This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer File: MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer (raw, json) Hash identifier: VQxSoQtBFlxf2kzgLqcSotquJgsUnq1kGMwwh4ie9HE= Subject key identifier: 30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0274AE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft caRepository: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 12 Nov 2025 12:23:36 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 131243 IP: 103.41.114.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160942 (0x274ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 12 12:23:36 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9115F08, serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:27:ee:5b:2c:5a:da:03:ce:48:b1:da:55: e0:31:e4:8e:47:39:ac:f0:06:4a:35:d1:cb:4c:74: 87:0a:51:2d:77:00:ad:b2:4e:d5:8a:d9:72:ce:a8: 7b:de:d8:36:71:80:75:c9:83:e6:57:86:81:7f:16: 74:70:ac:bc:55:eb:43:58:a0:e7:44:3f:b8:05:96: 0f:4e:1a:94:56:f2:cf:64:75:c7:d3:de:64:28:8c: 7e:fd:66:12:47:9f:ae:fd:e8:1e:02:e7:89:68:a6: 21:d9:91:97:a9:91:0f:dd:00:a2:bb:4d:05:f1:5b: f7:6a:17:8a:7a:20:ba:0b:1a:6e:e6:c1:e4:0e:a3: 8a:71:61:35:8a:60:6a:c9:95:aa:7b:d4:c7:e2:52: 9d:7e:96:6b:0d:db:fa:2c:74:3d:2a:37:da:db:26: 41:de:e4:91:cf:65:0b:ed:f7:4e:cf:3c:34:a9:19: ad:6a:c7:aa:94:80:3e:fc:03:16:5d:59:35:60:af: 39:42:e3:bc:48:10:8a:f2:30:c5:5c:75:e9:76:60: 6e:04:d5:af:4d:cb:6b:6c:02:36:c5:f5:cd:1c:98: 3c:8b:00:67:b4:ea:3c:ed:5f:af:c5:48:ff:49:ee: 22:48:24:1b:79:9c:bc:11:18:9a:81:88:a8:ee:46: 03:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131243 sbgp-ipAddrBlock: critical IPv4: 103.41.114.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:78:f0:b7:a6:40:53:4c:05:39:fb:f7:6b:59:47:06:bc:bf: 64:6b:0f:b2:4a:f3:5f:28:17:53:f5:a0:c3:ff:be:61:71:5d: f5:92:fd:48:2e:63:9b:99:65:3a:11:df:fe:e9:9d:5e:a4:19: e6:a2:ba:03:9a:00:4b:c6:ee:66:8d:4f:4a:db:4b:14:bd:c4: 1e:72:dc:f3:7a:92:1c:02:95:ed:0e:8b:8b:3f:4a:03:22:ca: b1:84:42:5d:90:2e:b9:22:bd:f0:59:d3:15:a7:a5:bb:c6:06: 16:03:e5:2a:f1:ad:98:6d:0c:c7:c3:38:32:27:43:69:c8:bd: d7:92:fc:60:2b:35:18:57:da:e5:b0:b6:cc:70:ef:4a:e8:49: 03:bc:12:a8:a0:25:f4:06:65:c5:3d:2d:9f:7f:c5:d0:b5:3a: 60:dd:1b:20:d2:d1:9c:56:b8:75:35:ea:d5:c1:a2:ef:66:70: 91:a7:06:f5:09:a9:6f:d9:bd:93:09:88:ed:7e:ab:4f:6d:7c: 33:40:00:40:6d:ad:7c:dd:cd:9c:ef:85:95:c1:04:8d:8c:6a: 40:40:c0:48:b9:64:34:2e:25:42:28:96:69:e2:07:98:97:7e: 07:20:32:23:be:c6:9b:fe:f0:8d:94:de:3a:ef:cc:51:ef:30: 53:f1:ae:60 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnSuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMjEyMjMzNloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMTVGMDgxMTAvBgNVBAUTKDMwM0NEM0NEQTc4NDI2QjVCRTg3NTFB NjM0RDY0OUFEOEZCN0EwQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF0CfuWyxa2gPOSLHaVeAx5I5HOazwBko10ctMdIcKUS13AK2yTtWK2XLOqHve 2DZxgHXJg+ZXhoF/FnRwrLxV60NYoOdEP7gFlg9OGpRW8s9kdcfT3mQojH79ZhJH n6796B4C54lopiHZkZepkQ/dAKK7TQXxW/dqF4p6ILoLGm7mweQOo4pxYTWKYGrJ lap71MfiUp1+lmsN2/osdD0qN9rbJkHe5JHPZQvt907PPDSpGa1qx6qUgD78AxZd WTVgrzlC47xIEIryMMVcdel2YG4E1a9Ny2tsAjbF9c0cmDyLAGe06jztX6/FSP9J 7iJIJBt5nLwRGJqBiKjuRgPTAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUMDzTzaeE JrW+h1GmNNZJrY+3oMMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE1RjA4LzAxNkJDRURFNkEyRDExRURCQTFGNTgzOEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExNUYwOC8wMTZCQ0VERTZBMkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFl RUpyVy1oMUdtTk5aSnJZLTNvTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgCrMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZylyMA0GCSqG SIb3DQEBCwUAA4IBAQAcePC3pkBTTAU5+/drWUcGvL9kaw+ySvNfKBdT9aDD/75h cV31kv1ILmObmWU6Ed/+6Z1epBnmoroDmgBLxu5mjU9K20sUvcQectzzepIcApXt DouLP0oDIsqxhEJdkC65Ir3wWdMVp6W7xgYWA+Uq8a2YbQzHwzgyJ0NpyL3Xkvxg KzUYV9rlsLbMcO9K6EkDvBKooCX0BmXFPS2ff8XQtTpg3Rsg0tGcVrh1NerVwaLv ZnCRpwb1Calv2b2TCYjtfqtPbXwzQABAba183c2c74WVwQSNjGpAQMBIuWQ0LiVC KJZp4geYl34HIDIjvsab/vCNlN4678xR7zBT8a5g -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:13 2025 by rpki-client