This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer File: MBTdOHsX8ziHOip6N_gkTZNwLqg.cer (raw, json) Hash identifier: he93FsxPrVTANtrN8yNDEJiI9swz4vRtNu2BAOckIE8= Subject key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027896 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft caRepository: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 06:20:20 +0000 Certificate not after: Mon 02 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 137192 IP: 103.104.156.0/22 IP: 2001:df6:5ec0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161942 (0x27896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 27 06:20:20 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=A9172E1E, serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0d:5b:43:a6:af:25:4d:03:12:92:85:41:fc: e1:4b:77:c8:f6:51:8f:93:49:aa:e6:08:9d:06:0d: 62:7f:2c:32:be:2e:20:b6:55:bc:55:5d:af:85:33: 3c:89:70:fe:1d:28:e0:3b:13:76:28:f9:13:5c:d6: 0f:c9:5e:fc:c0:53:11:88:9d:74:7a:3b:43:57:96: 62:d4:d6:47:63:5d:c3:b4:62:5b:5a:bb:9f:76:82: 97:5f:40:f1:49:85:5b:08:e6:7b:fd:67:ac:ab:23: 07:eb:ba:f0:df:fc:84:d4:fd:7e:dc:8c:07:79:fe: 11:97:26:a8:c0:48:f5:d9:45:65:ee:27:8d:6d:0e: 3b:ea:7d:32:5d:85:9e:25:c5:1c:f7:d2:ae:4d:7f: 36:a0:3f:e8:83:9b:d6:1f:41:4c:35:98:1d:57:60: b7:12:ba:58:60:26:f5:c8:ab:4f:a8:a2:21:6a:7c: 8e:38:fb:03:1e:c5:be:ad:72:64:77:e7:71:d8:02: 2a:d9:0d:9d:ff:1d:e3:ae:aa:11:b2:9f:28:cf:e8: f4:93:05:40:d7:3a:94:6a:d2:6e:83:df:b9:7e:3c: 6a:9a:a4:dc:99:42:81:fb:ec:aa:51:a1:04:52:81: 1d:f4:de:04:6a:ea:fc:37:72:5d:5d:cf:ef:9d:bb: 8a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137192 sbgp-ipAddrBlock: critical IPv4: 103.104.156.0/22 IPv6: 2001:df6:5ec0::/48 Signature Algorithm: sha256WithRSAEncryption 15:0b:ce:12:55:8b:b1:d0:c8:64:05:1b:e1:e9:05:0a:2c:60: 73:78:5a:8a:cd:28:5f:53:a5:5f:e6:39:e6:b9:a0:11:94:ce: c1:5f:cd:4d:2a:f2:1f:e7:1d:21:35:24:04:a5:05:3e:fb:9b: 43:50:47:86:15:62:ff:ab:69:c3:99:e6:2d:98:cd:9c:4a:c5: 95:e6:2e:2a:a5:56:a2:c5:ce:a1:81:a5:1a:b3:04:2d:85:50: dd:1f:63:eb:cf:c5:30:e3:e0:f5:dc:f3:7c:e6:6b:6e:0c:3b: bd:3e:5d:d5:55:42:13:70:aa:f9:28:21:2f:95:8c:78:d3:46: 3e:c6:40:9e:35:41:ee:31:ca:e3:73:ff:e4:c0:f9:21:cb:56: bb:49:d1:99:d8:c6:2d:73:7c:4f:c9:ca:54:6a:b7:b5:84:b6: a0:80:86:6d:85:e4:e5:1b:0b:5a:b0:07:0d:cb:5a:cc:fe:07: 1f:6e:25:2d:16:1e:d6:ff:6a:dc:c9:4e:42:14:8b:b4:82:fe: da:39:4d:cd:19:53:b0:57:44:93:4c:94:a2:c4:6b:28:78:2f: 00:cf:d4:43:2e:c3:e4:3e:64:9d:1f:43:bb:6c:d6:87:3d:d6: c0:6f:b5:ae:6a:d4:6c:ba:f2:58:a0:0d:11:3b:4c:ae:5b:06: ff:4c:b3:ba -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAniWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNzA2MjAyMFoXDTI2MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNzJFMUUxMTAvBgNVBAUTKDMwMTRERDM4N0IxN0YzMzg4NzNBMkE3 QTM3RjgyNDREOTM3MDJFQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkDVtDpq8lTQMSkoVB/OFLd8j2UY+TSarmCJ0GDWJ/LDK+LiC2VbxVXa+FMzyJ cP4dKOA7E3Yo+RNc1g/JXvzAUxGInXR6O0NXlmLU1kdjXcO0Yltau592gpdfQPFJ hVsI5nv9Z6yrIwfruvDf/ITU/X7cjAd5/hGXJqjASPXZRWXuJ41tDjvqfTJdhZ4l xRz30q5NfzagP+iDm9YfQUw1mB1XYLcSulhgJvXIq0+ooiFqfI44+wMexb6tcmR3 53HYAirZDZ3/HeOuqhGynyjP6PSTBUDXOpRq0m6D37l+PGqapNyZQoH77KpRoQRS gR303gRq6vw3cl1dz++du4qxAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUMBTdOHsX 8ziHOip6N/gkTZNwLqgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTcyRTFFLzI3ODgxN0MwNUMxMzExRUVBOTA3MTgzREM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3MkUxRS8yNzg4MTdDMDVDMTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hz WDh6aUhPaXA2Tl9na1RaTndMcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhfoMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCZ2icMA8EAgAC MAkDBwAgAQ32XsAwDQYJKoZIhvcNAQELBQADggEBABULzhJVi7HQyGQFG+HpBQos YHN4WorNKF9TpV/mOea5oBGUzsFfzU0q8h/nHSE1JASlBT77m0NQR4YVYv+racOZ 5i2YzZxKxZXmLiqlVqLFzqGBpRqzBC2FUN0fY+vPxTDj4PXc83zma24MO70+XdVV QhNwqvkoIS+VjHjTRj7GQJ41Qe4xyuNz/+TA+SHLVrtJ0ZnYxi1zfE/JylRqt7WE tqCAhm2F5OUbC1qwBw3LWsz+Bx9uJS0WHtb/atzJTkIUi7SC/to5Tc0ZU7BXRJNM lKLEayh4LwDP1EMuw+Q+ZJ0fQ7ts1oc91sBvta5q1Gy68ligDRE7TK5bBv9Ms7o= -----END CERTIFICATE-----Generated at Sat Dec 6 09:34:08 2025 by rpki-client