This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer File: cJdlx9TTMfTDasa-NH-mah8CNJA.cer (raw, json) Hash identifier: RfSETrlHedSe9WvYPXk8IDGsclWk7uF/MDcpYIZesM4= Subject key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0273EE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 07 Nov 2025 17:10:48 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 23905 AS: 131193 AS: 132003 IP: 103.10.233.0/24 IP: 103.196.108.0/23 IP: 202.36.141.0/24 IP: 2404:2000::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160750 (0x273ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 7 17:10:48 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:91:a4:3d:29:52:ae:cd:21:15:2c:20:f0: ca:f6:9d:92:09:16:ca:e6:c6:3d:55:66:91:61:d0: 06:74:9a:7a:ff:da:0a:e2:f7:08:c5:87:f0:ff:0a: 18:a3:0e:d8:36:3f:ec:9b:03:26:7e:2d:da:82:06: cd:4f:78:8a:41:97:8b:a8:72:26:42:23:38:80:02: 08:49:fe:c0:64:82:5c:c9:56:23:50:66:79:15:41: d5:cf:0b:c0:cf:98:b4:1f:6d:24:7f:82:dc:e8:7b: 8f:93:91:43:af:aa:5d:a1:93:c1:c4:40:e2:87:ee: 9b:09:02:c5:0f:60:2a:71:42:c4:32:b0:9a:68:a0: 97:79:bd:04:4e:6c:cf:66:f1:6d:7b:78:93:c9:27: c6:00:79:ee:12:1c:82:89:09:e1:34:35:6b:af:7c: 2a:38:10:9f:0a:18:75:78:12:75:28:1c:87:c7:96: 25:1b:bb:f3:86:9a:d3:db:f4:96:3e:b2:21:72:3a: 01:b9:b5:36:06:66:db:3b:2a:c1:d6:19:fe:df:8e: b2:fc:db:6a:1a:19:5c:1a:8b:0b:6d:b1:96:19:6e: c4:08:55:b5:1d:d5:7a:62:d0:73:1e:37:da:fc:b9: 1b:b0:6e:18:47:7c:4c:de:fb:de:6a:c4:f7:b1:9f: cb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 23905 131193 132003 sbgp-ipAddrBlock: critical IPv4: 103.10.233.0/24 103.196.108.0/23 202.36.141.0/24 IPv6: 2404:2000::/32 Signature Algorithm: sha256WithRSAEncryption a2:79:af:b4:4a:96:bd:03:2f:9d:3d:14:8d:d8:81:e8:d5:47: de:26:65:be:17:68:12:b9:15:56:c5:6a:65:68:90:f1:83:6a: 1e:55:78:bf:a9:94:e2:10:84:e3:6d:fd:25:e9:7c:67:61:10: ae:0c:0d:f2:78:dd:21:af:7f:9d:63:95:54:ab:3a:c5:fe:71: 6f:10:16:eb:12:67:6e:66:07:84:9f:1c:2c:fd:a6:81:89:78: 27:77:cc:05:2f:30:14:ce:9a:e8:93:01:79:1d:c7:a9:ac:42: ad:11:0c:67:b5:15:0d:8e:3f:9e:c0:aa:06:5f:a1:34:c7:04: 93:e8:4d:c0:7b:1a:d5:75:38:f2:4e:86:16:db:a0:65:06:29: 78:32:1b:54:d4:5d:8e:98:2d:ee:e5:ec:9e:9e:1a:9a:04:78: 86:21:ff:8b:a5:c3:16:49:00:20:c5:84:49:2d:08:f2:e5:b0: 09:55:51:4c:b7:2c:38:fe:e2:d7:06:86:41:30:e7:d3:2f:bd: 4b:bc:0b:46:01:62:92:fb:a7:9c:42:93:1b:bb:d8:89:5a:c6: 73:55:e2:ba:81:e9:be:24:17:9d:cc:0c:7c:14:d9:52:19:72: b8:fe:e8:89:f2:9d:7c:07:74:a2:71:12:7d:05:ab:59:1e:71: 4f:01:33:1f -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgIDAnPuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNzE3MTA0OFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZC RTM0N0ZBNjZBMUYwMjM0OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsZ5GkPSlSrs0hFSwg8Mr2nZIJFsrmxj1VZpFh0AZ0mnr/2gri9wjFh/D/Chij Dtg2P+ybAyZ+LdqCBs1PeIpBl4uociZCIziAAghJ/sBkglzJViNQZnkVQdXPC8DP mLQfbSR/gtzoe4+TkUOvql2hk8HEQOKH7psJAsUPYCpxQsQysJpooJd5vQRObM9m 8W17eJPJJ8YAee4SHIKJCeE0NWuvfCo4EJ8KGHV4EnUoHIfHliUbu/OGmtPb9JY+ siFyOgG5tTYGZts7KsHWGf7fjrL822oaGVwaiwttsZYZbsQIVbUd1Xpi0HMeN9r8 uRuwbhhHfEze+95qxPexn8ubAgMBAAGjggMzMIIDLzAdBgNVHQ4EFgQUcJdlx9TT MfTDasa+NH+mah8CNJAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFFODVFLzBCRUQzNTI2MUQ2RTExRTJCMDRBNjFBRjA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBRTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlU VE1mVERhc2EtTkgtbWFoOENOSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIwYIKwYBBQUHAQgBAf8EFDAS oBAwDgICXWECAwIAeQIDAgOjMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQA ZwrpAwQBZ8RsAwQAyiSNMA0EAgACMAcDBQAkBCAAMA0GCSqGSIb3DQEBCwUAA4IB AQCiea+0Spa9Ay+dPRSN2IHo1UfeJmW+F2gSuRVWxWplaJDxg2oeVXi/qZTiEITj bf0l6XxnYRCuDA3yeN0hr3+dY5VUqzrF/nFvEBbrEmduZgeEnxws/aaBiXgnd8wF LzAUzprokwF5HceprEKtEQxntRUNjj+ewKoGX6E0xwST6E3AexrVdTjyToYW26Bl Bil4MhtU1F2OmC3u5eyenhqaBHiGIf+LpcMWSQAgxYRJLQjy5bAJVVFMtyw4/uLX BoZBMOfTL71LvAtGAWKS+6ecQpMbu9iJWsZzVeK6gem+JBedzAx8FNlSGXK4/uiJ 8p18B3SicRJ9BatZHnFPATMf -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:20 2025 by rpki-client