This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer File: We3oFpsKLDIUaf8RsWKL3gwfLEE.cer (raw, json) Hash identifier: kACKXqkHxZY6bVo7a5tf0Pcljw8Wq5Lma5C9t5qimT4= Subject key identifier: 59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027795 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 24 Nov 2025 19:50:10 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 141385 IP: 103.158.2.0/23 IP: 2001:df2:efc0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161685 (0x27795) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 24 19:50:10 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91DEFAF, serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:12:39:3b:94:2d:42:5b:29:22:32:65:60: b0:0f:f2:6f:9c:18:53:5f:a2:1d:14:51:b9:1b:d2: ad:10:c5:58:3e:3c:f5:7e:f0:c5:38:ba:00:fd:29: f0:59:47:9d:de:d9:39:47:f8:08:44:b0:21:26:a9: 1b:92:b9:10:e6:6c:47:49:89:78:25:6e:a8:ee:47: 54:f2:94:e6:0a:ae:cc:2c:35:96:87:b2:a9:38:2a: 02:ef:17:19:5a:19:eb:4e:c5:f6:bf:87:e2:df:ca: cd:37:5c:13:00:3c:eb:b7:f5:c0:4e:4c:33:ab:6c: 39:c1:85:60:a9:ec:bd:d2:fa:5e:d2:38:6a:be:ea: 11:fc:3e:00:82:6b:4e:6f:be:3f:dd:14:af:e0:6b: 7c:b2:7d:dd:28:c9:e0:d7:9d:f4:31:02:c5:40:18: 4e:1c:bb:13:1e:81:2a:7f:d1:53:3a:1c:b1:c7:f6: 23:8c:80:7d:ad:70:af:c1:20:8a:4f:46:e6:4c:74: 74:b4:8f:6c:1d:8e:51:d4:2f:11:79:47:1a:1b:a2: 1b:88:7a:76:e1:e5:5b:5d:a1:57:74:16:e4:03:27: dd:ff:54:de:b3:73:8e:32:a7:54:d9:67:a2:b0:58: 7d:97:4e:e7:4f:cf:d9:92:5d:da:34:9a:69:e7:cb: 51:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141385 sbgp-ipAddrBlock: critical IPv4: 103.158.2.0/23 IPv6: 2001:df2:efc0::/48 Signature Algorithm: sha256WithRSAEncryption 03:7d:34:74:55:5f:59:97:1d:28:28:50:d2:e7:1c:6a:5c:8a: db:d1:6d:71:92:74:3e:45:5e:df:8b:51:0b:70:d1:00:77:2e: 80:8b:59:fd:3e:ec:f3:5f:d5:d0:b7:b9:25:79:10:85:a9:ab: f1:93:19:ef:9f:4d:e1:ee:c2:40:4e:43:0d:68:68:50:38:55: 04:5a:f4:f3:d6:46:7b:75:10:34:d3:d2:47:18:8d:e6:62:50: f2:43:9e:d5:88:5c:0a:58:1e:ff:9c:53:7f:6d:f6:28:80:a0: b3:2f:ea:dc:57:41:c8:8e:7a:b3:7f:d3:c2:17:d0:a1:1b:05: fd:33:19:16:2e:81:81:c9:25:66:05:cb:87:07:46:99:43:25: 6d:19:2c:82:60:d7:82:36:54:92:f0:38:11:8b:e9:a9:d1:70: 0e:7d:38:2a:4b:7f:de:24:a2:92:a7:90:2b:8a:52:64:98:35: 97:66:5f:46:dc:7e:92:f4:81:69:94:62:cf:97:dd:fe:89:c1: 02:87:c4:08:50:49:b1:8e:c7:32:19:62:76:19:31:4f:83:93: c6:bc:4f:0a:fe:b6:34:03:9d:b8:fc:1b:81:1e:87:2b:65:32: 99:98:df:83:f9:46:df:1d:2a:8a:0d:e8:da:df:07:b9:a1:9c: 94:39:77:81 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAneVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNDE5NTAxMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxREVGQUYxMTAvBgNVBAUTKDU5RURFODE2OUIwQTJDMzIxNDY5RkYx MUIxNjI4QkRFMEMxRjJDNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAfhI5O5QtQlspIjJlYLAP8m+cGFNfoh0UUbkb0q0QxVg+PPV+8MU4ugD9KfBZ R53e2TlH+AhEsCEmqRuSuRDmbEdJiXglbqjuR1TylOYKrswsNZaHsqk4KgLvFxla GetOxfa/h+Lfys03XBMAPOu39cBOTDOrbDnBhWCp7L3S+l7SOGq+6hH8PgCCa05v vj/dFK/ga3yyfd0oyeDXnfQxAsVAGE4cuxMegSp/0VM6HLHH9iOMgH2tcK/BIIpP RuZMdHS0j2wdjlHULxF5RxobohuIenbh5VtdoVd0FuQDJ93/VN6zc44yp1TZZ6Kw WH2XTudPz9mSXdo0mmnny1ErAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUWe3oFpsK LDIUaf8RsWKL3gwfLEEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURFRkFGLzA3MTc2MjQwNDkyQzExRUJBOTgxQkY1MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFERUZBRi8wNzE3NjI0MDQ5MkMxMUVCQTk4MUJGNTJDNEY5QUUwMi9XZTNvRnBz S0xESVVhZjhSc1dLTDNnd2ZMRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAihJMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ54CMA8EAgAC MAkDBwAgAQ3y78AwDQYJKoZIhvcNAQELBQADggEBAAN9NHRVX1mXHSgoUNLnHGpc itvRbXGSdD5FXt+LUQtw0QB3LoCLWf0+7PNf1dC3uSV5EIWpq/GTGe+fTeHuwkBO Qw1oaFA4VQRa9PPWRnt1EDTT0kcYjeZiUPJDntWIXApYHv+cU39t9iiAoLMv6txX QciOerN/08IX0KEbBf0zGRYugYHJJWYFy4cHRplDJW0ZLIJg14I2VJLwOBGL6anR cA59OCpLf94kopKnkCuKUmSYNZdmX0bcfpL0gWmUYs+X3f6JwQKHxAhQSbGOxzIZ YnYZMU+Dk8a8Twr+tjQDnbj8G4EehytlMpmY34P5Rt8dKooN6NrfB7mhnJQ5d4E= -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:51 2025 by rpki-client