This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer File: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer (raw, json) Hash identifier: 6rwpYm+Msb1kbKiCYj4vGxwTZn/MpfsilIXWqIzPbA4= Subject key identifier: 5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C60 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 19:36:28 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 149022 IP: 103.176.202.0/23 IP: 2001:df0:13c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162912 (0x27c60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 5 19:36:28 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91B4F01, serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4b:35:3f:71:98:ac:82:6d:85:f5:20:8b:b0: 6b:a8:9b:6e:61:66:c3:a6:bc:3a:90:67:6c:74:1f: 82:64:a0:8b:bc:ec:6f:81:4d:0f:b9:c8:e2:71:63: 30:46:c5:c5:eb:bc:ed:09:2a:35:21:d3:f0:22:96: da:81:f6:ab:71:bb:bb:b1:42:bf:3e:3f:0d:5b:de: 75:07:39:73:ba:26:a8:01:2c:6f:76:02:c9:d4:f0: 2b:30:0d:01:92:ae:fa:1b:6f:2b:27:75:ea:2b:dc: a5:73:62:ff:46:3b:80:01:03:9d:df:af:4f:ba:f8: 16:15:d9:5f:3d:b9:72:22:30:f8:b3:a8:20:e7:b3: e3:13:c7:59:1a:37:b5:53:90:8a:d9:ef:5f:25:07: 01:8e:19:05:b7:c4:7b:53:56:9b:68:b8:c7:25:c0: 53:15:17:4e:90:bd:d0:9f:2e:14:d0:9b:23:ff:de: 67:16:03:3c:f9:b7:86:3f:64:06:c9:96:2e:82:91: e0:f7:ac:22:39:00:ff:28:54:a7:26:bf:fc:ab:f5: c9:7b:8f:1d:6c:64:87:cd:d6:6d:bc:1f:46:a1:ce: 71:01:33:e0:3c:72:94:cb:16:c4:4a:10:58:2c:02: 36:a2:d5:0a:d6:f4:80:29:0f:46:be:77:0b:dc:97: 38:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 149022 sbgp-ipAddrBlock: critical IPv4: 103.176.202.0/23 IPv6: 2001:df0:13c0::/48 Signature Algorithm: sha256WithRSAEncryption c6:4c:2a:46:c1:df:04:79:a1:c0:84:54:ce:1e:fb:73:ca:10: 14:65:34:98:f3:69:7c:84:af:33:dc:83:e4:c1:dd:0a:3b:81: 53:c3:45:fd:5f:a1:23:20:e6:c1:8b:18:d3:35:7a:a7:eb:77: db:92:ed:f1:bd:0b:5e:ae:30:19:de:87:80:ca:b1:ae:64:ab: 95:0b:ea:e1:92:c5:91:14:1e:d8:7a:79:1a:a7:6c:ca:1f:78: 03:72:04:87:f3:03:b9:d7:c2:9f:27:0f:a5:19:01:6b:fd:dc: a5:a2:07:8c:aa:25:72:d8:c7:2e:37:3a:11:81:81:ab:f0:1d: 84:b6:4d:3b:7e:f4:e8:b1:ec:c6:9d:fb:38:44:85:df:a0:12: 76:06:17:24:c0:f7:68:eb:b4:bc:63:44:cb:f1:11:ae:f9:f7: 28:0a:d2:0c:7a:3c:95:3e:63:c7:27:f1:41:1f:2e:23:a0:1a: 7c:d1:45:7d:b0:49:53:b0:86:25:3f:d5:0a:73:9a:55:94:db: 63:1e:ad:d7:44:6d:c5:87:1b:b0:f9:02:88:4e:56:de:e3:c3: 5d:d4:82:cd:4b:e8:e5:f3:2b:2f:67:52:a3:d7:64:af:02:64: ff:85:bd:51:5d:2e:a3:af:5a:e5:85:dd:59:62:63:b5:af:69: 86:2f:02:bd -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnxgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNTE5MzYyOFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjRGMDExMTAvBgNVBAUTKDVFQkRBN0ZBQTgwMUM1QTI3NERDMjNE MTcxRjg4QjQ2QTExRTQxNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDASzU/cZisgm2F9SCLsGuom25hZsOmvDqQZ2x0H4JkoIu87G+BTQ+5yOJxYzBG xcXrvO0JKjUh0/AiltqB9qtxu7uxQr8+Pw1b3nUHOXO6JqgBLG92AsnU8CswDQGS rvobbysndeor3KVzYv9GO4ABA53fr0+6+BYV2V89uXIiMPizqCDns+MTx1kaN7VT kIrZ718lBwGOGQW3xHtTVptouMclwFMVF06QvdCfLhTQmyP/3mcWAzz5t4Y/ZAbJ li6CkeD3rCI5AP8oVKcmv/yr9cl7jx1sZIfN1m28H0ahznEBM+A8cpTLFsRKEFgs Ajai1QrW9IApD0a+dwvclzi3AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUXr2n+qgB xaJ03CPRcfiLRqEeQVQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI0RjAxL0E3MDBBODQ0NEI3ODExRUM4NkU1MEEzMEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNEYwMS9BNzAwQTg0NDRCNzgxMUVDODZFNTBBMzBDNEY5QUUwMi9YcjJuLXFn QnhhSjAzQ1BSY2ZpTFJxRWVRVlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkYeMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ7DKMA8EAgAC MAkDBwAgAQ3wE8AwDQYJKoZIhvcNAQELBQADggEBAMZMKkbB3wR5ocCEVM4e+3PK EBRlNJjzaXyErzPcg+TB3Qo7gVPDRf1foSMg5sGLGNM1eqfrd9uS7fG9C16uMBne h4DKsa5kq5UL6uGSxZEUHth6eRqnbMofeANyBIfzA7nXwp8nD6UZAWv93KWiB4yq JXLYxy43OhGBgavwHYS2TTt+9Oix7Mad+zhEhd+gEnYGFyTA92jrtLxjRMvxEa75 9ygK0gx6PJU+Y8cn8UEfLiOgGnzRRX2wSVOwhiU/1QpzmlWU22MerddEbcWHG7D5 AohOVt7jw13Ugs1L6OXzKy9nUqPXZK8CZP+FvVFdLqOvWuWF3VliY7WvaYYvAr0= -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:06 2025 by rpki-client