This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer File: XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer (raw, json) Hash identifier: 8qpzSc0pOctOq6ILpGyOlSL2E0xX327+qXsLoDdUuHM= Subject key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027338 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft caRepository: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/ Notify URL: https://rpki.admin.freerangecloud.com/rrdp/notification.xml Certificate not before: Wed 05 Nov 2025 06:50:37 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 139686 AS: 139912 IP: 103.144.176.0/23 IP: 2001:df1:ee80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160568 (0x27338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 5 06:50:37 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:92:1c:35:a2:34:54:50:d5:43:c5:fa:5a: 15:87:63:3f:99:27:a0:9d:91:f7:fc:05:da:55:9e: ad:5e:79:fb:5b:29:cc:ce:75:c9:64:83:f1:fb:37: 94:e6:f7:79:52:e7:42:8b:0b:23:ce:ce:fe:fe:4b: f7:a4:d4:ae:9f:ca:ff:85:5f:70:53:e2:4d:a6:10: 3b:29:51:5a:06:d0:59:79:a6:b5:bc:ec:2b:08:80: ba:4c:9d:2c:4d:04:be:37:1f:5e:1d:10:0c:bc:1f: ad:ea:50:c0:c4:2c:fb:c5:3f:98:fb:01:6b:50:7a: 86:f1:b7:31:5e:2f:ce:fa:29:4a:51:57:ae:e5:70: 35:05:e7:3e:71:60:ac:c0:80:a1:4d:40:bb:ff:39: fe:07:1c:6d:ee:7c:45:c1:80:3c:22:82:3f:2f:ba: 26:a8:48:71:43:80:c0:23:10:89:d7:0d:53:6b:de: 39:44:3a:d6:13:47:19:cd:64:ac:ca:c8:5b:db:93: 87:ca:5b:30:29:b7:d4:a4:a0:b4:10:b5:56:1d:04: ee:5d:7f:c6:c7:fc:d4:58:71:20:dc:b2:61:3a:18: 66:f9:3f:30:4e:da:66:5f:1d:52:d5:2a:f5:0d:f9: c0:0d:d0:86:da:14:3a:44:90:67:1a:b3:42:5e:42: c5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2 RPKI Manifest - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft RPKI Notify - URI:https://rpki.admin.freerangecloud.com/rrdp/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139686 139912 sbgp-ipAddrBlock: critical IPv4: 103.144.176.0/23 IPv6: 2001:df1:ee80::/48 Signature Algorithm: sha256WithRSAEncryption 9d:57:2e:9c:eb:97:38:96:a0:bf:de:2b:e8:d3:fa:9a:36:df: b9:a1:59:e5:17:3f:f0:fe:90:bd:51:0f:42:df:3a:2c:70:c7: 57:de:3a:ad:8b:34:98:af:b0:23:00:9d:af:ba:87:b4:bd:66: 2d:a3:6c:5f:41:8e:1e:2d:c5:b0:20:bd:f0:d6:9c:ec:a2:2f: c6:96:11:11:c0:f7:50:36:44:f0:fa:69:9f:a4:02:16:b2:11: 38:4c:96:4d:93:a1:ec:c4:7b:e5:1f:ab:9b:a4:70:64:1e:a1: c3:08:98:a5:93:13:3d:fe:62:11:00:3a:f5:a6:10:69:e1:14: 36:d7:fe:d0:4f:1d:96:73:77:fb:54:f4:64:ba:41:83:dc:de: 68:b3:86:32:26:6a:99:13:a6:2d:64:ae:d6:f8:7e:27:31:15: c3:4d:ea:d7:6a:3f:50:b1:3a:63:5d:6a:e5:91:b2:db:18:6c: 02:5b:50:29:06:1e:11:68:86:84:8a:73:6a:98:35:d7:59:2d: fc:7d:ee:b5:aa:5b:dd:61:b1:1f:6a:41:bc:16:c9:27:77:35: a6:bf:93:0d:34:24:df:ac:97:84:20:c7:6a:0a:7f:48:93:25: 76:a3:40:d0:72:66:1d:0a:8c:15:5a:7f:ab:b5:14:4b:ce:11: 0b:93:cf:99 -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIDAnM4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNTA2NTAzN1oXDTI3MDEzMTAwMDAwMFowSjEVMBMG A1UEAxMMQTkxMkM4MzYwMDAwMTEwLwYDVQQFEyg1RDM1OTM5NTU3MTEwQ0M0MzQy OUFFMzAxRjdDRUYwRTU4ODk5NDJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEArM6SHDWiNFRQ1UPF+loVh2M/mSegnZH3/AXaVZ6tXnn7WynMznXJZIPx +zeU5vd5UudCiwsjzs7+/kv3pNSun8r/hV9wU+JNphA7KVFaBtBZeaa1vOwrCIC6 TJ0sTQS+Nx9eHRAMvB+t6lDAxCz7xT+Y+wFrUHqG8bcxXi/O+ilKUVeu5XA1Bec+ cWCswIChTUC7/zn+Bxxt7nxFwYA8IoI/L7omqEhxQ4DAIxCJ1w1Ta945RDrWE0cZ zWSsyshb25OHylswKbfUpKC0ELVWHQTuXX/Gx/zUWHEg3LJhOhhm+T8wTtpmXx1S 1Sr1DfnADdCG2hQ6RJBnGrNCXkLFQQIDAQABo4IDBTCCAwEwHQYDVR0OBBYEFF01 k5VXEQzENCmuMB987w5YiZQrMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1 MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h cG5pYy5uZXQvUlBLSS9DUFMucGRmMIIBCAYIKwYBBQUHAQsEgfswgfgwPwYIKwYB BQUHMAWGM3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVw by9GUkMtQ0EvMjBsBggrBgEFBQcwCoZgcnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVy YW5nZWNsb3VkLmNvbS9yZXBvL0ZSQy1DQS8yLzVEMzU5Mzk1NTcxMTBDQzQzNDI5 QUUzMDFGN0NFRjBFNTg4OTk0MkIubWZ0MEcGCCsGAQUFBzANhjtodHRwczovL3Jw a2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29tL3JyZHAvbm90aWZpY2F0aW9uLnht bDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMCIaYCAwIiiDAwBggrBgEFBQcBBwEB /wQhMB8wDAQCAAEwBgMEAWeQsDAPBAIAAjAJAwcAIAEN8e6AMA0GCSqGSIb3DQEB CwUAA4IBAQCdVy6c65c4lqC/3ivo0/qaNt+5oVnlFz/w/pC9UQ9C3zoscMdX3jqt izSYr7AjAJ2vuoe0vWYto2xfQY4eLcWwIL3w1pzsoi/GlhERwPdQNkTw+mmfpAIW shE4TJZNk6HsxHvlH6ubpHBkHqHDCJilkxM9/mIRADr1phBp4RQ21/7QTx2Wc3f7 VPRkukGD3N5os4YyJmqZE6YtZK7W+H4nMRXDTerXaj9QsTpjXWrlkbLbGGwCW1Ap Bh4RaIaEinNqmDXXWS38fe61qlvdYbEfakG8FskndzWmv5MNNCTfrJeEIMdqCn9I kyV2o0DQcmYdCowVWn+rtRRLzhELk8+Z -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:32 2025 by rpki-client