This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer File: aNFGZDOVhBbdgafUq_KyQ-59i1Y.cer (raw, json) Hash identifier: MhSA/zCLaJ2+a08iXAk2+zmrnmBALZLe3WsZ7RS4b9Y= Subject key identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0275CF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 03:39:20 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 135359 IP: 103.208.188.0/22 IP: 2401:c2c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161231 (0x275cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 18 03:39:20 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A91F231C, serialNumber=68D1466433958416DD81A7D4ABF2B243EE7D8B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0c:e7:ef:fc:57:f6:c3:53:12:7e:2d:d8:0e: 03:8e:8b:36:8f:df:7d:8e:d7:b1:33:62:c1:fb:82: 4e:18:a8:b2:d0:eb:fe:8f:61:41:3b:ab:34:09:b2: 1c:e7:30:ed:cb:da:b0:96:ad:65:e1:92:6a:be:fa: f1:bb:7f:ee:62:e3:db:2f:e7:06:49:b4:f7:af:74: 84:21:21:fa:25:03:e7:fa:7b:53:7b:a4:67:af:7a: bb:90:c8:74:90:7a:65:29:fa:93:49:01:14:be:85: 62:cb:26:7e:06:bb:bc:c3:9f:2f:f6:ce:09:8b:81: 0a:04:d2:a2:95:a3:46:89:d3:1d:fd:73:1f:e3:bc: 50:ce:4f:53:da:b4:e9:73:0c:c4:f0:a3:81:05:cb: cb:25:24:e1:51:66:56:9a:04:fb:ca:b4:af:7a:01: 29:eb:45:06:04:71:c8:cf:df:c3:ca:03:43:d5:e8: d7:7d:66:f3:36:54:2d:4d:bd:52:22:33:5c:7a:ae: f4:c5:40:e8:75:73:bb:d5:60:f8:ad:ed:d8:8b:b9: fb:4c:7a:8f:7b:a1:42:fb:51:5b:75:87:8d:c4:88: 6a:b4:33:77:1d:b8:be:70:28:7c:e2:2c:9d:7d:a5: 40:1a:2c:4f:09:9b:e4:6c:c2:23:27:ea:14:a2:51: 01:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D1:46:64:33:95:84:16:DD:81:A7:D4:AB:F2:B2:43:EE:7D:8B:56 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F231C/28E83E6AC43011F096CE9C49C4F9AE02/aNFGZDOVhBbdgafUq_KyQ-59i1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135359 sbgp-ipAddrBlock: critical IPv4: 103.208.188.0/22 IPv6: 2401:c2c0::/32 Signature Algorithm: sha256WithRSAEncryption 8a:73:e3:b8:a5:bc:10:13:d4:9b:1d:44:87:2c:cd:14:96:89: f7:c2:61:b9:e4:d0:67:12:d8:11:a8:a6:e6:a6:da:f3:ab:9a: c1:fc:25:1d:a2:22:82:a7:54:99:b6:a8:67:79:33:10:61:31: 5f:61:c5:80:37:a2:42:c7:d5:09:36:af:83:92:4f:19:da:28: 46:f3:08:e5:30:14:34:90:ab:fd:af:ff:fa:81:ec:b3:81:db: fc:a5:00:4d:6c:32:30:d5:88:00:c4:de:57:7b:0e:2c:0a:76: 66:b0:bd:72:5a:de:94:92:e6:c1:27:2f:e6:18:0a:77:3b:8a: 02:12:35:cc:ff:9d:51:59:44:e5:55:24:ee:b0:a1:49:d7:0f: 72:f7:92:64:2e:3a:38:25:d1:2e:ad:7a:90:50:ed:51:b7:69: 31:0e:6e:03:69:24:c1:37:89:b6:b1:0c:d0:67:9f:36:2f:51: 1e:3c:f9:90:9c:6a:f0:97:bd:fe:26:d4:6a:bb:95:f7:18:c8: f4:fc:9a:51:d5:60:92:69:59:71:9f:29:66:f7:9b:a3:57:78: e7:4e:8f:59:14:ac:f7:61:32:b5:0f:ee:08:7d:92:11:1e:e8: a1:7c:0a:a1:29:17:8e:f8:d5:75:19:05:b6:48:0a:87:66:73: 45:7f:64:78 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnXPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExODAzMzkyMFoXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjIzMUMxMTAvBgNVBAUTKDY4RDE0NjY0MzM5NTg0MTZERDgxQTdE NEFCRjJCMjQzRUU3RDhCNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbDOfv/Ff2w1MSfi3YDgOOizaP332O17EzYsH7gk4YqLLQ6/6PYUE7qzQJshzn MO3L2rCWrWXhkmq++vG7f+5i49sv5wZJtPevdIQhIfolA+f6e1N7pGeveruQyHSQ emUp+pNJARS+hWLLJn4Gu7zDny/2zgmLgQoE0qKVo0aJ0x39cx/jvFDOT1PatOlz DMTwo4EFy8slJOFRZlaaBPvKtK96ASnrRQYEccjP38PKA0PV6Nd9ZvM2VC1NvVIi M1x6rvTFQOh1c7vVYPit7diLuftMeo97oUL7UVt1h43EiGq0M3cduL5wKHziLJ19 pUAaLE8Jm+RswiMn6hSiUQGpAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUaNFGZDOV hBbdgafUq/KyQ+59i1YwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYyMzFDLzI4RTgzRTZBQzQzMDExRjA5NkNFOUM0OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGMjMxQy8yOEU4M0U2QUM0MzAxMUYwOTZDRTlDNDlDNEY5QUUwMi9hTkZHWkRP VmhCYmRnYWZVcV9LeVEtNTlpMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhC/MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ9C8MA0EAgAC MAcDBQAkAcLAMA0GCSqGSIb3DQEBCwUAA4IBAQCKc+O4pbwQE9SbHUSHLM0Ulon3 wmG55NBnEtgRqKbmptrzq5rB/CUdoiKCp1SZtqhneTMQYTFfYcWAN6JCx9UJNq+D kk8Z2ihG8wjlMBQ0kKv9r//6geyzgdv8pQBNbDIw1YgAxN5Xew4sCnZmsL1yWt6U kubBJy/mGAp3O4oCEjXM/51RWUTlVSTusKFJ1w9y95JkLjo4JdEurXqQUO1Rt2kx Dm4DaSTBN4m2sQzQZ582L1EePPmQnGrwl73+JtRqu5X3GMj0/JpR1WCSaVlxnylm 95ujV3jnTo9ZFKz3YTK1D+4IfZIRHuihfAqhKReO+NV1GQW2SAqHZnNFf2R4 -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:36 2025 by rpki-client