This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer File: aJtDtI4RHmnx33nMohHMtCZaJns.cer (raw, json) Hash identifier: u4RKJPW2Rr/TQ/yR9u6JMIE7/WYllLsSKO9CQ6DFLQM= Subject key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027BF5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft caRepository: rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 15:54:15 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 138333 IP: 103.159.26.0/23 IP: 2406:c8c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162805 (0x27bf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 15:54:15 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:da:72:3a:f2:f4:f7:8e:2c:b5:27:44:75:5e: 88:39:f2:47:6f:c9:be:94:63:d1:fb:8e:05:2a:c1: 89:d0:9d:c8:14:47:07:90:55:2c:48:ef:80:46:74: 0c:7b:38:a8:a7:23:bb:d5:96:e9:86:fe:56:70:e4: 5f:a1:c9:47:9f:f5:7e:5e:70:5a:75:0c:bf:3a:14: cf:b3:de:1d:84:ab:36:c0:3a:a3:e1:9f:8a:43:d5: 59:60:70:b0:4b:b3:64:28:ae:82:f9:5d:50:82:28: cf:09:d6:6a:ee:bc:b5:9a:ae:df:6e:1f:d7:9c:01: e7:f1:02:e8:82:ec:54:b5:e7:db:a7:d7:60:e7:8d: c9:38:c5:e7:74:3e:a4:dd:b0:64:e5:4c:23:6f:e1: 6e:b5:2d:85:ee:b9:0a:46:b3:85:f5:ef:8f:25:71: f2:06:fe:e7:05:e1:38:a7:54:7f:93:b5:f0:11:6b: f3:3c:de:92:b3:08:de:c7:b3:3a:18:31:fe:d6:9d: 76:af:1d:ce:ac:96:5a:51:69:66:95:88:d9:72:fe: 8c:33:6f:b4:3a:22:4a:66:4a:3f:17:d9:95:d3:65: 6d:a5:7d:b4:4d:97:83:96:fd:05:4a:33:91:30:b6: 7a:1c:93:3c:a4:1b:bb:61:5b:67:ad:ba:2b:e5:56: de:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138333 sbgp-ipAddrBlock: critical IPv4: 103.159.26.0/23 IPv6: 2406:c8c0::/32 Signature Algorithm: sha256WithRSAEncryption 89:5a:26:19:6b:95:54:f8:bb:2c:35:b6:f3:9b:0b:0d:20:89: 86:10:c1:94:d1:f8:f7:8f:ae:bb:57:ef:d9:ee:7e:65:a8:8f: 28:24:5b:bd:a7:6b:81:47:36:e2:79:cf:fb:b2:27:d1:2b:95: 7f:ea:fc:1b:52:f4:4e:4e:de:06:db:7d:76:73:12:66:51:39: 3d:45:82:51:27:d3:1e:31:c8:d8:7b:62:55:ac:0a:ad:a3:49: 05:2d:19:bd:50:c0:b5:4c:be:4d:29:a0:67:83:63:5f:ba:39: 41:5b:ec:fc:df:32:8e:10:43:95:16:70:59:39:1d:43:89:50: 9a:db:23:0e:47:89:d6:ad:8c:4e:34:db:20:e9:ce:ed:06:d9: 36:af:df:75:43:62:f6:7f:cc:9a:db:37:3b:21:d5:8a:db:35: 9c:a5:09:e5:de:2a:92:4c:80:08:80:4e:7a:f5:70:f9:76:26: 0d:90:c3:40:4d:0e:ff:bf:0d:0f:18:54:31:88:ad:03:61:21: fe:b9:f4:77:af:f8:e2:cb:05:0b:e8:6a:e6:2d:c7:de:62:a6: ab:bc:2c:ee:d9:94:26:97:ea:1c:97:cc:4f:18:85:f2:a4:c0: d3:f1:42:3b:c9:af:17:87:7a:3b:50:5b:c5:5b:90:cf:41:85: f6:4d:57:30 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnv1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDE1NTQxNVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNjg4QzQxMTAvBgNVBAUTKDY4OUI0M0I0OEUxMTFFNjlGMURGNzlD Q0EyMTFDQ0I0MjY1QTI2N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt2nI68vT3jiy1J0R1Xog58kdvyb6UY9H7jgUqwYnQncgURweQVSxI74BGdAx7 OKinI7vVlumG/lZw5F+hyUef9X5ecFp1DL86FM+z3h2EqzbAOqPhn4pD1VlgcLBL s2QoroL5XVCCKM8J1mruvLWart9uH9ecAefxAuiC7FS159un12Dnjck4xed0PqTd sGTlTCNv4W61LYXuuQpGs4X1748lcfIG/ucF4TinVH+TtfARa/M83pKzCN7HszoY Mf7WnXavHc6sllpRaWaViNly/owzb7Q6IkpmSj8X2ZXTZW2lfbRNl4OW/QVKM5Ew tnockzykG7thW2etuivlVt4NAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUaJtDtI4R Hmnx33nMohHMtCZaJnswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY4OEM0L0Q4OTQ3RUI4MzBEOTExRUI4N0UwOTM1M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2ODhDNC9EODk0N0VCODMwRDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0 UkhtbngzM25Nb2hITXRDWmFKbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhxdMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ58aMA0EAgAC MAcDBQAkBsjAMA0GCSqGSIb3DQEBCwUAA4IBAQCJWiYZa5VU+LssNbbzmwsNIImG EMGU0fj3j667V+/Z7n5lqI8oJFu9p2uBRzbiec/7sifRK5V/6vwbUvROTt4G2312 cxJmUTk9RYJRJ9MeMcjYe2JVrAqto0kFLRm9UMC1TL5NKaBng2NfujlBW+z83zKO EEOVFnBZOR1DiVCa2yMOR4nWrYxONNsg6c7tBtk2r991Q2L2f8ya2zc7IdWK2zWc pQnl3iqSTIAIgE569XD5diYNkMNATQ7/vw0PGFQxiK0DYSH+ufR3r/jiywUL6Grm LcfeYqarvCzu2ZQml+ocl8xPGIXypMDT8UI7ya8Xh3o7UFvFW5DPQYX2TVcw -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:48 2025 by rpki-client