This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer File: XHIqJhQciPfNQPObN0raf7wfmx8.cer (raw, json) Hash identifier: tuhkczndmo8dJfYbKnKlUY+XPQLiIkE2Z1OoeBl/2S8= Subject key identifier: 5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C13 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 20:10:52 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 134820 IP: 103.202.48.0/22 IP: 202.88.36.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162835 (0x27c13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 20:10:52 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91D824A, serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:5b:1d:c0:50:40:e5:16:b8:cc:a2:ad:29: cb:9e:64:53:45:bc:7d:4d:8d:47:d5:1c:bc:16:43: 7e:9a:5a:a3:c3:0a:57:55:92:35:93:05:d4:2d:61: 5f:67:0a:6e:09:39:91:2a:51:ff:bf:c6:60:fe:c1: 1b:52:d5:e4:a2:51:ea:4d:bc:1e:dd:4a:ca:28:0b: df:13:56:40:55:42:d7:59:fd:87:48:d3:ea:15:c2: cc:17:d1:5d:88:dc:4f:3a:8e:b0:ed:d2:e9:c4:d5: 30:bc:5b:3e:35:ea:50:6b:60:7e:89:34:d1:d5:3c: de:c7:c0:d7:ff:82:7b:c4:07:05:cf:8a:1d:f0:34: 8c:95:7b:f0:12:33:36:2a:be:90:54:3b:e4:a3:e4: 93:f3:b2:ed:52:4a:2f:a9:22:7b:ed:f2:72:6b:d8: 39:b0:41:ea:89:cf:b0:cd:eb:33:18:68:b3:e5:a1: a6:46:fc:f5:25:12:34:a5:db:f4:94:b5:5b:79:83: a1:6e:42:db:0b:d3:2c:5c:1d:c5:75:40:16:1d:78: 92:62:78:30:a7:f0:8d:de:ea:4a:c3:c0:04:dc:f8: 69:d5:d3:5d:86:59:7a:21:e3:45:7f:6f:76:39:db: 50:a7:eb:41:fb:24:41:c7:a6:fb:7a:32:b2:e7:2a: 15:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134820 sbgp-ipAddrBlock: critical IPv4: 103.202.48.0/22 202.88.36.0/22 Signature Algorithm: sha256WithRSAEncryption 29:ae:53:53:eb:f7:f6:80:3f:6b:98:6f:a3:9e:19:1e:8e:3b: e8:a3:b9:f8:37:f0:a3:02:90:b4:f4:9a:ce:60:9d:b7:29:4d: 15:8c:16:00:be:ed:c4:52:01:48:58:4a:b0:bc:f9:5e:c9:fc: 14:5d:57:4a:d0:18:1e:7c:e8:68:53:77:e7:ad:da:c7:09:1d: cb:6b:df:29:a0:a7:48:52:ff:49:55:c0:8a:75:ad:fc:ce:4e: 29:aa:a3:69:57:50:b9:24:14:d8:f6:93:4f:17:70:12:c0:93: 0e:84:26:00:23:30:99:cf:79:f5:94:d4:49:78:f3:e3:27:04: 25:45:81:bb:52:85:a6:3a:c3:ba:99:af:5f:1e:9d:bc:d2:39: 54:fc:03:ec:9b:83:89:2c:e7:ee:ae:75:ff:88:4e:86:d2:62: 8e:a6:66:88:10:54:83:4c:f3:d6:ee:53:a9:d3:0c:e7:c2:1e: 11:a5:91:34:43:7e:89:a2:8d:c8:41:55:30:1a:67:55:22:fd: 4e:9f:90:e4:72:0d:7f:64:a7:8b:d4:6c:92:4d:4c:d7:78:98: 1f:99:13:d0:43:f9:b4:16:df:ff:7f:c5:15:7a:0e:2f:56:fe: 13:87:31:7a:ce:0b:d7:88:63:ac:8e:b3:35:6b:ea:fc:ab:22: d7:a6:56:c8 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAnwTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDIwMTA1MloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRDgyNEExMTAvBgNVBAUTKDVDNzIyQTI2MTQxQzg4RjdDRDQwRjM5 QjM3NEFEQTdGQkMxRjlCMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCNFsdwFBA5Ra4zKKtKcueZFNFvH1NjUfVHLwWQ36aWqPDCldVkjWTBdQtYV9n Cm4JOZEqUf+/xmD+wRtS1eSiUepNvB7dSsooC98TVkBVQtdZ/YdI0+oVwswX0V2I 3E86jrDt0unE1TC8Wz416lBrYH6JNNHVPN7HwNf/gnvEBwXPih3wNIyVe/ASMzYq vpBUO+Sj5JPzsu1SSi+pInvt8nJr2DmwQeqJz7DN6zMYaLPloaZG/PUlEjSl2/SU tVt5g6FuQtsL0yxcHcV1QBYdeJJieDCn8I3e6krDwATc+GnV012GWXoh40V/b3Y5 21Cn60H7JEHHpvt6MrLnKhWrAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUXHIqJhQc iPfNQPObN0raf7wfmx8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ4MjRBLzRBREYzM0ZDNUI5QTExRUY4MzA3RjU0MEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEODI0QS80QURGMzNGQzVCOUExMUVGODMwN0Y1NDBDNEY5QUUwMi9YSElxSmhR Y2lQZk5RUE9iTjByYWY3d2ZteDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg6kMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZ8owAwQCylgk MA0GCSqGSIb3DQEBCwUAA4IBAQAprlNT6/f2gD9rmG+jnhkejjvoo7n4N/CjApC0 9JrOYJ23KU0VjBYAvu3EUgFIWEqwvPleyfwUXVdK0BgefOhoU3fnrdrHCR3La98p oKdIUv9JVcCKda38zk4pqqNpV1C5JBTY9pNPF3ASwJMOhCYAIzCZz3n1lNRJePPj JwQlRYG7UoWmOsO6ma9fHp280jlU/APsm4OJLOfurnX/iE6G0mKOpmaIEFSDTPPW 7lOp0wznwh4RpZE0Q36Joo3IQVUwGmdVIv1On5Dkcg1/ZKeL1GySTUzXeJgfmRPQ Q/m0Ft//f8UVeg4vVv4ThzF6zgvXiGOsjrM1a+r8qyLXplbI -----END CERTIFICATE-----Generated at Sat Dec 6 17:05:12 2025 by rpki-client