This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer File: Z1qGdu030Wq7yi_vjqofI_JXsp8.cer (raw, json) Hash identifier: 1034b4gBPDSsfrvA7XpxJKNZZ6iURd4FUmbTfowgOfA= Subject key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027728 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 23 Nov 2025 14:28:49 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 135628 IP: 103.77.16.0/22 IP: 203.153.60.0/22 IP: 2407:8780::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161576 (0x27728) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 23 14:28:49 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:b2:7f:7a:e9:80:44:42:29:8c:b8:58:e5: eb:37:ae:59:61:45:38:7a:81:5b:0e:22:b8:23:5e: 60:fe:eb:02:11:fa:ba:b2:00:2a:96:c0:91:1a:96: 30:16:44:24:4e:44:88:39:a1:21:96:22:f1:e8:f3: 8b:14:4a:52:40:ad:47:d1:aa:b4:70:d2:d5:f1:15: 50:34:da:fc:cf:38:e9:66:7d:c3:b5:12:ba:e6:6c: c1:13:9d:6a:47:fb:32:cd:02:44:d2:b6:9c:60:68: 96:5c:81:33:05:9e:c3:c0:8b:3f:dc:e1:cc:44:65: 60:df:6b:c2:47:7b:f4:fc:30:95:dd:34:5b:49:a3: f3:44:00:3d:50:d2:15:87:8d:17:e7:ac:4d:0b:2d: c7:a6:4c:d7:92:ea:22:75:3a:c0:03:b4:43:75:b8: b6:8e:66:a0:3d:3e:af:79:89:98:b5:de:bb:74:84: 89:82:27:be:45:fa:1f:70:73:75:67:9d:14:d1:b6: 0a:22:e6:32:77:31:8c:05:0f:ef:d9:d7:93:03:ec: f0:af:c4:30:0e:11:88:63:5c:ea:45:eb:33:cc:e5: ec:9c:39:73:5a:55:72:18:64:bb:e0:90:1d:57:2c: 03:31:39:33:7c:e8:89:fb:88:0b:e9:d7:f6:6b:8a: d7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135628 sbgp-ipAddrBlock: critical IPv4: 103.77.16.0/22 203.153.60.0/22 IPv6: 2407:8780::/32 Signature Algorithm: sha256WithRSAEncryption 63:53:79:86:69:a8:83:ce:ae:40:95:d3:20:c5:79:3c:93:ef: 1c:eb:cb:95:cf:53:5c:a8:7e:a4:4a:ff:e5:d4:c4:e7:1e:3d: 65:77:ca:34:20:60:3c:2d:7d:64:b1:6a:23:03:ee:2c:b4:b7: 7e:bb:e7:81:b4:e3:98:a0:c1:7f:af:b6:c0:26:dc:cf:8e:bd: 2b:9e:83:ee:d8:3f:d5:18:4e:b0:c4:6e:d1:70:95:cb:e6:bf: 21:a5:4c:d9:da:4b:11:25:7d:35:18:e4:b2:19:9f:59:40:9d: bc:ef:cb:2e:80:7d:6b:cd:7d:cb:a5:80:a4:70:59:00:46:4a: 38:63:f1:a8:78:4a:57:59:66:d9:40:ad:04:60:3a:2c:f9:0b: ee:11:e8:1d:50:7a:5c:d0:b9:3e:37:3f:83:8a:9d:96:42:95: b3:93:c0:b3:df:b1:8e:cb:69:24:6a:3b:7e:39:64:7c:a2:e4: 06:7d:0a:60:d0:53:58:4b:54:c0:d1:a2:86:33:cf:f8:3b:1e: 6b:f7:b7:05:2a:1e:13:c6:b1:fd:03:b9:a8:0a:3f:d0:4c:b9: 41:2b:3d:ab:e6:91:5b:f6:6b:fe:cf:f7:e8:d0:90:00:4d:3b: 65:8a:4b:c6:5b:76:81:c9:af:24:82:6d:53:1e:d9:6a:19:24: cc:52:6d:9b -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAncoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMzE0Mjg0OVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRDU2Q0ExMTAvBgNVBAUTKDY3NUE4Njc2RUQzN0QxNkFCQkNBMkZF RjhFQUExRjIzRjI1N0IyOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxdLJ/eumAREIpjLhY5es3rllhRTh6gVsOIrgjXmD+6wIR+rqyACqWwJEaljAW RCRORIg5oSGWIvHo84sUSlJArUfRqrRw0tXxFVA02vzPOOlmfcO1ErrmbMETnWpH +zLNAkTStpxgaJZcgTMFnsPAiz/c4cxEZWDfa8JHe/T8MJXdNFtJo/NEAD1Q0hWH jRfnrE0LLcemTNeS6iJ1OsADtEN1uLaOZqA9Pq95iZi13rt0hImCJ75F+h9wc3Vn nRTRtgoi5jJ3MYwFD+/Z15MD7PCvxDAOEYhjXOpF6zPM5eycOXNaVXIYZLvgkB1X LAMxOTN86In7iAvp1/ZritcRAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUZ1qGdu03 0Wq7yi/vjqofI/JXsp8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ1NkNBLzkxNEU1M0Y2QzBEMTExRTc4RDFFRjgyQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFENTZDQS85MTRFNTNGNkMwRDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUw MzBXcTd5aV92anFvZklfSlhzcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhHMMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ00QAwQCy5k8 MA0EAgACMAcDBQAkB4eAMA0GCSqGSIb3DQEBCwUAA4IBAQBjU3mGaaiDzq5AldMg xXk8k+8c68uVz1NcqH6kSv/l1MTnHj1ld8o0IGA8LX1ksWojA+4stLd+u+eBtOOY oMF/r7bAJtzPjr0rnoPu2D/VGE6wxG7RcJXL5r8hpUzZ2ksRJX01GOSyGZ9ZQJ28 78sugH1rzX3LpYCkcFkARko4Y/GoeEpXWWbZQK0EYDos+QvuEegdUHpc0Lk+Nz+D ip2WQpWzk8Cz37GOy2kkajt+OWR8ouQGfQpg0FNYS1TA0aKGM8/4Ox5r97cFKh4T xrH9A7moCj/QTLlBKz2r5pFb9mv+z/fo0JAATTtlikvGW3aBya8kgm1THtlqGSTM Um2b -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:20 2025 by rpki-client