This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer File: XMqY-HjJJALi8QTiuL2rgZCx-qI.cer (raw, json) Hash identifier: 57aq55ROCT+QJK+TjRQB9/wbKtM203oggfuwMx75z1w= Subject key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02767A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 20 Nov 2025 00:55:29 +0000 Certificate not after: Mon 31 Aug 2026 00:00:00 +0000 Subordinate resources: AS: 58613 IP: 103.12.11.0/24 IP: 2403:fd00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161402 (0x2767a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 20 00:55:29 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:82:ee:3f:ee:67:30:50:72:7f:55:00:37:d6: 91:32:5e:f7:f0:34:46:ed:7d:5b:a2:6f:9d:09:90: 3b:c3:a3:8c:73:1e:b9:bf:47:bd:04:12:4f:1c:4b: 3d:d5:78:21:f3:32:18:62:37:3c:6e:70:67:29:06: cf:ff:dc:27:c4:35:a2:72:cc:08:18:ea:7a:74:17: be:ff:4c:26:1f:c5:b0:4e:a5:7f:09:c6:33:2d:1a: 6b:65:8c:db:20:8f:c2:67:e5:b5:5d:0f:84:26:1f: 5f:f3:47:a4:75:53:ef:47:22:13:30:6b:de:6f:b7: 69:ef:b4:69:57:a5:7d:c8:96:20:8d:61:2a:92:67: 3b:07:5e:3f:36:da:a6:f7:09:21:f6:e0:95:39:de: 19:74:0d:9f:ae:b2:e9:3f:21:13:e5:08:70:c6:bb: 94:3f:da:8a:0a:86:2d:99:67:e2:26:d5:49:16:68: 08:59:9a:cf:55:39:9c:67:e7:0b:53:af:5f:87:67: f6:e3:4e:08:f0:b5:bc:de:16:c9:fd:3b:25:15:30: 6d:36:4b:8e:59:21:4e:6d:cd:9a:75:95:0a:12:ec: a1:60:0a:14:a3:a7:92:1e:ac:4e:cf:06:27:78:eb: ba:ef:e4:c5:97:a1:fe:bb:f7:8b:8b:da:9f:5c:5f: 1e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 58613 sbgp-ipAddrBlock: critical IPv4: 103.12.11.0/24 IPv6: 2403:fd00::/32 Signature Algorithm: sha256WithRSAEncryption 52:6c:c5:93:82:22:35:56:bf:ad:ff:00:9d:24:e8:6c:40:11: a1:e6:b8:18:01:3b:97:c4:f5:da:6e:02:5f:9c:44:e5:2d:b4: fd:7a:36:85:5e:e1:6c:11:fd:a2:9e:5b:42:7b:a0:85:1e:42: 7b:48:7f:e0:71:7e:a1:29:3c:96:b4:cf:24:c8:01:1a:0e:35: dc:6f:ae:67:f7:fb:5e:66:1b:a7:53:d6:d7:88:d0:88:6f:8c: 7e:e9:45:48:d7:f2:62:4f:fd:65:1e:4d:32:aa:b1:73:bb:93: 0f:79:d8:b9:f1:ed:01:c2:0c:3a:75:87:2a:82:9e:64:df:81: d0:ec:a9:02:7e:1f:f6:cd:fa:6b:f8:a4:44:c5:18:a4:e6:95: cb:ee:13:1d:ab:4a:17:5e:0b:ad:09:07:3e:d3:92:8f:3e:83: a1:24:a2:19:b1:06:08:6f:cf:e6:ed:b4:cb:e0:9c:b7:f4:c9: a4:24:42:b3:f2:d4:86:fb:82:92:80:d9:5a:7c:c0:2e:f3:a2: 5c:89:a7:81:42:5b:fa:95:4e:07:82:51:dc:54:37:0c:58:b4: a8:7a:d2:de:69:5f:0a:6d:5a:73:cd:81:0f:e5:76:00:6f:3c: 7a:f2:e3:0b:ce:c6:57:53:52:f9:13:24:8c:2c:e8:16:f5:67: 41:40:e3:da -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnZ6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMDAwNTUyOVoXDTI2MDgzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkNGQzUxMTAvBgNVBAUTKDVDQ0E5OEY4NzhDOTI0MDJFMkYxMDRF MkI4QkRBQjgxOTBCMUZBQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPgu4/7mcwUHJ/VQA31pEyXvfwNEbtfVuib50JkDvDo4xzHrm/R70EEk8cSz3V eCHzMhhiNzxucGcpBs//3CfENaJyzAgY6np0F77/TCYfxbBOpX8JxjMtGmtljNsg j8Jn5bVdD4QmH1/zR6R1U+9HIhMwa95vt2nvtGlXpX3IliCNYSqSZzsHXj822qb3 CSH24JU53hl0DZ+usuk/IRPlCHDGu5Q/2ooKhi2ZZ+Im1UkWaAhZms9VOZxn5wtT r1+HZ/bjTgjwtbzeFsn9OyUVMG02S45ZIU5tzZp1lQoS7KFgChSjp5IerE7PBid4 67rv5MWXof6794uL2p9cXx4RAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUXMqY+HjJ JALi8QTiuL2rgZCx+qIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJDRkM1Lzk5OUYwMjQ4QzVBQjExRjA4QTIwMzU0REM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCQ0ZDNS85OTlGMDI0OEM1QUIxMUYwOEEyMDM1NERDNEY5QUUwMi9YTXFZLUhq SkpBTGk4UVRpdUwycmdaQ3gtcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAOT1MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAZwwLMA0EAgAC MAcDBQAkA/0AMA0GCSqGSIb3DQEBCwUAA4IBAQBSbMWTgiI1Vr+t/wCdJOhsQBGh 5rgYATuXxPXabgJfnETlLbT9ejaFXuFsEf2inltCe6CFHkJ7SH/gcX6hKTyWtM8k yAEaDjXcb65n9/teZhunU9bXiNCIb4x+6UVI1/JiT/1lHk0yqrFzu5MPedi58e0B wgw6dYcqgp5k34HQ7KkCfh/2zfpr+KRExRik5pXL7hMdq0oXXgutCQc+05KPPoOh JKIZsQYIb8/m7bTL4Jy39MmkJEKz8tSG+4KSgNlafMAu86JciaeBQlv6lU4HglHc VDcMWLSoetLeaV8KbVpzzYEP5XYAbzx68uMLzsZXU1L5EySMLOgW9WdBQOPa -----END CERTIFICATE-----Generated at Sat Dec 6 18:46:45 2025 by rpki-client