQELBQADggEBAE3vxX8tEs3N4vbb4PU8p4FR txvtS9Sc9XmbGl2d4guzVHqyBzp+OryfQmPLXdsDg1wx44N2nmd6J6xzIyUvouUP fRyisUAngYuI2/ymNSxdrnw+sdVOsa9VZd3N+DDrMt4GdDd2xHH3gqTWZwv/e5VR upGhbznPy/HSkzmcmU6LP4Wz5sM117OFZ2J2n3q+IVfKnTXl7fad/wPxBDa/5JlV YqJoBZuaq1j3JtWCEoxSSktC8XpMe3fGMNyf1TxpSgIlzVReaD8hzs423KFsgxrU j7MXQb0Vcwgf8awnTPyqe2OxKKT/1DmsWUtgjMq+eBi/o/U+s8WtvhCeH8FtYaU= -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:24 2025 by rpki-client