This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer File: YWPctdU7SHLhWVY-kPxeQa0ALC0.cer (raw, json) Hash identifier: WQFj/Kntjp8iPRMCC+Bdc5gr/N/9FzEW86z4YWvH9iA= Subject key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0277ED Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft caRepository: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 16:40:31 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 147301 IP: 103.174.150.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161773 (0x277ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 16:40:31 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:33:0c:84:3f:35:42:9a:32:67:fa:9e:af: 59:7e:16:69:c4:69:5e:b2:fa:7c:9e:68:75:34:1b: e9:59:06:c3:71:56:c2:57:66:d7:7f:2d:b9:f7:c2: 63:e3:e9:80:91:e2:63:0c:0d:0e:9f:00:d5:8c:f5: dd:ae:d6:8e:23:ca:54:07:5c:97:aa:46:b4:62:d9: bc:74:27:61:46:48:0b:14:3e:e7:9f:03:5c:c1:7e: 57:93:9a:45:91:74:5d:06:d7:7a:c1:6f:10:62:f8: 86:96:65:ab:33:d9:52:5c:86:f6:73:1a:fe:79:30: 97:89:2d:05:68:5f:21:75:c5:a5:70:ce:c6:56:10: fa:c4:d8:07:8d:b6:25:70:39:aa:e2:13:04:be:62: 4f:26:c5:07:a9:da:91:09:8b:1b:12:6e:e2:99:55: d6:a9:42:27:f0:1e:69:50:c6:15:ca:25:3d:a1:9b: 83:44:64:77:8f:b3:6a:46:64:e6:34:70:97:0d:f5: 5e:af:16:52:ba:c4:f9:61:03:bf:68:6a:58:b9:a4: d8:af:38:9c:04:11:d1:98:86:67:8a:d3:00:d6:ed: b2:25:92:03:6f:a6:bc:84:a6:c1:f2:0f:a7:ce:f9: 21:de:b7:1b:cf:1e:03:59:6e:fa:5c:8b:06:b1:35: c3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 147301 sbgp-ipAddrBlock: critical IPv4: 103.174.150.0/23 Signature Algorithm: sha256WithRSAEncryption 21:1d:22:09:f3:4b:86:cc:f2:41:ce:89:32:ad:b8:78:97:86: d3:7f:41:8d:18:43:90:ae:c9:05:ec:c1:35:af:91:36:7d:b3: e0:d4:d2:f3:38:06:e8:8b:4c:3c:c0:68:be:83:f3:b2:32:08: 4e:9c:2a:d5:a6:33:2f:eb:5c:e1:c8:5c:96:6f:42:16:84:a1: ce:7f:31:5b:02:b8:fc:32:7d:7d:22:c1:fa:45:98:1e:fb:5e: 50:f0:45:8e:d9:b0:93:cf:22:47:3c:c8:aa:26:64:b4:bc:74: c3:90:3a:ae:36:55:54:ba:0c:22:62:31:b5:a3:d9:97:0d:e1: a6:71:9f:9e:fd:56:6d:8a:94:c8:13:73:4c:77:5c:af:cc:e0: ea:b3:4f:fe:4c:96:1d:ed:d3:2b:61:22:9e:7f:9b:10:9f:22: 28:eb:62:24:4f:ba:44:cc:df:95:82:1a:97:62:33:d5:a6:c4: 77:33:5c:fc:23:b0:0a:19:d6:41:f9:01:5d:f1:e4:3e:ca:22: f8:72:a9:d8:32:57:b2:d4:9e:84:41:63:9b:e5:87:db:69:04: 7f:c8:12:62:c6:e7:93:e3:f2:e1:98:a6:cd:14:82:f8:26:8b: 45:1d:cb:f3:83:75:88:44:cb:33:5e:12:e4:79:b2:55:e1:fe: 81:de:0d:2e -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnftMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTE2NDAzMVoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNzQyODIxMTAvBgNVBAUTKDYxNjNEQ0I1RDUzQjQ4NzJFMTU5NTYz RTkwRkM1RTQxQUQwMDJDMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE4zMMhD81QpoyZ/qer1l+FmnEaV6y+nyeaHU0G+lZBsNxVsJXZtd/Lbn3wmPj 6YCR4mMMDQ6fANWM9d2u1o4jylQHXJeqRrRi2bx0J2FGSAsUPuefA1zBfleTmkWR dF0G13rBbxBi+IaWZasz2VJchvZzGv55MJeJLQVoXyF1xaVwzsZWEPrE2AeNtiVw OariEwS+Yk8mxQep2pEJixsSbuKZVdapQifwHmlQxhXKJT2hm4NEZHePs2pGZOY0 cJcN9V6vFlK6xPlhA79oali5pNivOJwEEdGYhmeK0wDW7bIlkgNvpryEpsHyD6fO +SHetxvPHgNZbvpciwaxNcPjAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUYWPctdU7 SHLhWVY+kPxeQa0ALC0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTc0MjgyLzk3MTQzMzc2NDc5ODExRUNCMDNENTUzOEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3NDI4Mi85NzE0MzM3NjQ3OTgxMUVDQjAzRDU1MzhDNEY5QUUwMi9ZV1BjdGRV N1NITGhXVlkta1B4ZVFhMEFMQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAj9lMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ66WMA0GCSqG SIb3DQEBCwUAA4IBAQAhHSIJ80uGzPJBzokyrbh4l4bTf0GNGEOQrskF7ME1r5E2 fbPg1NLzOAboi0w8wGi+g/OyMghOnCrVpjMv61zhyFyWb0IWhKHOfzFbArj8Mn19 IsH6RZge+15Q8EWO2bCTzyJHPMiqJmS0vHTDkDquNlVUugwiYjG1o9mXDeGmcZ+e /VZtipTIE3NMd1yvzODqs0/+TJYd7dMrYSKef5sQnyIo62IkT7pEzN+VghqXYjPV psR3M1z8I7AKGdZB+QFd8eQ+yiL4cqnYMley1J6EQWOb5YfbaQR/yBJixueT4/Lh mKbNFIL4JotFHcvzg3WIRMszXhLkebJV4f6B3g0u -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:20 2025 by rpki-client