This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer File: NPs4YMs0-seCIJnB-5kfzfY8hs0.cer (raw, json) Hash identifier: c2E1ezgdIxkajGKZVZi6m5+4ryLrc1NBdZSjz6z3H/0= Subject key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027371 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 05 Nov 2025 21:18:55 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 58701 IP: 103.20.89.0/24 IP: 2406:e9c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160625 (0x27371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 5 21:18:55 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91C1710, serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2f:6b:ee:4f:4b:d3:b6:ae:4e:3d:f4:76:db: 06:1a:62:ab:4d:2c:47:88:3b:df:bb:e7:2e:48:9a: e4:4e:fd:27:06:79:10:87:89:da:c1:6c:88:25:2b: 27:84:4f:f4:8b:31:ed:c5:96:4b:9b:9e:34:7b:14: 3e:70:98:1b:a2:64:f2:c1:c0:da:9f:22:5f:a9:6c: 7b:d6:5e:1f:d4:a1:41:55:78:c1:12:cc:13:17:52: 2a:d6:b7:cd:c5:a9:5d:72:67:7d:cc:59:ca:02:67: 15:3f:eb:a9:69:39:c6:b0:b3:2f:ed:6b:b3:41:ad: b8:cd:00:bb:ae:66:aa:3c:06:9f:c1:93:2a:1c:06: 07:00:fa:9d:55:9b:dc:eb:3e:43:d1:d0:03:89:e6: 88:52:d7:b4:16:1e:b0:6c:0f:d8:9c:0d:98:57:87: fc:36:cb:b7:89:71:3d:97:a4:ab:e7:d1:31:06:51: 48:5a:09:b3:db:2f:43:18:10:35:6e:a5:d1:af:96: 2a:7c:69:2d:3e:99:97:65:e9:1c:30:7a:f2:5b:59: ef:cb:52:91:ef:92:c2:a9:8b:4f:f0:24:c9:7c:e3: c7:ab:17:8b:61:0f:6e:af:59:4d:05:71:7a:f2:d6: 08:ee:73:a2:da:9d:9c:7c:ad:36:2d:b6:44:da:b0: 0a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 58701 sbgp-ipAddrBlock: critical IPv4: 103.20.89.0/24 IPv6: 2406:e9c0::/32 Signature Algorithm: sha256WithRSAEncryption d7:4a:f4:bc:39:15:27:96:ee:4b:48:82:dd:6d:2c:e8:d1:ef: 22:de:b0:6e:48:48:be:b4:44:c4:58:22:f2:95:f9:43:1e:b9: 44:4c:bf:21:98:ee:8f:f5:99:67:ae:f0:47:d7:12:86:2b:4e: d1:78:b4:9b:88:41:7e:c5:5b:5c:17:fa:fd:e8:69:e8:51:fe: 9a:29:40:24:4a:c0:65:3d:77:39:d8:dd:34:d5:52:ba:08:f6: 2c:eb:b4:0b:61:5f:0c:3f:57:fd:6d:49:8f:13:17:fb:34:f5: 45:5e:ba:9a:ce:9d:f4:4e:0d:ec:fb:da:ab:c1:7e:8b:43:fd: 31:a6:ef:ea:d8:36:a7:dc:fc:ec:d3:a6:2e:04:7c:5b:1d:0e: fa:3f:d1:d2:96:eb:6b:5f:96:c1:3a:05:0c:f8:5d:3a:06:de: 10:c0:51:cc:cd:66:a3:1d:1a:c0:35:11:a0:da:19:dc:2b:86: 27:66:18:5a:17:8a:c6:6d:2f:d6:96:4b:3c:34:e9:a6:87:a0: 51:70:07:a1:42:7c:02:da:33:2b:ad:b3:e6:86:53:df:7b:69: 4f:4d:95:bc:78:61:bd:45:29:f2:f7:68:f5:f4:3e:27:61:04: c7:d0:f1:8b:1c:8e:d9:aa:bc:c6:f4:e9:42:6b:5b:f6:92:50: 6e:49:92:0b -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnNxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNTIxMTg1NVoXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzE3MTAxMTAvBgNVBAUTKDM0RkIzODYwQ0IzNEZBQzc4MjIwOTlD MUZCOTkxRkNERjYzQzg2Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRL2vuT0vTtq5OPfR22wYaYqtNLEeIO9+75y5ImuRO/ScGeRCHidrBbIglKyeE T/SLMe3FlkubnjR7FD5wmBuiZPLBwNqfIl+pbHvWXh/UoUFVeMESzBMXUirWt83F qV1yZ33MWcoCZxU/66lpOcawsy/ta7NBrbjNALuuZqo8Bp/BkyocBgcA+p1Vm9zr PkPR0AOJ5ohS17QWHrBsD9icDZhXh/w2y7eJcT2XpKvn0TEGUUhaCbPbL0MYEDVu pdGvlip8aS0+mZdl6RwwevJbWe/LUpHvksKpi0/wJMl848erF4thD26vWU0FcXry 1gjuc6LanZx8rTYttkTasArxAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUNPs4YMs0 +seCIJnB+5kfzfY8hs0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUMxNzEwLzE4MjI5QTg2ODI2QjExRUNBMTFCQTUyQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDMTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1z MC1zZUNJSm5CLTVrZnpmWThoczAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAOVNMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAZxRZMA0EAgAC MAcDBQAkBunAMA0GCSqGSIb3DQEBCwUAA4IBAQDXSvS8ORUnlu5LSILdbSzo0e8i 3rBuSEi+tETEWCLylflDHrlETL8hmO6P9ZlnrvBH1xKGK07ReLSbiEF+xVtcF/r9 6GnoUf6aKUAkSsBlPXc52N001VK6CPYs67QLYV8MP1f9bUmPExf7NPVFXrqazp30 Tg3s+9qrwX6LQ/0xpu/q2Dan3Pzs06YuBHxbHQ76P9HSlutrX5bBOgUM+F06Bt4Q wFHMzWajHRrANRGg2hncK4YnZhhaF4rGbS/Wlks8NOmmh6BRcAehQnwC2jMrrbPm hlPfe2lPTZW8eGG9RSny92j19D4nYQTH0PGLHI7ZqrzG9OlCa1v2klBuSZIL -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:35 2025 by rpki-client