This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer File: PnOyvhMDe-dEOR06iZzdICuC920.cer (raw, json) Hash identifier: Tmu2j5lnY43aDAgSej79kmpNqLT7WX9VmARsKkww0J0= Subject key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0279C2 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 30 Nov 2025 22:31:04 +0000 Certificate not after: Mon 30 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 147179 IP: 103.174.44.0/23 IP: 2407:fa40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162242 (0x279c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 30 22:31:04 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:3a:c6:51:03:21:a0:ff:2a:7e:70:c6:fa: 02:b1:3f:97:94:50:c0:ed:7f:3e:cc:f6:c5:23:43: 37:a4:52:1b:ea:aa:bc:9c:0d:cb:d5:5a:7d:37:98: df:6f:bc:67:bd:bc:7c:b0:71:ac:50:42:f6:2c:61: dd:fc:f2:8e:14:b8:4c:f1:3c:08:a6:5a:c4:ee:da: 64:19:41:dc:58:5a:f6:63:d4:63:23:38:ba:0f:f3: d6:c7:cb:2f:ee:0f:9c:3a:8c:fe:df:cf:75:7e:93: 7d:f7:8d:38:ca:8f:27:a3:0b:ea:12:2c:51:ba:c4: e9:6f:e3:f9:27:f8:b9:ba:f3:4f:03:34:9c:2e:39: de:04:64:b0:c1:c3:28:38:85:e6:68:78:23:be:b9: 19:8d:86:f2:3a:61:5f:19:8f:10:35:fb:47:fc:62: 7c:fc:14:9c:fe:7c:6a:8d:51:22:e8:9a:79:1b:e1: 97:af:a6:55:55:3a:7d:94:2f:fb:3d:ae:69:b7:9b: 0c:e5:39:fd:db:25:9b:0d:92:ba:37:5b:70:1a:51: 86:a9:25:87:44:13:3a:4c:ce:a9:fc:8c:07:58:ab: 83:d7:73:30:5c:3d:12:12:20:7e:ca:29:95:b1:59: 23:cc:0c:c3:fb:a4:13:64:c6:50:7d:96:06:9d:64: 2f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 147179 sbgp-ipAddrBlock: critical IPv4: 103.174.44.0/23 IPv6: 2407:fa40::/32 Signature Algorithm: sha256WithRSAEncryption 62:7c:42:52:8e:6b:c1:20:43:ec:5c:b4:b1:24:cb:4e:63:4a: 07:fa:3a:e1:81:27:a3:3a:16:94:16:9d:73:c3:90:27:ec:3f: 50:0e:51:4b:92:28:d7:af:d5:d1:09:b3:4b:7d:84:d3:64:ef: 38:76:c1:63:bf:25:8b:d0:20:68:11:98:44:70:5c:e1:69:88: 2a:95:80:50:6c:c1:93:23:2b:b7:44:ab:21:56:9a:66:b6:50: 59:20:66:90:ae:3a:68:18:af:2b:3b:5d:98:49:09:50:be:ca: 76:92:d7:f0:2c:2a:5e:1d:f0:6b:1a:f5:fd:b3:89:14:aa:bb: fc:ba:b0:c8:c3:14:ad:0d:0f:28:61:ca:89:ea:c1:08:c6:8a: ca:b1:ff:b7:00:9e:28:f3:3d:a4:6f:26:d5:24:74:06:a2:70: e6:55:de:3c:29:ea:1c:2d:66:2a:63:f6:a7:dc:75:79:ef:d5: fc:93:e7:4a:64:89:81:ea:f3:f6:ce:d2:fb:fa:6b:0d:13:cb: 56:53:c5:ec:c0:be:eb:f6:c6:78:81:d2:7d:bd:54:73:ba:2c: 53:5f:6a:73:29:93:01:1c:9c:18:13:f6:1c:9a:96:11:d3:8f: ab:5c:32:c0:87:63:98:99:15:70:8b:dc:e1:fa:b1:e5:55:e3: 92:a0:74:53 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnnCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEzMDIyMzEwNFoXDTI2MDMzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQz QTg5OUNERDIwMkI4MkY3NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7mzrGUQMhoP8qfnDG+gKxP5eUUMDtfz7M9sUjQzekUhvqqrycDcvVWn03mN9v vGe9vHywcaxQQvYsYd388o4UuEzxPAimWsTu2mQZQdxYWvZj1GMjOLoP89bHyy/u D5w6jP7fz3V+k333jTjKjyejC+oSLFG6xOlv4/kn+Lm6808DNJwuOd4EZLDBwyg4 heZoeCO+uRmNhvI6YV8ZjxA1+0f8Ynz8FJz+fGqNUSLomnkb4ZevplVVOn2UL/s9 rmm3mwzlOf3bJZsNkro3W3AaUYapJYdEEzpMzqn8jAdYq4PXczBcPRISIH7KKZWx WSPMDMP7pBNkxlB9lgadZC9DAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUPnOyvhMD e+dEOR06iZzdICuC920wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU1RDBDLzg5MUI0RUNBMzIzNjExRUM4OTgzODc1NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFNUQwQy84OTFCNEVDQTMyMzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhN RGUtZEVPUjA2aVp6ZElDdUM5MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAj7rMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ64sMA0EAgAC MAcDBQAkB/pAMA0GCSqGSIb3DQEBCwUAA4IBAQBifEJSjmvBIEPsXLSxJMtOY0oH +jrhgSejOhaUFp1zw5An7D9QDlFLkijXr9XRCbNLfYTTZO84dsFjvyWL0CBoEZhE cFzhaYgqlYBQbMGTIyu3RKshVppmtlBZIGaQrjpoGK8rO12YSQlQvsp2ktfwLCpe HfBrGvX9s4kUqrv8urDIwxStDQ8oYcqJ6sEIxorKsf+3AJ4o8z2kbybVJHQGonDm Vd48KeocLWYqY/an3HV579X8k+dKZImB6vP2ztL7+msNE8tWU8XswL7r9sZ4gdJ9 vVRzuixTX2pzKZMBHJwYE/YcmpYR04+rXDLAh2OYmRVwi9zh+rHlVeOSoHRT -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:30 2025 by rpki-client