This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLu-zETJHgkDBfMc5g-37DrJU-c.cer File: RLu-zETJHgkDBfMc5g-37DrJU-c.cer (raw, json) Hash identifier: pr5qssqmgdf0YleHlRBbowOplDIcm6Dp1DfVROnzvRI= Subject key identifier: 44:BB:BE:CC:44:C9:1E:09:03:05:F3:1C:E6:0F:B7:EC:3A:C9:53:E7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027910 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft caRepository: rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 28 Nov 2025 16:15:41 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 135380 IP: 103.71.220.0/23 IP: 2001:df3:fc0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162064 (0x27910) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 28 16:15:41 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9177D93, serialNumber=44BBBECC44C91E090305F31CE60FB7EC3AC953E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c4:4e:4b:a5:fe:6b:78:da:2f:65:65:d1:05: c9:c7:ce:f4:eb:b5:fa:37:46:93:30:4d:c2:af:21: 59:8e:75:77:a9:6d:32:3d:be:4a:77:9a:da:d3:2a: 5f:6c:ec:d4:39:34:63:19:1d:4c:44:0e:db:1a:71: 31:54:04:60:2a:91:40:ef:aa:65:cc:60:71:43:a5: 10:69:64:1b:d3:63:4c:12:55:0a:ff:2c:55:f9:e4: 93:44:43:4e:4e:12:34:fd:d9:ac:bb:0c:ee:c4:80: b0:0a:14:6e:92:27:77:e6:3e:d7:16:f3:62:7d:7a: 87:8f:de:f1:94:1c:d5:76:79:11:8f:02:87:9b:ef: c9:81:6e:b9:24:02:2e:31:65:4e:49:be:73:0b:8c: a9:8a:a8:5c:dc:77:55:ff:03:90:1f:8a:ae:13:73: 39:23:76:c0:f5:90:eb:fe:8b:82:6f:27:22:e1:09: 23:c9:ef:ff:2e:78:0b:24:2a:f5:ee:db:e9:96:99: 7d:73:b6:eb:c1:c4:0e:85:ee:81:3a:9b:b0:55:e9: 0c:bb:06:62:39:44:71:82:2f:95:9d:d3:2d:ad:e3: f5:c7:ae:3b:b3:57:a1:f7:7f:71:ab:b0:f5:28:b3: ca:2c:87:37:17:39:c4:d2:bf:d0:b4:12:26:ec:c9: cf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BB:BE:CC:44:C9:1E:09:03:05:F3:1C:E6:0F:B7:EC:3A:C9:53:E7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9177D93/769323A4730C11EEA58CE372C4F9AE02/RLu-zETJHgkDBfMc5g-37DrJU-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135380 sbgp-ipAddrBlock: critical IPv4: 103.71.220.0/23 IPv6: 2001:df3:fc0::/48 Signature Algorithm: sha256WithRSAEncryption 66:bd:94:d1:b3:e5:b9:c0:de:2e:96:0c:68:56:58:2e:65:f0: da:5f:5b:5f:ce:fc:1f:13:79:27:a2:01:2e:9e:aa:c1:49:40: 2c:70:b9:29:2d:15:7f:70:a2:56:4f:a3:66:eb:38:dc:b2:d6: 54:27:81:89:7b:e1:bf:1a:4e:5c:56:c5:66:b0:36:ef:03:f0: e4:81:c3:03:91:8f:47:0a:51:3f:c1:16:bf:86:fe:76:5f:d2: 6c:47:17:2a:e2:bb:03:d8:5d:6d:45:7d:14:db:63:d1:a8:6d: c3:3b:55:3e:61:d7:40:9d:d9:3a:bf:3f:19:cc:65:39:39:3a: aa:8b:15:cd:e4:57:a6:4e:5d:7e:52:54:f4:31:f2:39:66:58: d1:19:de:33:94:e5:05:f0:79:1f:c1:d0:24:3b:d2:13:d9:8d: 55:b1:30:30:53:c7:9a:c2:82:c7:61:74:c2:8a:be:ae:c5:59: bc:1f:fa:a2:73:d4:70:7e:25:9b:46:d7:d6:d7:c3:c9:02:f8: d9:bb:6a:6d:9a:aa:49:bf:d1:79:90:81:a7:74:53:49:e7:50: eb:91:76:af:ca:66:89:42:71:3f:4f:56:a6:dc:cc:47:19:34: 27:87:7e:b2:17:5d:c2:fe:c4:54:6f:b9:01:3d:d0:fb:af:c7: 5a:fc:88:d9 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnkQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyODE2MTU0MVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNzdEOTMxMTAvBgNVBAUTKDQ0QkJCRUNDNDRDOTFFMDkwMzA1RjMx Q0U2MEZCN0VDM0FDOTUzRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClxE5Lpf5reNovZWXRBcnHzvTrtfo3RpMwTcKvIVmOdXepbTI9vkp3mtrTKl9s 7NQ5NGMZHUxEDtsacTFUBGAqkUDvqmXMYHFDpRBpZBvTY0wSVQr/LFX55JNEQ05O EjT92ay7DO7EgLAKFG6SJ3fmPtcW82J9eoeP3vGUHNV2eRGPAoeb78mBbrkkAi4x ZU5JvnMLjKmKqFzcd1X/A5Afiq4TczkjdsD1kOv+i4JvJyLhCSPJ7/8ueAskKvXu 2+mWmX1ztuvBxA6F7oE6m7BV6Qy7BmI5RHGCL5Wd0y2t4/XHrjuzV6H3f3GrsPUo s8oshzcXOcTSv9C0Eibsyc/jAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQURLu+zETJ HgkDBfMc5g+37DrJU+cwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTc3RDkzLzc2OTMyM0E0NzMwQzExRUVBNThDRTM3MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3N0Q5My83NjkzMjNBNDczMEMxMUVFQTU4Q0UzNzJDNEY5QUUwMi9STHUtekVU Skhna0RCZk1jNWctMzdEckpVLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhDUMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ0fcMA8EAgAC MAkDBwAgAQ3zD8AwDQYJKoZIhvcNAQELBQADggEBAGa9lNGz5bnA3i6WDGhWWC5l 8NpfW1/O/B8TeSeiAS6eqsFJQCxwuSktFX9wolZPo2brONyy1lQngYl74b8aTlxW xWawNu8D8OSBwwORj0cKUT/BFr+G/nZf0mxHFyriuwPYXW1FfRTbY9GobcM7VT5h 10Cd2Tq/PxnMZTk5OqqLFc3kV6ZOXX5SVPQx8jlmWNEZ3jOU5QXweR/B0CQ70hPZ jVWxMDBTx5rCgsdhdMKKvq7FWbwf+qJz1HB+JZtG19bXw8kC+Nm7am2aqkm/0XmQ gad0U0nnUOuRdq/KZolCcT9PVqbczEcZNCeHfrIXXcL+xFRvuQE90Puvx1r8iNk= -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:28 2025 by rpki-client