This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer File: S_PofKK5q1lZdiDQT8BUEY1-09k.cer (raw, json) Hash identifier: K1KGfEVlfLIZJdFgdbgVYGz6Uw5In//qzDYULKavTX4= Subject key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0277FD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft caRepository: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 18:52:12 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 133769 IP: 43.250.188.0/22 IP: 103.42.36.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161789 (0x277fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 18:52:12 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:13:10:dc:82:f9:e8:82:a7:6a:d7:11:87: 73:8e:f7:8b:3a:89:c9:29:74:06:33:0b:7d:9f:83: 37:87:ca:ec:c6:a7:75:5f:bd:0b:ed:ad:ce:2f:4a: 53:10:34:84:b8:e7:fe:a2:f8:3d:85:91:ff:08:e4: 4d:d6:84:69:a7:4f:47:15:ef:44:13:27:c2:f9:d3: c2:6b:59:37:66:b4:20:b9:08:34:e6:2a:d8:35:95: d1:f6:c5:f4:54:78:09:c4:53:5c:05:c1:52:23:9f: 20:03:f7:cb:93:15:13:b3:b0:c2:54:6e:5f:e9:48: 75:5c:93:d5:ad:4d:66:14:99:09:57:44:6d:2a:f0: 53:2f:fd:c4:3b:9c:a1:fc:01:da:23:91:2a:7c:80: b0:1e:44:36:ea:a3:2a:11:59:06:2c:ad:02:fb:22: 1b:c1:83:58:a7:e2:68:cf:78:70:0c:da:93:5e:c8: 88:a3:34:22:90:05:ab:ee:33:e6:65:ff:4a:e8:0f: ef:5c:46:29:a3:2f:9b:b2:ae:03:57:95:be:0d:59: 82:6f:d0:89:20:4d:75:6d:cc:7c:c0:8f:65:2a:2a: ff:3e:0b:b5:4b:27:a3:33:9f:68:e9:8b:d3:1a:1d: f9:95:05:cf:28:06:3b:e2:df:ba:c0:6a:ee:2a:3e: 99:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133769 sbgp-ipAddrBlock: critical IPv4: 43.250.188.0/22 103.42.36.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:0e:25:52:9b:7d:3e:71:2d:22:7a:81:be:7c:cd:4e:af:d9: 28:f7:75:d3:eb:3d:0d:d0:ac:03:a0:80:55:a0:10:28:c4:65: f4:30:c2:1a:cf:88:39:8e:fb:3e:cc:b1:b3:09:9b:8b:c6:1e: 65:a8:2f:ed:40:be:7d:66:b6:b3:b6:f0:0b:26:86:8d:54:5d: b9:c5:d5:b5:f1:a4:38:4e:2d:a6:89:23:57:59:a0:ab:6c:29: cd:15:76:e5:21:af:2a:75:5f:b1:92:fc:7f:2b:f8:88:da:49: 93:03:f1:f3:49:b0:46:f4:58:5d:c2:0f:65:e7:5b:74:0b:79: 16:ed:90:c3:06:da:63:10:f1:c6:dc:c4:76:a2:23:b2:53:a5: be:0c:04:9c:09:e0:4c:46:a3:db:22:ba:63:d2:e5:7f:48:92: 08:87:d2:e8:90:58:92:fa:4d:d4:56:98:4a:00:a2:b9:39:6a: fa:1a:73:26:24:ef:41:3d:0d:a6:26:30:29:8f:78:6d:a9:fa: 8d:f6:61:99:38:33:89:3d:1e:2d:1f:10:52:cf:bb:b2:b1:29: e4:49:cc:5f:30:3e:83:ed:c0:57:42:a7:fe:21:54:08:34:4f: 3b:82:b5:40:db:35:8a:27:3f:37:6e:c9:09:2e:dc:4b:0c:57: 1b:3f:85:bc -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAnf9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTE4NTIxMloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBE MDRGQzA1NDExOEQ3RUQzRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3kxMQ3IL56IKnatcRh3OO94s6ickpdAYzC32fgzeHyuzGp3VfvQvtrc4vSlMQ NIS45/6i+D2Fkf8I5E3WhGmnT0cV70QTJ8L508JrWTdmtCC5CDTmKtg1ldH2xfRU eAnEU1wFwVIjnyAD98uTFROzsMJUbl/pSHVck9WtTWYUmQlXRG0q8FMv/cQ7nKH8 AdojkSp8gLAeRDbqoyoRWQYsrQL7IhvBg1in4mjPeHAM2pNeyIijNCKQBavuM+Zl /0roD+9cRimjL5uyrgNXlb4NWYJv0IkgTXVtzHzAj2UqKv8+C7VLJ6Mzn2jpi9Ma HfmVBc8oBjvi37rAau4qPpldAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUS/PofKK5 q1lZdiDQT8BUEY1+09kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTkxQjcxL0I4NDlCQTEyQzYwNDExRUNCOTA2OTE1Q0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5MUI3MS9CODQ5QkExMkM2MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktL NXExbFpkaURRVDhCVUVZMS0wOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgqJMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCK/q8AwQCZyok MA0GCSqGSIb3DQEBCwUAA4IBAQBLDiVSm30+cS0ieoG+fM1Or9ko93XT6z0N0KwD oIBVoBAoxGX0MMIaz4g5jvs+zLGzCZuLxh5lqC/tQL59ZraztvALJoaNVF25xdW1 8aQ4Ti2miSNXWaCrbCnNFXblIa8qdV+xkvx/K/iI2kmTA/HzSbBG9Fhdwg9l51t0 C3kW7ZDDBtpjEPHG3MR2oiOyU6W+DAScCeBMRqPbIrpj0uV/SJIIh9LokFiS+k3U VphKAKK5OWr6GnMmJO9BPQ2mJjApj3htqfqN9mGZODOJPR4tHxBSz7uysSnkScxf MD6D7cBXQqf+IVQINE87grVA2zWKJz83bskJLtxLDFcbP4W8 -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:04 2025 by rpki-client