This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer (raw, json) Hash identifier: 1t6ELi+WbiEK5EDC5sQXLddeQnhTrnsp8hd/Io+V4NI= Subject key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027410 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 08 Nov 2025 14:04:09 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 150175 IP: 103.205.36.0/23 IP: 2001:df1:2fc0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160784 (0x27410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 8 14:04:09 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:a8:b0:6d:6b:03:2c:1d:e4:05:73:c5:e8: 0e:d4:ea:ac:14:5e:69:3b:88:ff:2e:4a:5e:6f:68: 89:dd:20:64:5c:ba:46:db:43:3e:e9:1d:90:57:ab: 71:7d:7c:d6:94:f7:06:ec:83:63:1a:60:ea:d7:b6: a5:3b:fd:ca:66:5a:1f:9b:a3:66:b4:e8:28:d0:86: ca:a1:54:3f:2f:58:83:41:fd:7f:2b:c6:e2:db:18: eb:3e:54:2a:58:3a:f0:74:e8:2d:17:bd:bb:c7:17: e0:4a:5e:a0:bf:b5:73:83:cd:73:2d:db:90:b9:20: 75:45:0a:01:93:6a:e4:e4:f2:72:0a:37:dd:c3:06: fe:79:c6:42:86:49:f4:e4:00:dc:35:5e:52:37:d0: eb:c0:3a:1a:65:b2:44:39:13:6c:9d:34:17:ab:e5: a1:ff:53:a4:49:43:f0:59:1f:ec:e2:45:7d:f1:88: 82:8b:3d:f9:30:2d:cc:c2:67:41:21:e2:94:2f:21: 77:b8:3b:98:3f:f3:96:07:eb:f1:15:74:76:d2:31: 14:51:d8:db:7c:a0:c9:61:50:b1:db:ec:50:36:9c: 61:fa:a6:b4:e1:44:14:78:5f:58:ae:75:5c:0b:89: 86:2b:59:ad:a3:53:fd:78:a5:e5:f2:05:f2:fe:2c: fc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 150175 sbgp-ipAddrBlock: critical IPv4: 103.205.36.0/23 IPv6: 2001:df1:2fc0::/48 Signature Algorithm: sha256WithRSAEncryption b0:aa:f3:fe:cd:1b:38:df:1e:8e:bd:d5:34:03:6e:bb:72:b4: 95:d4:b0:7e:fb:53:64:f0:17:5c:42:13:f4:83:dd:1a:45:7d: 8d:a6:ca:31:71:08:12:73:73:98:c9:5a:d9:36:c0:18:37:3c: 42:03:64:f4:ef:23:4c:a9:22:95:26:05:55:94:c1:ff:99:94: 99:37:14:59:91:c8:6a:b9:39:1c:91:27:03:ba:99:fd:4d:99: 60:ce:aa:60:f2:2c:db:0d:ca:f1:19:5b:e4:c5:df:04:14:4a: a5:23:e4:77:45:2f:6f:86:0d:a4:8f:7c:66:3a:5f:ea:1c:ba: a1:21:e4:3f:2c:96:3a:b9:42:97:51:c6:7f:fe:57:3d:8a:91: 07:4f:84:34:a4:76:72:f5:9b:6f:fb:c4:37:5b:7f:bc:34:04: 86:ca:47:c0:50:86:ff:16:ca:92:fe:9f:18:05:aa:07:b7:22: 29:74:0e:7c:14:82:64:22:23:19:5c:5a:ea:57:3b:07:f7:be: 5f:e4:70:2a:e6:b1:b1:22:03:21:41:44:42:44:fc:68:ae:29: a3:b9:89:14:e4:7b:76:85:31:20:0f:c5:04:7f:31:ed:18:e9: 96:00:d4:c9:5e:bb:56:cc:41:09:5b:6c:49:36:ef:e4:a7:b1: 23:5d:a7:9a -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnQQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwODE0MDQwOVoXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkRCRDAxMTAvBgNVBAUTKDRFNjY3NkIyQkZDM0RFQTZDRUExNTM1 NTAzN0EyMzM0OTk5QjNDMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUfKiwbWsDLB3kBXPF6A7U6qwUXmk7iP8uSl5vaIndIGRcukbbQz7pHZBXq3F9 fNaU9wbsg2MaYOrXtqU7/cpmWh+bo2a06CjQhsqhVD8vWINB/X8rxuLbGOs+VCpY OvB06C0XvbvHF+BKXqC/tXODzXMt25C5IHVFCgGTauTk8nIKN93DBv55xkKGSfTk ANw1XlI30OvAOhplskQ5E2ydNBer5aH/U6RJQ/BZH+ziRX3xiIKLPfkwLczCZ0Eh 4pQvIXe4O5g/85YH6/EVdHbSMRRR2Nt8oMlhULHb7FA2nGH6prThRBR4X1iudVwL iYYrWa2jU/14peXyBfL+LPwFAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUTmZ2sr/D 3qbOoVNVA3ojNJmbPDQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJEQkQwLzZGNTAxNzU2MjUwQTExRURCNTM5OTk3OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCREJEMC82RjUwMTc1NjI1MEExMUVEQjUzOTk5NzlDNEY5QUUwMi9UbVoyc3Jf RDNxYk9vVk5WQTNvak5KbWJQRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkqfMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ80kMA8EAgAC MAkDBwAgAQ3xL8AwDQYJKoZIhvcNAQELBQADggEBALCq8/7NGzjfHo691TQDbrty tJXUsH77U2TwF1xCE/SD3RpFfY2myjFxCBJzc5jJWtk2wBg3PEIDZPTvI0ypIpUm BVWUwf+ZlJk3FFmRyGq5ORyRJwO6mf1NmWDOqmDyLNsNyvEZW+TF3wQUSqUj5HdF L2+GDaSPfGY6X+ocuqEh5D8sljq5QpdRxn/+Vz2KkQdPhDSkdnL1m2/7xDdbf7w0 BIbKR8BQhv8WypL+nxgFqge3Iil0DnwUgmQiIxlcWupXOwf3vl/kcCrmsbEiAyFB REJE/GiuKaO5iRTke3aFMSAPxQR/Me0Y6ZYA1Mleu1bMQQlbbEk27+SnsSNdp5o= -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:19 2025 by rpki-client