This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer File: dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer (raw, json) Hash identifier: 2GsOPtnXKaEQ8TK4gtl9FSKoAR+oFSFsifNtX/g1xno= Subject key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027ADD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 17:58:40 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 150427 IP: 103.96.88.0/24 IP: 2001:df1:8ac0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162525 (0x27add) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 17:58:40 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91828F3, serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1b:8c:8f:9f:d1:ad:34:cb:6f:7d:9d:2c:8f: 3b:b8:e8:ff:b2:ad:af:d4:ee:7a:f6:18:de:61:9b: 6f:01:9f:0a:8a:8d:f6:88:2c:19:a6:11:d7:5b:e1: 48:f0:a9:34:84:81:25:3a:a9:cd:ff:18:9e:d4:fe: 60:c8:68:ba:81:4c:da:ef:b5:c5:22:2e:22:b9:b9: 42:b2:c0:2f:e0:34:96:d8:5d:6a:10:ff:77:c5:41: bb:aa:9f:b7:a6:2f:24:9c:03:14:df:cf:d2:b5:16: 3c:7f:64:c8:d3:89:c3:a9:dc:d7:7e:40:b6:f8:49: b0:9e:b8:01:22:26:61:d5:e8:f1:dd:1d:26:c2:4f: af:42:0f:4e:60:cc:ab:27:4e:6d:6f:49:dd:db:9f: 00:5a:11:a3:fa:ef:a9:35:bf:ec:b3:cd:b6:31:64: 41:f1:28:10:7c:0c:49:14:c0:cf:81:87:85:d0:a0: bc:93:09:ff:db:46:55:15:a9:43:01:91:3c:79:1f: d5:f3:1a:8c:88:6b:77:7c:c3:e7:a4:88:2e:07:99: 22:3e:fa:46:ea:44:50:a5:28:43:1a:15:f0:88:46: 77:3d:11:10:0c:ad:46:5e:69:f0:08:09:fc:1f:a3: 09:4a:ea:e4:53:ab:f3:0e:00:e3:08:73:b5:6d:2d: ef:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 150427 sbgp-ipAddrBlock: critical IPv4: 103.96.88.0/24 IPv6: 2001:df1:8ac0::/48 Signature Algorithm: sha256WithRSAEncryption bc:42:57:f7:c1:c5:62:0c:6a:ac:7d:43:5b:44:fd:a7:14:a4: 39:3c:b9:cc:86:5b:19:72:16:60:79:fa:36:3b:d4:4e:d7:bd: c3:16:af:b6:31:8c:4b:ab:ab:45:75:cc:c2:10:a4:0f:83:f6: 65:74:ac:03:72:2c:80:f9:22:eb:9a:38:0e:48:e3:e2:26:35: bd:e2:c1:51:4d:d6:fc:cb:01:b5:47:e5:2a:70:d5:28:c1:8a: 90:fb:01:e8:7e:9f:9d:2a:f1:1f:27:ad:fd:a4:fa:a8:92:e9: 48:e1:22:2c:35:a6:05:88:dc:d3:2e:be:8e:d0:fc:66:0a:22: dd:37:73:22:ac:6b:b1:43:c1:84:6d:c7:0f:6c:78:06:01:bb: ac:30:9f:76:ad:66:a6:bb:3b:69:d0:95:f7:be:04:24:f9:66: 90:3a:af:10:af:d9:e7:ac:90:07:cf:cd:9e:0b:94:89:e8:22: 67:d9:f2:aa:ae:d8:e7:5f:e0:fa:53:97:8f:01:ef:58:7c:07: f3:80:74:9d:ee:c3:0e:b3:14:a1:c5:81:ac:3a:94:9e:ce:08: 84:21:10:99:20:73:4e:26:bb:a2:c9:7b:0d:00:5e:c2:79:31: 25:12:98:37:e4:28:a6:89:07:73:64:c5:15:9d:f4:f2:b9:00: 90:dc:3e:13 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnrdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjE3NTg0MFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxODI4RjMxMTAvBgNVBAUTKDc2NjYxMDA4REFDODkyODRDNTM3RjJE Q0UwQTkyMEJBOTRFMDc4Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjG4yPn9GtNMtvfZ0sjzu46P+yra/U7nr2GN5hm28BnwqKjfaILBmmEddb4Ujw qTSEgSU6qc3/GJ7U/mDIaLqBTNrvtcUiLiK5uUKywC/gNJbYXWoQ/3fFQbuqn7em LyScAxTfz9K1Fjx/ZMjTicOp3Nd+QLb4SbCeuAEiJmHV6PHdHSbCT69CD05gzKsn Tm1vSd3bnwBaEaP676k1v+yzzbYxZEHxKBB8DEkUwM+Bh4XQoLyTCf/bRlUVqUMB kTx5H9XzGoyIa3d8w+ekiC4HmSI++kbqRFClKEMaFfCIRnc9ERAMrUZeafAICfwf owlK6uRTq/MOAOMIc7VtLe/FAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUdmYQCNrI koTFN/Lc4KkgupTgeM8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTgyOEYzL0MyNzk1OEI4QTVDRDExRURBRUNFMTI3OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4MjhGMy9DMjc5NThCOEE1Q0QxMUVEQUVDRTEyNzhDNEY5QUUwMi9kbVlRQ05y SWtvVEZOX0xjNEtrZ3VwVGdlTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkubMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ2BYMA8EAgAC MAkDBwAgAQ3xisAwDQYJKoZIhvcNAQELBQADggEBALxCV/fBxWIMaqx9Q1tE/acU pDk8ucyGWxlyFmB5+jY71E7XvcMWr7YxjEurq0V1zMIQpA+D9mV0rANyLID5Iuua OA5I4+ImNb3iwVFN1vzLAbVH5Spw1SjBipD7Aeh+n50q8R8nrf2k+qiS6UjhIiw1 pgWI3NMuvo7Q/GYKIt03cyKsa7FDwYRtxw9seAYBu6wwn3atZqa7O2nQlfe+BCT5 ZpA6rxCv2eeskAfPzZ4LlInoImfZ8qqu2Odf4PpTl48B71h8B/OAdJ3uww6zFKHF gaw6lJ7OCIQhEJkgc04mu6LJew0AXsJ5MSUSmDfkKKaJB3NkxRWd9PK5AJDcPhM= -----END CERTIFICATE-----Generated at Sat Dec 6 20:08:00 2025 by rpki-client