This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer File: XoJBeVOzWp-LWaQuyUb00CTYd2s.cer (raw, json) Hash identifier: +wjQne6EqzEKs1SD0+FMB4zKXsZ6fNj43Roi0V/kjP0= Subject key identifier: 5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B5F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft caRepository: rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 16:55:50 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 137258 IP: 103.103.112.0/24 IP: 2001:df3:700::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162655 (0x27b5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 16:55:50 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A915B2F1, serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5e:13:59:8c:19:55:4f:ab:3b:88:7d:fa:18: 63:b6:49:99:ae:31:2d:66:10:40:7d:54:5d:dc:f6: 87:56:c3:1f:02:38:87:07:c1:bb:19:24:7e:cd:06: 32:73:da:f6:64:98:52:28:87:d7:d8:30:f8:ba:86: 40:3b:8a:51:a3:98:1e:d0:05:0f:24:82:4b:d1:2f: af:da:ac:7b:80:f3:23:63:95:2e:0a:0c:ae:43:19: 8f:2c:2b:c7:2f:39:08:43:18:70:b1:e5:d7:2a:04: 01:0f:32:26:18:df:b4:95:e8:21:43:dd:e1:53:7b: 58:24:0b:e8:4a:1c:26:85:82:5b:3e:e7:0f:ab:31: 10:10:d0:75:e0:a7:d5:5b:80:4a:6e:bf:22:d7:a9: 5e:86:d4:c5:85:ef:21:a6:f2:3b:4b:30:6a:3b:0e: 5a:f1:a1:67:cf:76:ae:46:fc:55:49:21:d0:71:56: 60:f1:1b:8f:4b:b4:ae:a8:80:31:8e:40:b9:21:9e: 66:a4:a7:4b:f4:00:3b:25:5b:ea:0c:71:b4:a9:88: dc:2d:28:b9:2a:a9:cd:07:10:69:0c:b3:dc:b0:60: ba:b3:65:a8:78:68:e2:a5:e2:a3:b7:b4:2e:9f:c5: 30:c0:bb:af:53:14:81:8c:ce:02:b2:51:21:8a:f9: 10:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137258 sbgp-ipAddrBlock: critical IPv4: 103.103.112.0/24 IPv6: 2001:df3:700::/48 Signature Algorithm: sha256WithRSAEncryption d4:fb:e8:ae:44:4c:2f:8d:6c:b4:92:9d:03:2e:0c:ce:bc:25: 02:92:6e:72:a9:6b:df:2f:6d:75:04:d4:8f:39:83:e4:1a:fe: 07:2e:a2:60:af:3a:64:fb:3f:1c:b9:ee:2b:2b:d0:aa:f7:11: 21:73:20:21:3c:88:54:45:d9:56:54:56:80:04:0e:e4:e2:1a: c3:fe:b6:f7:a9:a1:3a:2c:ff:b8:b4:17:c0:1b:57:d4:83:0d: b5:65:36:11:32:62:e1:fa:f8:93:9f:b6:49:27:65:9b:8d:7d: 87:27:8e:a7:59:19:e0:05:e8:8b:81:26:56:0d:45:a8:55:6f: 7e:f7:2f:f4:a0:49:38:19:0e:ec:37:96:83:49:24:96:eb:7d: 11:0f:05:2e:d0:6c:dd:bf:59:8c:69:84:1b:e5:6d:c9:78:72: 1d:d9:0d:76:33:14:90:a1:71:ca:e1:72:66:d7:89:e0:d9:fc: a9:b5:0a:74:86:72:75:87:2a:f4:26:f7:06:0a:e9:a7:04:ab: 6a:77:b1:45:39:28:01:54:7c:71:71:75:ac:05:1e:ff:10:a8: 76:61:4f:67:09:b5:7a:39:a6:ba:7a:d0:17:b5:7a:9e:c3:01: e2:34:ec:88:5a:73:10:6a:53:a5:0f:6a:61:3b:6d:11:46:1f: 84:7c:65:33 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAntfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzE2NTU1MFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNUIyRjExMTAvBgNVBAUTKDVFODI0MTc5NTNCMzVBOUY4QjU5QTQy RUM5NDZGNEQwMjREODc3NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXXhNZjBlVT6s7iH36GGO2SZmuMS1mEEB9VF3c9odWwx8COIcHwbsZJH7NBjJz 2vZkmFIoh9fYMPi6hkA7ilGjmB7QBQ8kgkvRL6/arHuA8yNjlS4KDK5DGY8sK8cv OQhDGHCx5dcqBAEPMiYY37SV6CFD3eFTe1gkC+hKHCaFgls+5w+rMRAQ0HXgp9Vb gEpuvyLXqV6G1MWF7yGm8jtLMGo7DlrxoWfPdq5G/FVJIdBxVmDxG49LtK6ogDGO QLkhnmakp0v0ADslW+oMcbSpiNwtKLkqqc0HEGkMs9ywYLqzZah4aOKl4qO3tC6f xTDAu69TFIGMzgKyUSGK+RBXAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUXoJBeVOz Wp+LWaQuyUb00CTYd2swHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVCMkYxLzI2MDA3RkI2OERGMTExRUI4RDBFQTUxMUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1QjJGMS8yNjAwN0ZCNjhERjExMUVCOEQwRUE1MTFDNEY5QUUwMi9Yb0pCZVZP eldwLUxXYVF1eVViMDBDVFlkMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhgqMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ2dwMA8EAgAC MAkDBwAgAQ3zBwAwDQYJKoZIhvcNAQELBQADggEBANT76K5ETC+NbLSSnQMuDM68 JQKSbnKpa98vbXUE1I85g+Qa/gcuomCvOmT7Pxy57isr0Kr3ESFzICE8iFRF2VZU VoAEDuTiGsP+tvepoTos/7i0F8AbV9SDDbVlNhEyYuH6+JOftkknZZuNfYcnjqdZ GeAF6IuBJlYNRahVb373L/SgSTgZDuw3loNJJJbrfREPBS7QbN2/WYxphBvlbcl4 ch3ZDXYzFJChccrhcmbXieDZ/Km1CnSGcnWHKvQm9wYK6acEq2p3sUU5KAFUfHFx dawFHv8QqHZhT2cJtXo5prp60Be1ep7DAeI07IhacxBqU6UPamE7bRFGH4R8ZTM= -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:19 2025 by rpki-client