This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer File: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer (raw, json) Hash identifier: 0VewCDhX2PKYsIHOHwXR/DZCPuk+rVgWvIwCAzSCbQg= Subject key identifier: 40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0273A3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 06 Nov 2025 17:03:31 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 133737 IP: 103.39.136.0/23 IP: 203.7.228.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160675 (0x273a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 6 17:03:31 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91BB492, serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:af:f6:c8:a1:a2:4e:50:a3:d7:a2:30:92: ae:d6:b0:69:39:d3:41:ea:9d:f2:11:a4:22:28:ab: 8a:33:2d:35:3d:b5:93:35:55:e3:8d:da:8f:0b:fe: 74:84:2f:5f:d0:d0:81:fa:de:da:f5:d4:38:4b:ab: ef:43:df:59:44:bf:f8:46:e2:ec:92:ed:ad:34:22: 95:2a:2c:18:1b:5a:e1:87:e0:2a:39:b5:09:db:43: 1d:e1:e4:53:64:62:10:13:49:46:35:6f:d2:a6:c3: cf:da:09:d5:25:e9:b0:c4:70:ac:ad:cf:c4:29:af: bf:94:9f:44:e1:47:01:38:9d:c5:ea:06:41:61:c5: e6:1b:e7:3c:f1:07:fc:f2:ec:ff:38:a4:33:57:dd: 91:b6:0c:4d:7b:f0:e6:28:9e:c9:98:8a:6d:cc:be: 4a:b0:e3:88:78:3c:ef:8c:52:b4:6a:a5:48:0d:62: bf:99:30:9e:bd:72:05:23:3f:bb:df:2d:7a:ad:35: cf:47:08:2b:c8:50:e1:a3:d7:ce:e4:70:9d:56:07: cc:60:c8:43:11:39:88:ef:fc:ca:81:a8:fa:fe:0a: 05:10:8d:90:c3:f7:49:22:c5:6c:9f:d2:16:ce:ae: f7:df:01:c5:30:87:c9:d3:9e:e1:70:3e:9d:ca:ea: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133737 sbgp-ipAddrBlock: critical IPv4: 103.39.136.0/23 203.7.228.0/22 Signature Algorithm: sha256WithRSAEncryption 70:29:65:ed:39:60:4d:96:25:63:e3:cc:53:c8:40:f6:23:7f: cb:f2:b0:56:55:8c:a5:7e:62:4b:c5:a6:79:ee:a4:4f:e1:df: e9:a1:fa:c2:d7:96:bc:14:47:d6:ca:dc:ff:a8:77:48:61:0c: 8f:07:df:05:c1:bc:63:b8:83:b7:40:6f:bf:bc:06:2c:0e:41: b4:44:b8:71:79:e0:30:aa:86:0c:cf:02:55:a5:d2:7d:10:cd: 3d:b8:09:51:47:75:7b:3c:60:5d:7e:2a:eb:71:97:52:49:b1: f7:cd:6f:93:a5:96:c8:45:cf:d4:fc:63:49:8e:af:c5:a9:24: d0:70:36:27:87:c5:a9:2e:2e:84:0e:94:a0:fb:0a:95:13:f6: fd:fa:10:be:1e:31:09:29:d1:7d:3a:ea:06:77:8d:f3:cd:3c: fb:f8:79:b9:b3:7f:c6:35:91:f4:ec:30:ba:ee:52:7e:72:29: af:db:f6:e4:bd:c3:a7:23:42:48:a4:f4:ab:8a:e2:4a:10:ee: c2:20:7f:a5:43:99:a8:3e:ee:d0:d5:4d:ee:56:b9:65:ed:17: bf:51:45:64:34:1d:73:98:e9:d8:bd:59:5b:f2:f2:6b:5e:81: 6d:b0:33:c4:60:4e:09:3a:95:fb:95:14:08:c4:c1:09:73:5a: ec:d8:db:53 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAnOjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNjE3MDMzMVoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkI0OTIxMTAvBgNVBAUTKDQwRTRCRDM2QUUxNTA3N0ZFNTk5ODVE MTM3MEQ1RDY0NjcwQTg4RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEB6/2yKGiTlCj16Iwkq7WsGk500HqnfIRpCIoq4ozLTU9tZM1VeON2o8L/nSE L1/Q0IH63tr11DhLq+9D31lEv/hG4uyS7a00IpUqLBgbWuGH4Co5tQnbQx3h5FNk YhATSUY1b9Kmw8/aCdUl6bDEcKytz8Qpr7+Un0ThRwE4ncXqBkFhxeYb5zzxB/zy 7P84pDNX3ZG2DE178OYonsmYim3Mvkqw44h4PO+MUrRqpUgNYr+ZMJ69cgUjP7vf LXqtNc9HCCvIUOGj187kcJ1WB8xgyEMROYjv/MqBqPr+CgUQjZDD90kixWyf0hbO rvffAcUwh8nTnuFwPp3K6pF5AgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUQOS9Nq4V B3/lmYXRNw1dZGcKiNkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJCNDkyLzJDMEIzMkQ4MDkzNjExRjBBMjg0MkQ1N0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCQjQ5Mi8yQzBCMzJEODA5MzYxMUYwQTI4NDJENTdDNEY5QUUwMi9RT1M5TnE0 VkIzX2xtWVhSTncxZFpHY0tpTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgppMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBZyeIAwQCywfk MA0GCSqGSIb3DQEBCwUAA4IBAQBwKWXtOWBNliVj48xTyED2I3/L8rBWVYylfmJL xaZ57qRP4d/pofrC15a8FEfWytz/qHdIYQyPB98FwbxjuIO3QG+/vAYsDkG0RLhx eeAwqoYMzwJVpdJ9EM09uAlRR3V7PGBdfirrcZdSSbH3zW+TpZbIRc/U/GNJjq/F qSTQcDYnh8WpLi6EDpSg+wqVE/b9+hC+HjEJKdF9OuoGd43zzTz7+Hm5s3/GNZH0 7DC67lJ+cimv2/bkvcOnI0JIpPSriuJKEO7CIH+lQ5moPu7Q1U3uVrll7Re/UUVk NB1zmOnYvVlb8vJrXoFtsDPEYE4JOpX7lRQIxMEJc1rs2NtT -----END CERTIFICATE-----Generated at Sat Dec 6 23:54:37 2025 by rpki-client