This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer File: asqbm3MwkHBq_T-FI8wMwYzWjjE.cer (raw, json) Hash identifier: XT0tZ8emf8n1joQ2pXWdKBFoz7iYulVegv++JLNc3w4= Subject key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0278AC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft caRepository: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 13:51:14 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 38562 IP: 103.253.246.0/23 IP: 122.152.48.0/21 IP: 2405:a840::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161964 (0x278ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 27 13:51:14 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:cf:e2:4f:8b:fc:85:0c:d6:77:2b:88:9b: c5:8a:86:70:f1:6b:a3:68:e9:e7:5c:17:f4:40:af: e6:52:2a:47:8b:6f:bd:95:63:05:6d:da:7b:3c:d7: 30:82:2b:d2:e7:61:6f:32:b2:9e:9d:22:ee:dd:be: f5:f5:d1:0e:f0:29:99:d8:ec:cb:7b:62:a6:8f:df: 88:1d:69:9a:35:f1:b6:2e:b3:92:0f:2c:a6:f2:3e: 0d:0a:54:15:2e:e6:dd:80:ed:8b:60:36:aa:98:fc: b7:c6:ef:dd:25:62:ae:18:c7:83:2c:0c:e6:ca:c4: 61:e3:f1:e1:98:91:fd:fd:6a:55:0a:34:8e:80:97: 2c:22:f4:cb:a4:ba:fb:fe:a4:f9:b4:94:82:fe:40: b8:50:27:26:03:50:c0:69:52:3b:09:b7:e4:89:63: 5f:9c:ff:07:9d:f0:9b:78:12:e1:d0:a9:f2:23:86: a2:78:b6:74:d0:02:61:99:2f:80:cd:1e:a0:08:25: 1d:3e:99:97:a5:31:1a:f3:ac:48:e3:fa:ba:95:b6: 89:7d:85:fb:15:3d:ff:9e:9c:78:a2:94:6f:5c:ac: 63:12:80:be:6b:64:82:0d:09:a3:e3:67:67:67:0f: 41:a5:df:d7:67:2f:fd:4a:b2:59:fa:92:c6:fa:8d: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38562 sbgp-ipAddrBlock: critical IPv4: 103.253.246.0/23 122.152.48.0/21 IPv6: 2405:a840::/32 Signature Algorithm: sha256WithRSAEncryption 3d:1e:82:84:80:10:17:d6:77:10:af:3c:8a:47:c7:e2:94:e4: b5:f3:20:f4:81:f4:b0:46:64:2b:17:ab:ad:9b:8c:b2:5b:60: 87:ee:7e:68:aa:3b:c2:ad:e5:60:ac:aa:05:13:1e:93:ca:07: d1:46:36:e6:75:8f:b9:7e:33:43:c4:eb:0e:1a:ec:3a:64:88: 8d:8c:dc:58:97:f4:71:fc:f1:11:c8:c2:c2:34:51:4b:ee:ce: ee:ab:e9:9f:0a:c6:1e:16:e6:01:c9:22:6e:86:d8:05:ea:f9: 89:db:b4:df:d2:a4:96:d0:02:82:f6:af:8a:38:5b:9e:f2:8a: 11:d3:7c:52:f6:b9:23:be:d6:1f:fb:a3:fb:f7:10:c9:a1:7f: ad:01:3e:53:15:d2:6c:d0:6b:ca:18:2e:47:c2:5c:9a:e2:87: 20:95:59:30:ad:b4:1c:bf:13:dd:f3:08:9d:63:e2:6d:95:5a: 46:6e:c5:b6:31:4f:eb:c4:37:ff:e0:56:54:dc:5f:a8:a5:3d: d0:66:d9:ec:11:d8:86:3f:17:1e:44:47:86:ca:4a:b0:1d:7d: d2:7e:32:af:0e:ba:d0:4d:58:9f:8d:ce:ed:50:10:b0:76:3a: 72:20:1d:a0:88:62:99:3a:b3:9a:9e:cd:34:4c:30:35:5b:4f: 0e:ed:55:88 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAnisMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNzEzNTExNFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4 NTIzQ0MwQ0MxOENENjhFMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw68/iT4v8hQzWdyuIm8WKhnDxa6No6edcF/RAr+ZSKkeLb72VYwVt2ns81zCC K9LnYW8ysp6dIu7dvvX10Q7wKZnY7Mt7YqaP34gdaZo18bYus5IPLKbyPg0KVBUu 5t2A7YtgNqqY/LfG790lYq4Yx4MsDObKxGHj8eGYkf39alUKNI6Alywi9Mukuvv+ pPm0lIL+QLhQJyYDUMBpUjsJt+SJY1+c/wed8Jt4EuHQqfIjhqJ4tnTQAmGZL4DN HqAIJR0+mZelMRrzrEjj+rqVtol9hfsVPf+enHiilG9crGMSgL5rZIINCaPjZ2dn D0Gl39dnL/1Ksln6ksb6jcUDAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUasqbm3Mw kHBq/T+FI8wMwYzWjjEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTMwRUE0L0I2MkNDRTgwMjE4NDExRUFBMkQwNDEzQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzMEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNN d2tIQnFfVC1GSTh3TXdZeldqakUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAJaiMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBZ/32AwQDepgw MA0EAgACMAcDBQAkBahAMA0GCSqGSIb3DQEBCwUAA4IBAQA9HoKEgBAX1ncQrzyK R8filOS18yD0gfSwRmQrF6utm4yyW2CH7n5oqjvCreVgrKoFEx6TygfRRjbmdY+5 fjNDxOsOGuw6ZIiNjNxYl/Rx/PERyMLCNFFL7s7uq+mfCsYeFuYBySJuhtgF6vmJ 27Tf0qSW0AKC9q+KOFue8ooR03xS9rkjvtYf+6P79xDJoX+tAT5TFdJs0GvKGC5H wlya4ocglVkwrbQcvxPd8widY+JtlVpGbsW2MU/rxDf/4FZU3F+opT3QZtnsEdiG PxceREeGykqwHX3SfjKvDrrQTVifjc7tUBCwdjpyIB2giGKZOrOans00TDA1W08O 7VWI -----END CERTIFICATE-----Generated at Sat Dec 6 10:47:18 2025 by rpki-client