This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer File: MfN4PHoe14P8H9p0H2p1KdWl5qA.cer (raw, json) Hash identifier: CFG7dPQxyk0cfhUT+NyJOuuxWuymoIFInmm+yuL1xf0= Subject key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A3E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft caRepository: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 20:47:27 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 23747 IP: 103.103.148.0/22 IP: 2401:f640::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162366 (0x27a3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 20:47:27 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:5a:da:56:19:1e:10:0b:b3:8e:1a:30:64: 4a:d7:d0:a9:c5:43:b9:17:63:43:fa:bd:96:3d:1f: 8c:d3:9b:4a:d7:64:41:fe:98:82:2b:49:89:0e:4f: 5a:d2:e1:cb:38:3a:cb:9a:9f:2a:97:e6:70:34:9d: 64:e7:62:ba:f2:9a:e9:df:05:c7:41:a8:d6:d1:d3: 5d:15:1d:b0:e7:4d:c8:d1:a5:c1:22:3e:ba:0c:34: 06:5f:9a:b0:ca:12:ee:07:3c:fb:0f:87:5d:b1:22: 17:7f:f7:72:27:90:8f:bf:ff:6c:ac:3f:ac:8a:ad: a2:7e:7c:d0:59:38:12:0a:93:75:dd:59:b0:29:64: 88:1b:b0:02:e0:3e:8d:df:55:f7:1d:0f:16:2f:9a: 49:3e:76:58:22:ab:11:a0:cc:6a:fe:76:65:ef:00: a7:aa:cd:d8:bc:84:16:00:22:a1:a7:a2:52:8c:f8: bb:d3:2b:09:09:08:5b:6c:d6:a4:7c:bf:b9:79:77: 9a:cf:66:f2:60:b2:ac:6f:35:1e:03:32:3a:e5:17: c2:30:05:84:19:35:3a:3c:f1:69:c5:77:46:55:0e: e4:01:b7:be:3c:94:d3:74:4a:5d:19:de:73:9a:2a: 12:22:72:d6:6e:01:05:ba:80:e7:ad:35:c1:41:1a: 93:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 23747 sbgp-ipAddrBlock: critical IPv4: 103.103.148.0/22 IPv6: 2401:f640::/32 Signature Algorithm: sha256WithRSAEncryption 4e:b4:0b:8a:06:92:50:80:66:fd:48:f4:26:07:0f:c2:74:86: 31:a9:ef:d0:e8:59:07:95:8a:fd:d4:92:00:2d:b1:b0:16:d1: 60:64:45:31:23:36:d3:79:2a:02:18:9c:ad:93:2e:dd:45:5f: b3:9b:17:80:0c:a1:26:70:6d:b2:10:05:6a:d1:c4:ed:eb:f9: bf:49:48:b7:10:82:bc:55:4f:6d:9c:6b:6c:3e:ad:a7:89:b2: b9:56:85:13:8c:80:e8:36:6c:e3:64:20:f0:86:01:fe:cc:35: 73:3c:44:83:9d:44:4a:8d:e2:62:14:c5:da:1b:14:2a:04:2f: 3a:d7:73:bc:87:71:37:ca:59:a6:09:0c:4b:3c:b0:58:7d:c2: 51:9e:7b:77:8f:a2:2f:d1:e0:99:6a:32:2d:81:27:4b:2c:90: a8:8b:bb:87:de:18:f1:41:dd:87:0b:a2:fa:45:ac:e2:9e:e1: 2b:cb:d8:42:d9:c9:91:d6:18:be:bc:01:08:e5:12:d6:dd:68: 8a:e7:f3:ea:e3:b7:b4:10:f9:aa:09:62:cf:71:f6:b9:8b:29: 58:74:6d:9e:a3:a1:7c:4c:f1:9a:7b:ae:19:90:56:f4:97:7b: eb:5e:5c:74:7e:fa:12:4e:87:6b:18:40:91:b0:c0:0e:f3:1f: 15:31:31:c0 -----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgIDAno+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTIwNDcyN1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3 NDFGNkE3NTI5RDVBNUU2QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3m1raVhkeEAuzjhowZErX0KnFQ7kXY0P6vZY9H4zTm0rXZEH+mIIrSYkOT1rS 4cs4OsuanyqX5nA0nWTnYrrymunfBcdBqNbR010VHbDnTcjRpcEiProMNAZfmrDK Eu4HPPsPh12xIhd/93InkI+//2ysP6yKraJ+fNBZOBIKk3XdWbApZIgbsALgPo3f VfcdDxYvmkk+dlgiqxGgzGr+dmXvAKeqzdi8hBYAIqGnolKM+LvTKwkJCFts1qR8 v7l5d5rPZvJgsqxvNR4DMjrlF8IwBYQZNTo88WnFd0ZVDuQBt748lNN0Sl0Z3nOa KhIictZuAQW6gOetNcFBGpPjAgMBAAGjggMdMIIDGTAdBgNVHQ4EFgQUMfN4PHoe 14P8H9p0H2p1KdWl5qAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk5QjI0LzVGRkM5RUY2NDEyNTExRUNCN0RGNDc3RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5OUIyNC81RkZDOUVGNjQxMjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhv ZTE0UDhIOXAwSDJwMUtkV2w1cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICXMMwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJnZ5QwDQQCAAIw BwMFACQB9kAwDQYJKoZIhvcNAQELBQADggEBAE60C4oGklCAZv1I9CYHD8J0hjGp 79DoWQeViv3UkgAtsbAW0WBkRTEjNtN5KgIYnK2TLt1FX7ObF4AMoSZwbbIQBWrR xO3r+b9JSLcQgrxVT22ca2w+raeJsrlWhROMgOg2bONkIPCGAf7MNXM8RIOdREqN 4mIUxdobFCoELzrXc7yHcTfKWaYJDEs8sFh9wlGee3ePoi/R4JlqMi2BJ0sskKiL u4feGPFB3YcLovpFrOKe4SvL2ELZyZHWGL68AQjlEtbdaIrn8+rjt7QQ+aoJYs9x 9rmLKVh0bZ6joXxM8Zp7rhmQVvSXe+teXHR++hJOh2sYQJGwwA7zHxUxMcA= -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:01 2025 by rpki-client