This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer File: dEy0Bnedz3q-afF952ykOS2ebsM.cer (raw, json) Hash identifier: RbV0cOVr2SpTWeHXQomuYuliu8mScHGjfBHqZhvy7ys= Subject key identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0273D3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft caRepository: rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 07 Nov 2025 12:36:46 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 103.209.28.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160723 (0x273d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 7 12:36:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A911535B, serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:cb:ae:37:49:22:65:15:8a:32:47:44:c5: ca:30:02:20:00:94:d9:ab:04:13:f7:06:c2:82:cb: 20:20:ee:89:1e:74:16:e1:22:7e:97:d5:69:c8:1f: c8:bc:bf:8e:d3:8b:87:82:f8:6e:b0:4f:2a:d0:c8: 07:3f:ca:c3:09:af:88:0e:06:d2:2f:4c:5e:c4:a9: 98:d5:5a:1c:83:bd:f8:2b:bb:16:40:3e:87:26:c6: c4:3b:90:ec:2f:35:fb:12:f2:24:ef:e2:5b:83:d3: ff:98:c2:70:fc:36:12:0e:6e:da:f0:7a:54:34:17: b4:6f:9f:4e:53:04:39:a3:fe:42:01:1f:d4:a4:54: 42:a4:4d:bb:f3:7a:95:5f:e4:a1:f2:ba:be:d7:a9: e8:a7:8b:12:c4:08:b5:83:44:22:f7:35:45:34:3c: 22:87:48:ca:f9:56:ee:57:7f:80:66:b7:75:e1:56: 70:6c:d2:8c:91:0f:d0:cb:30:98:bf:f6:e0:4a:81: 87:ce:f8:72:3c:92:a0:22:f6:e3:84:56:72:2e:a1: 5a:9b:4b:66:a8:fc:62:2d:58:12:81:3e:a1:1b:b7: ed:2c:68:a2:23:d2:c9:63:00:ba:34:d5:c0:6f:2d: bc:22:bc:c5:86:a1:7b:22:55:85:49:e6:19:f2:4c: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.28.0/22 Signature Algorithm: sha256WithRSAEncryption 23:e1:64:2d:e8:21:ff:12:86:3d:93:c4:43:9a:60:d7:ed:76: d4:23:0b:ed:04:be:d8:39:c6:ed:07:c6:04:01:59:90:e9:20: 17:46:a5:b1:47:70:1c:5e:f3:bf:ea:ec:6d:d5:5f:42:54:51: 76:69:66:1e:34:1e:a0:c9:a4:56:00:6c:8a:53:ad:17:46:61: f8:ac:de:c5:1e:db:04:b8:52:5e:e5:fa:92:d8:11:27:7e:70: 7c:02:7d:db:de:24:a6:15:81:4c:0d:75:c2:13:51:ea:07:17: 2e:62:6f:97:98:c0:9d:f2:ad:78:ed:fa:11:10:d8:1b:78:26: f5:95:18:11:3a:53:13:3b:b2:5e:25:e4:d8:9b:43:86:71:90: ee:f3:dd:dd:50:19:48:3e:1d:a6:0d:62:22:b8:a9:f6:5b:f0: 07:e6:5e:14:a0:f5:00:49:2c:08:40:b9:bc:5e:dd:ec:91:18: a2:2d:9a:f0:2a:ff:e9:08:dd:b4:11:16:45:36:74:99:c4:4d: 5e:ad:ce:68:8d:5d:3e:13:96:b5:bd:79:3f:64:76:81:a4:02: 86:38:3c:3b:fb:c7:c4:54:a7:7b:35:32:97:c2:5c:ee:3a:23: aa:34:d0:02:81:ef:b5:dd:4e:1e:64:40:20:25:7a:d3:83:5e: 3f:fa:89:d7 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAnPTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNzEyMzY0NloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMTUzNUIxMTAvBgNVBAUTKDc0NENCNDA2Nzc5RENGN0FCRTY5RjE3 REU3NkNBNDM5MkQ5RTZFQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC04cuuN0kiZRWKMkdExcowAiAAlNmrBBP3BsKCyyAg7okedBbhIn6X1WnIH8i8 v47Ti4eC+G6wTyrQyAc/ysMJr4gOBtIvTF7EqZjVWhyDvfgruxZAPocmxsQ7kOwv NfsS8iTv4luD0/+YwnD8NhIObtrwelQ0F7Rvn05TBDmj/kIBH9SkVEKkTbvzepVf 5KHyur7XqeinixLECLWDRCL3NUU0PCKHSMr5Vu5Xf4Bmt3XhVnBs0oyRD9DLMJi/ 9uBKgYfO+HI8kqAi9uOEVnIuoVqbS2ao/GItWBKBPqEbt+0saKIj0sljALo01cBv LbwivMWGoXsiVYVJ5hnyTAB1AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUdEy0Bned z3q+afF952ykOS2ebsMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE1MzVCLzU2Njc5Mjk2MUQ5QTExRTI4QUMxN0Q4NzA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExNTM1Qi81NjY3OTI5NjFEOUExMUUyOEFDMTdEODcwOEIwMkNEMi9kRXkwQm5l ZHozcS1hZkY5NTJ5a09TMmVic00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAJn0RwwDQYJKoZIhvcNAQELBQADggEBACPhZC3oIf8Shj2TxEOa YNftdtQjC+0Evtg5xu0HxgQBWZDpIBdGpbFHcBxe87/q7G3VX0JUUXZpZh40HqDJ pFYAbIpTrRdGYfis3sUe2wS4Ul7l+pLYESd+cHwCfdveJKYVgUwNdcITUeoHFy5i b5eYwJ3yrXjt+hEQ2Bt4JvWVGBE6UxM7sl4l5NibQ4ZxkO7z3d1QGUg+HaYNYiK4 qfZb8AfmXhSg9QBJLAhAubxe3eyRGKItmvAq/+kI3bQRFkU2dJnETV6tzmiNXT4T lrW9eT9kdoGkAoY4PDv7x8RUp3s1MpfCXO46I6o00AKB77XdTh5kQCAletODXj/6 idc= -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:19 2025 by rpki-client