This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer File: X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer (raw, json) Hash identifier: PhfQH9Y8BKotKYa9CeeWWwWPcUHiBzP3KvwB/CsiEco= Subject key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02753D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft caRepository: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 14 Nov 2025 13:59:35 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 142420 IP: 103.12.96.0/23 IP: 2001:df1:69c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161085 (0x2753d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 14 13:59:35 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:1e:d6:2c:ab:12:1d:40:81:b8:fd:67:98: 3f:5c:83:5b:df:53:d6:5e:b5:ce:70:6f:f7:4d:1e: 1d:9d:17:a2:fd:61:28:03:37:6c:32:e0:cf:5c:97: c0:8d:64:e2:37:61:fd:fc:90:81:c8:8c:ad:2c:dc: a5:d7:74:14:6c:e2:d9:6a:07:ed:8c:96:50:9f:cb: 53:17:80:f8:e6:50:44:f1:ac:14:93:5b:a0:48:bf: ff:0f:39:53:16:f6:cc:8e:42:ff:32:f9:a9:af:e0: 7b:af:1c:d6:54:ab:53:5e:9c:41:e2:5b:e9:66:ee: a5:8f:c9:2a:b4:ce:8c:11:c7:e1:71:7e:d6:46:9e: 1b:d6:ea:fe:69:d8:f9:8a:2f:b0:c7:a4:8f:6b:fd: e3:38:7e:61:a9:08:60:1b:4e:16:ee:07:32:8e:d8: aa:e9:90:a1:af:82:b1:ce:9a:33:9f:70:6f:21:01: f7:85:39:18:8e:5a:c3:66:94:22:36:fe:17:68:1c: 7c:bf:ac:d4:ed:b8:19:2f:e3:e8:f4:2b:ed:10:ce: bf:9b:30:91:6b:4f:cc:d8:1b:98:a5:5b:a4:69:59: 4b:3a:6d:52:a7:88:ed:ac:47:84:0c:e5:da:9c:fa: a3:77:65:8d:90:8e:a4:2c:b8:1d:07:49:c2:e9:3f: 42:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 142420 sbgp-ipAddrBlock: critical IPv4: 103.12.96.0/23 IPv6: 2001:df1:69c0::/48 Signature Algorithm: sha256WithRSAEncryption 7c:13:2f:c0:30:93:d1:b0:8f:3a:a4:f1:7c:a3:48:f1:97:20: 4a:71:be:eb:1d:1c:56:24:3d:d5:a0:9f:62:b3:55:84:f5:ea: 3e:ab:85:a4:15:63:88:bb:69:49:fc:7e:00:96:46:a8:64:23: 21:2f:44:da:59:20:44:96:6c:5c:38:72:b2:d1:84:b7:44:b2: 1e:46:de:a6:50:ab:d6:d7:5e:e7:61:8d:98:b9:44:9e:62:25: 91:67:89:3f:a2:a1:59:b9:01:d8:73:41:04:45:df:60:42:4e: 99:40:9f:d7:e7:7c:59:9e:71:eb:1b:47:8d:0d:cf:c1:40:ee: c5:b2:27:47:bb:59:95:56:9d:48:f8:60:23:5b:5d:37:f7:4c: b2:dd:82:75:55:20:47:72:e1:10:b1:bb:59:c7:05:79:e1:d4: d0:84:93:e0:db:57:7d:93:c1:07:aa:0e:c1:88:a5:8a:81:bf: e5:15:40:7e:41:87:40:69:a9:c7:da:44:9c:e2:a2:61:03:2d: 8c:7f:b5:e0:cc:cd:7e:74:43:36:ea:0e:95:8e:e5:10:56:2a: 23:9d:ec:63:dc:5b:8b:a6:c7:dd:06:18:89:29:c5:1a:bf:17: 0a:ab:2c:83:50:3e:21:01:bd:78:fc:1f:98:87:70:1f:7b:48: c1:49:05:cd -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnU9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNDEzNTkzNVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTYyNTUxMTAvBgNVBAUTKDVGNkM4RkEzQTY1ODc0MDIzMUIyQzRC MTM0ODFCRTExNTAwQURDNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpHh7WLKsSHUCBuP1nmD9cg1vfU9Zetc5wb/dNHh2dF6L9YSgDN2wy4M9cl8CN ZOI3Yf38kIHIjK0s3KXXdBRs4tlqB+2MllCfy1MXgPjmUETxrBSTW6BIv/8POVMW 9syOQv8y+amv4HuvHNZUq1NenEHiW+lm7qWPySq0zowRx+FxftZGnhvW6v5p2PmK L7DHpI9r/eM4fmGpCGAbThbuBzKO2KrpkKGvgrHOmjOfcG8hAfeFORiOWsNmlCI2 /hdoHHy/rNTtuBkv4+j0K+0Qzr+bMJFrT8zYG5ilW6RpWUs6bVKniO2sR4QM5dqc +qN3ZY2QjqQsuB0HScLpP0LvAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUX2yPo6ZY dAIxssSxNIG+EVAK3HYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU2MjU1LzkxNjIwODRDNTA3MzExRUQ5QjhDMTQyREM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1NjI1NS85MTYyMDg0QzUwNzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZa WWRBSXhzc1N4TklHLUVWQUszSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAixUMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZwxgMA8EAgAC MAkDBwAgAQ3xacAwDQYJKoZIhvcNAQELBQADggEBAHwTL8Awk9Gwjzqk8XyjSPGX IEpxvusdHFYkPdWgn2KzVYT16j6rhaQVY4i7aUn8fgCWRqhkIyEvRNpZIESWbFw4 crLRhLdEsh5G3qZQq9bXXudhjZi5RJ5iJZFniT+ioVm5AdhzQQRF32BCTplAn9fn fFmecesbR40Nz8FA7sWyJ0e7WZVWnUj4YCNbXTf3TLLdgnVVIEdy4RCxu1nHBXnh 1NCEk+DbV32TwQeqDsGIpYqBv+UVQH5Bh0BpqcfaRJziomEDLYx/teDMzX50Qzbq DpWO5RBWKiOd7GPcW4umx90GGIkpxRq/FwqrLINQPiEBvXj8H5iHcB97SMFJBc0= -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:52 2025 by rpki-client