This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer File: Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer (raw, json) Hash identifier: bfM2FeCqi7nidTf605OPeIoCQ/pDTUcOl4vNICpnBOU= Subject key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C52 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft caRepository: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 16:55:30 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 135668 IP: 103.78.136.0/24 IP: 203.0.27.0/24 IP: 2001:df6:3a00::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162898 (0x27c52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 5 16:55:30 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A919D656, serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:60:ae:5a:94:67:7d:c0:73:ee:e9:0c:85:09: 8b:9c:98:f9:90:64:d9:e3:3a:ae:77:a5:77:c2:51: 53:2e:db:89:6a:35:86:92:ef:69:53:5d:68:06:2c: b0:96:47:f7:d9:60:a7:46:5b:de:37:fe:80:36:ff: a4:c8:42:72:4b:51:43:fe:33:7b:01:ea:f8:23:42: dc:48:d5:00:61:81:48:7d:7b:0f:31:d0:26:12:9c: b5:58:31:3b:25:95:c9:36:34:18:23:91:5f:eb:7e: 0c:30:4e:2a:72:6b:a7:2a:ac:f0:c2:d8:dc:4c:7e: 27:99:73:9c:c3:ff:04:b0:3e:c2:d1:da:ac:7c:1a: bb:da:b0:2f:e6:09:30:9e:59:55:15:a7:30:b5:49: 0a:16:b4:c2:08:a0:76:b2:1b:c2:03:66:ae:78:5c: f9:00:e8:1d:d3:60:d2:f6:ad:ab:a2:43:a6:43:e1: 6c:29:9e:e1:67:a1:e9:68:8f:89:5e:a3:a1:0c:d2: 80:a1:36:01:e0:35:3a:29:ed:73:79:90:88:31:05: 31:03:db:fd:20:52:05:ce:e0:c2:0a:06:05:76:a9: 0d:89:8f:1c:5e:af:54:e4:d9:34:51:62:b6:73:10: 3e:1a:c8:e0:ed:cc:af:a2:d0:b9:2a:58:db:d8:69: c0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135668 sbgp-ipAddrBlock: critical IPv4: 103.78.136.0/24 203.0.27.0/24 IPv6: 2001:df6:3a00::/48 Signature Algorithm: sha256WithRSAEncryption 8b:fa:b7:20:31:5f:99:9a:4d:ef:d3:81:0c:79:8f:2f:c3:31: 28:32:8c:a9:f4:c5:98:f2:7c:b2:43:4f:8c:72:81:1a:76:04: 9d:16:96:75:47:9f:05:2a:58:4f:b7:28:2f:7a:47:d2:0d:bd: c9:d5:21:10:61:b5:76:66:c1:43:dd:f1:c3:f5:e8:bf:43:2d: 28:6b:d5:5c:48:d5:22:c9:02:26:56:fb:c9:e0:74:83:19:4c: 0a:ea:5a:82:ab:9f:b6:79:d3:06:7a:a3:aa:9e:d6:e8:2d:a7: 5e:29:2c:5d:bc:42:9c:7b:d2:4f:bc:aa:bf:5e:5d:30:d1:b2: 6e:fe:a2:9c:17:a9:be:e0:f2:4a:2a:9b:46:71:20:77:d4:9c: 28:b8:43:db:26:16:14:8b:94:33:1a:8a:0f:8d:10:cd:5d:83: 03:47:56:09:ee:d5:5d:c8:42:a7:55:f5:77:7a:46:85:50:e0: 16:05:33:09:bd:cd:02:ae:52:7a:3b:99:df:8d:08:88:a5:e5: b2:02:9d:37:aa:cd:2d:dc:f9:5f:26:12:4e:7b:c8:24:0a:09: b6:aa:81:cf:c2:7c:4a:97:fe:ed:d4:80:1a:3a:09:8b:59:70: 2f:53:fd:1a:9d:29:55:62:69:64:c2:f5:be:83:87:eb:f5:58: d7:bd:ab:a3 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIDAnxSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNTE2NTUzMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOUQ2NTYxMTAvBgNVBAUTKDM2MUJCQTk0MDhGQTE5QjVFOTdEODJD RERCRkZCMkU3OUJCQkEzM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFYK5alGd9wHPu6QyFCYucmPmQZNnjOq53pXfCUVMu24lqNYaS72lTXWgGLLCW R/fZYKdGW943/oA2/6TIQnJLUUP+M3sB6vgjQtxI1QBhgUh9ew8x0CYSnLVYMTsl lck2NBgjkV/rfgwwTipya6cqrPDC2NxMfieZc5zD/wSwPsLR2qx8GrvasC/mCTCe WVUVpzC1SQoWtMIIoHayG8IDZq54XPkA6B3TYNL2rauiQ6ZD4WwpnuFnoeloj4le o6EM0oChNgHgNTop7XN5kIgxBTED2/0gUgXO4MIKBgV2qQ2Jjxxer1Tk2TRRYrZz ED4ayODtzK+i0LkqWNvYacBvAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUNhu6lAj6 GbXpfYLN2/+y55u7oz8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlENjU2LzkzQ0I3N0FFNkFDQjExRUQ5QjYzM0IzOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5RDY1Ni85M0NCNzdBRTZBQ0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFq NkdiWHBmWUxOMl8teTU1dTdvejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhH0MDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ06IAwQAywAb MA8EAgACMAkDBwAgAQ32OgAwDQYJKoZIhvcNAQELBQADggEBAIv6tyAxX5maTe/T gQx5jy/DMSgyjKn0xZjyfLJDT4xygRp2BJ0WlnVHnwUqWE+3KC96R9INvcnVIRBh tXZmwUPd8cP16L9DLShr1VxI1SLJAiZW+8ngdIMZTArqWoKrn7Z50wZ6o6qe1ugt p14pLF28Qpx70k+8qr9eXTDRsm7+opwXqb7g8koqm0ZxIHfUnCi4Q9smFhSLlDMa ig+NEM1dgwNHVgnu1V3IQqdV9Xd6RoVQ4BYFMwm9zQKuUno7md+NCIil5bICnTeq zS3c+V8mEk57yCQKCbaqgc/CfEqX/u3UgBo6CYtZcC9T/RqdKVViaWTC9b6Dh+v1 WNe9q6M= -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:39 2025 by rpki-client