This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer File: X48BYbesuyVfE88IG2ZTYZtOLAI.cer (raw, json) Hash identifier: Q+6eSEPkMJ3vkiwnMdcMSQAchlBiI5RE4FLy/1cT0P4= Subject key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A63 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft caRepository: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 03:14:21 +0000 Certificate not after: Mon 02 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 138456 AS: 151970 AS: 154346 IP: 103.126.24.0/24 IP: 103.152.206.0/24 IP: 2001:df7:3700::/47 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162403 (0x27a63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 03:14:21 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:63:59:6c:83:07:d3:fb:17:98:ab:44:95: 96:c6:cb:cd:3b:89:89:05:55:42:fc:04:2e:4c:9d: b5:22:78:97:b4:98:ec:04:11:a2:79:91:2f:14:08: 25:89:71:c6:88:a5:ba:89:34:7a:5f:54:1f:e2:f1: 0d:a7:11:fd:3c:8e:77:81:24:8a:bd:c4:fe:b7:a6: 2d:eb:dc:dd:3d:20:8a:c0:17:2c:b2:b2:c3:07:51: 56:74:e4:df:cc:2d:7d:43:34:a7:73:fa:a8:06:77: 56:dd:f4:13:2d:96:b9:af:cf:c6:1c:d2:92:3c:92: de:9e:66:9a:de:1c:1f:7a:45:c7:56:4a:d4:c1:1c: ca:c3:75:15:79:a0:57:81:94:fb:f9:9b:62:da:3e: 81:0d:cd:00:4b:57:62:7f:d5:44:18:a9:5b:8c:f6: 2f:3e:23:52:c8:a7:e3:6b:30:48:25:4b:68:0d:69: 2e:f8:58:e9:bd:60:2a:94:c3:e0:2f:c2:d2:e3:e2: a6:5e:e2:5b:8a:5d:c7:ed:3f:f2:35:a3:dd:38:de: fc:61:60:b1:51:95:6e:66:33:6d:16:95:52:8c:62: e2:8f:1b:d6:d2:58:9d:fe:13:24:29:41:2b:da:69: b9:5d:f7:c4:b8:9b:d2:03:ae:2f:f8:45:c6:ed:f2: 20:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138456 151970 154346 sbgp-ipAddrBlock: critical IPv4: 103.126.24.0/24 103.152.206.0/24 IPv6: 2001:df7:3700::/47 Signature Algorithm: sha256WithRSAEncryption 8b:c0:f0:40:bb:c7:a1:84:d0:7b:0f:cc:69:55:c4:68:04:e1: c9:91:fd:64:c5:02:59:f5:37:4c:64:59:15:88:80:7f:55:d1: b9:95:97:99:11:0e:bf:be:eb:9b:64:4c:24:b6:03:ea:64:15: 40:f0:26:18:7a:4a:f4:2d:bb:e4:d0:f5:21:d2:63:03:26:bd: 41:4c:57:a2:6c:c0:8a:57:b4:c1:3e:25:11:3d:ae:b6:57:d2: 62:ba:f6:f6:43:e1:fc:36:dd:c9:6e:a8:bd:57:f9:ac:81:a3: 77:42:7a:f6:9b:ec:f6:b6:d9:78:1f:b8:e1:dc:12:cd:c8:6c: 9a:42:f5:37:6d:4a:e5:94:b6:5c:17:0b:b7:8c:4e:9c:00:b5: 72:8e:21:fb:35:cf:5c:00:fa:3c:43:74:a6:72:61:c7:2b:a4: 39:7c:9d:b6:9b:84:ed:c5:db:ec:c8:bb:c7:33:67:7c:a0:97: 4a:af:ea:55:35:a9:31:c2:32:5f:b8:b5:b0:17:65:15:2a:81: 05:12:54:82:02:57:9f:87:2b:c6:2a:63:a3:10:07:33:8f:6a: 69:24:71:ec:df:80:13:1b:c8:16:ac:54:e2:08:b0:b1:3f:39: 39:95:00:34:e4:56:79:01:7f:86:65:9c:7e:3e:12:1c:70:ab: 49:aa:cd:e2 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIDAnpjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjAzMTQyMVoXDTI2MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0Yw ODFCNjY1MzYxOUI0RTJDMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDwWNZbIMH0/sXmKtElZbGy807iYkFVUL8BC5MnbUieJe0mOwEEaJ5kS8UCCWJ ccaIpbqJNHpfVB/i8Q2nEf08jneBJIq9xP63pi3r3N09IIrAFyyyssMHUVZ05N/M LX1DNKdz+qgGd1bd9BMtlrmvz8Yc0pI8kt6eZpreHB96RcdWStTBHMrDdRV5oFeB lPv5m2LaPoENzQBLV2J/1UQYqVuM9i8+I1LIp+NrMEglS2gNaS74WOm9YCqUw+Av wtLj4qZe4luKXcftP/I1o9043vxhYLFRlW5mM20WlVKMYuKPG9bSWJ3+EyQpQSva abld98S4m9IDri/4Rcbt8iATAgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQUX48BYbes uyVfE88IG2ZTYZtOLAIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ5QTBELzBGQjc5MTY0RkIxNTExRUFCMDExRUM2RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0OUEwRC8wRkI3OTE2NEZCMTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJl c3V5VmZFODhJRzJaVFladE9MQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAhzYAgMCUaICAwJa6jA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAME AGd+GAMEAGeYzjAPBAIAAjAJAwcBIAEN9zcAMA0GCSqGSIb3DQEBCwUAA4IBAQCL wPBAu8ehhNB7D8xpVcRoBOHJkf1kxQJZ9TdMZFkViIB/VdG5lZeZEQ6/vuubZEwk tgPqZBVA8CYYekr0Lbvk0PUh0mMDJr1BTFeibMCKV7TBPiURPa62V9Jiuvb2Q+H8 Nt3Jbqi9V/msgaN3Qnr2m+z2ttl4H7jh3BLNyGyaQvU3bUrllLZcFwu3jE6cALVy jiH7Nc9cAPo8Q3SmcmHHK6Q5fJ22m4TtxdvsyLvHM2d8oJdKr+pVNakxwjJfuLWw F2UVKoEFElSCAlefhyvGKmOjEAczj2ppJHHs34ATG8gWrFTiCLCxPzk5lQA05FZ5 AX+GZZx+PhIccKtJqs3i -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:16 2025 by rpki-client