This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer (raw, json) Hash identifier: +xDCe9L5JMbOWHXaTToE00byoFVQCDUsyof0wct/sEk= Subject key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A82 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 08:11:53 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 141456 IP: 103.160.8.0/24 IP: 103.160.20.0/24 IP: 2001:df1:3a40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162434 (0x27a82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 08:11:53 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:3b:85:df:b5:cf:8a:87:8f:f4:19:e0:fc: 6f:90:38:b2:70:db:84:ca:6b:83:fa:2f:08:fc:eb: 13:cb:2b:b4:d7:4b:f2:9d:6e:b8:e2:34:b4:ab:56: 19:2b:d7:60:86:65:3b:8c:07:ae:99:e3:9f:35:b3: 09:b2:91:7c:6d:49:ca:7f:13:50:df:25:a7:38:95: 46:7e:5a:b3:c2:b1:b0:fe:c3:7d:0f:b8:c7:67:1c: ca:bf:98:44:ef:20:ba:52:bb:11:52:a2:10:f3:6f: 65:3f:83:24:81:e1:0f:0f:88:55:c4:d7:cf:22:94: e8:c8:b6:c9:97:3f:a5:e3:23:9b:44:63:c5:b8:02: 13:18:ce:06:da:15:e8:ce:16:34:bf:e9:11:62:22: dd:7e:db:65:90:33:d4:f0:7a:2e:f6:72:db:59:33: d4:57:94:90:9c:74:72:f7:4e:20:ce:11:ce:20:4c: bd:7d:ad:11:f1:7b:c6:9c:97:31:2d:79:2f:a4:0b: 97:c4:e2:7f:da:b4:43:3a:41:1c:c3:ba:88:ff:93: 49:f2:ac:e0:13:10:84:86:ac:78:33:92:29:41:0f: bd:d1:62:bd:4d:a0:66:86:47:f5:44:e4:78:02:0a: d7:4c:ce:70:2d:cf:d4:fa:c0:5e:0f:fd:76:db:70: 06:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141456 sbgp-ipAddrBlock: critical IPv4: 103.160.8.0/24 103.160.20.0/24 IPv6: 2001:df1:3a40::/48 Signature Algorithm: sha256WithRSAEncryption 41:e2:8c:85:52:50:76:2d:91:f6:fe:09:6d:45:2c:87:86:1e: 7d:26:ae:1b:0b:0b:a3:a2:8e:68:ba:c6:db:21:dd:d2:6e:d2: df:45:6b:63:05:86:e2:77:43:4c:15:57:36:49:52:21:69:cb: e2:06:61:05:78:99:ab:12:29:b8:5a:20:eb:57:3b:a1:e3:55: a1:3b:e3:e1:24:e1:bf:be:12:36:eb:50:cd:ad:ff:3d:55:94: ec:7e:fc:be:b4:8f:19:e8:01:f2:9e:ed:18:0d:c4:a4:e7:ef: d8:b0:78:19:74:84:ac:aa:f6:32:b5:5d:2c:65:63:f6:b7:42: f2:84:93:c1:b0:c1:b3:03:8b:9c:6c:e5:56:46:77:f4:20:bb: a0:93:24:c4:a9:c4:38:d6:32:67:65:73:24:49:c5:f8:7a:2d: 34:39:94:3c:bf:82:b8:b5:5a:3a:59:c9:af:d2:6a:37:2e:2c: ae:dd:02:0b:22:5f:7c:47:31:f4:c5:d2:fd:b0:70:d9:6c:05: 24:0d:1f:1f:51:9c:0d:06:60:dd:e8:94:2d:79:d6:71:22:41: 88:47:fe:4d:3c:98:05:11:21:3a:c2:ec:00:b5:6d:45:18:6e: 9c:bf:48:6f:70:d9:7c:5e:37:05:43:4c:53:9c:e1:63:1c:1d: ed:e5:61:58 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIDAnqCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjA4MTE1M1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTA0MzUxMTAvBgNVBAUTKDQyOTExQjEwOUQ0NkU4ODY2MUZBODU2 MTZDODEyODAzQzVBQjNDNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkdDuF37XPioeP9Bng/G+QOLJw24TKa4P6Lwj86xPLK7TXS/KdbrjiNLSrVhkr 12CGZTuMB66Z4581swmykXxtScp/E1DfJac4lUZ+WrPCsbD+w30PuMdnHMq/mETv ILpSuxFSohDzb2U/gySB4Q8PiFXE188ilOjItsmXP6XjI5tEY8W4AhMYzgbaFejO FjS/6RFiIt1+22WQM9Twei72cttZM9RXlJCcdHL3TiDOEc4gTL19rRHxe8aclzEt eS+kC5fE4n/atEM6QRzDuoj/k0nyrOATEISGrHgzkilBD73RYr1NoGaGR/VE5HgC CtdMznAtz9T6wF4P/XbbcAafAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUQpEbEJ1G 6IZh+oVhbIEoA8WrPGQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUwNDM1L0QyODg1QkM0NDQ1RDExRUJBNTE3NDU3RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMDQzNS9EMjg4NUJDNDQ0NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUox RzZJWmgtb1ZoYklFb0E4V3JQR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiiQMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ6AIAwQAZ6AU MA8EAgACMAkDBwAgAQ3xOkAwDQYJKoZIhvcNAQELBQADggEBAEHijIVSUHYtkfb+ CW1FLIeGHn0mrhsLC6Oijmi6xtsh3dJu0t9Fa2MFhuJ3Q0wVVzZJUiFpy+IGYQV4 masSKbhaIOtXO6HjVaE74+Ek4b++EjbrUM2t/z1VlOx+/L60jxnoAfKe7RgNxKTn 79iweBl0hKyq9jK1XSxlY/a3QvKEk8GwwbMDi5xs5VZGd/Qgu6CTJMSpxDjWMmdl cyRJxfh6LTQ5lDy/gri1WjpZya/SajcuLK7dAgsiX3xHMfTF0v2wcNlsBSQNHx9R nA0GYN3olC151nEiQYhH/k08mAURITrC7AC1bUUYbpy/SG9w2XxeNwVDTFOc4WMc He3lYVg= -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:09 2025 by rpki-client