This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer (raw, json) Hash identifier: T7p9wqEsl/Yc+hyY/2uAFaqLiYwu0lfKVrvAP1TDmbA= Subject key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02824C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 31 Dec 2025 14:18:31 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 141436 IP: 103.159.83.0/24 IP: 103.174.20.0/24 IP: 2001:df7:3880::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164428 (0x2824c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 31 14:18:31 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a1:c3:69:c8:a9:1c:0c:f4:99:7c:0e:55:c3: 10:c9:36:56:d0:ae:4e:d2:18:9c:6b:3c:99:c7:9b: e2:db:78:9b:f0:66:77:55:e6:3d:b1:f2:80:25:0f: 29:b2:5b:d8:67:af:85:b7:4a:01:b0:71:0c:10:52: 9f:40:98:e5:b4:68:45:cc:1b:f1:2d:82:7c:ea:c9: a2:9c:01:1c:7c:cf:1a:62:90:ea:c7:b7:e8:47:44: 22:a1:16:ce:e8:fa:62:32:3e:91:76:33:a2:3a:09: ba:40:19:17:d3:17:e4:3a:59:17:b9:fd:69:7d:9c: 80:2b:dc:70:16:36:a9:8f:28:f3:82:24:f1:32:ca: 83:b8:f0:ff:51:a8:25:e0:d4:f1:80:7a:88:97:08: e3:f2:91:70:62:ea:fc:5e:7a:70:03:0d:57:19:60: ad:1f:a2:f5:76:89:fd:f2:6c:82:01:7b:6f:fc:21: 3d:b2:a6:6c:72:81:b9:0b:67:9c:58:5d:f7:b8:00: 79:f2:74:39:74:5b:70:c9:f4:17:c0:61:b8:2c:a7: 5e:ea:83:45:a0:71:4f:f9:bf:a2:a2:bd:c4:5f:f3: 1f:b2:44:7d:58:46:13:94:7b:23:d6:b6:15:38:c6: 5c:3f:73:9f:84:14:b8:9a:7c:25:6f:d9:98:a1:f2: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141436 sbgp-ipAddrBlock: critical IPv4: 103.159.83.0/24 103.174.20.0/24 IPv6: 2001:df7:3880::/48 Signature Algorithm: sha256WithRSAEncryption 1c:b1:e1:c7:ab:fa:d6:da:91:1e:d1:e6:99:19:e5:1a:55:11: 6e:52:68:4d:40:4b:17:53:63:0b:b4:78:5e:5c:18:d5:1e:5c: cb:54:18:08:42:88:75:89:ce:78:c0:ec:c4:c5:ed:f6:2f:b2: 4e:41:00:0a:fc:04:51:bb:cc:6a:48:d2:65:12:17:51:b1:d3: 16:da:12:9a:9e:70:ef:cf:32:fa:a8:c4:50:79:ce:02:60:82: 7b:0f:d0:65:a2:da:4e:7a:e6:1f:94:6a:51:4f:c5:f6:5e:be: 1c:80:68:d9:33:58:26:89:4f:c6:df:65:4c:db:a7:f9:05:a7: 5e:82:e4:fd:72:d8:24:5f:8d:db:68:15:6d:e8:5d:01:fd:c0: f5:2d:55:01:35:16:ef:26:1c:79:a2:d2:b6:22:60:c7:d2:9f: 9a:6f:18:fc:e4:fb:99:f2:e7:01:b7:63:ed:35:62:c2:51:12: dd:08:ce:d8:71:57:41:6e:d5:70:51:18:98:67:34:40:ea:db: f1:42:2f:c6:4f:28:3d:b5:c4:b2:18:93:f0:ec:30:14:89:99: 03:a0:01:f5:69:a0:21:56:df:0d:68:b4:2f:8b:38:d3:91:7d: b7:67:c5:09:b1:1c:66:30:d5:9e:d1:11:01:81:66:9e:75:b8: cf:c1:17:7a -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIDAoJMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMTE0MTgzMVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxRDgyRjQxMTAvBgNVBAUTKDRCRUFFQzMzN0M2RTg5RjI3OTRBOTc0 NEUxNkQ5MTlDOUM3OTNCMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxocNpyKkcDPSZfA5VwxDJNlbQrk7SGJxrPJnHm+LbeJvwZndV5j2x8oAlDymy W9hnr4W3SgGwcQwQUp9AmOW0aEXMG/EtgnzqyaKcARx8zxpikOrHt+hHRCKhFs7o +mIyPpF2M6I6CbpAGRfTF+Q6WRe5/Wl9nIAr3HAWNqmPKPOCJPEyyoO48P9RqCXg 1PGAeoiXCOPykXBi6vxeenADDVcZYK0fovV2if3ybIIBe2/8IT2ypmxygbkLZ5xY Xfe4AHnydDl0W3DJ9BfAYbgsp17qg0WgcU/5v6KivcRf8x+yRH1YRhOUeyPWthU4 xlw/c5+EFLiafCVv2Zih8pofAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUS+rsM3xu ifJ5SpdE4W2RnJx5Ox4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ4MkY0LzkzNkU1OUJFNTM3RDExRUJCMkJEN0I1M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEODJGNC85MzZFNTlCRTUzN0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4 dWlmSjVTcGRFNFcyUm5KeDVPeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAih8MDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ59TAwQAZ64U MA8EAgACMAkDBwAgAQ33OIAwDQYJKoZIhvcNAQELBQADggEBAByx4cer+tbakR7R 5pkZ5RpVEW5SaE1ASxdTYwu0eF5cGNUeXMtUGAhCiHWJznjA7MTF7fYvsk5BAAr8 BFG7zGpI0mUSF1Gx0xbaEpqecO/PMvqoxFB5zgJggnsP0GWi2k565h+UalFPxfZe vhyAaNkzWCaJT8bfZUzbp/kFp16C5P1y2CRfjdtoFW3oXQH9wPUtVQE1Fu8mHHmi 0rYiYMfSn5pvGPzk+5ny5wG3Y+01YsJREt0IzthxV0Fu1XBRGJhnNEDq2/FCL8ZP KD21xLIYk/DsMBSJmQOgAfVpoCFW3w1otC+LONORfbdnxQmxHGYw1Z7REQGBZp51 uM/BF3o= -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:37 2026 by rpki-client