This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer File: dyhBomMmMU6i5Dg0dd4xttzn26U.cer (raw, json) Hash identifier: ii79Se698PIpIutVOAsNk0SK5wqSPwDBf7h0e0Z+wLI= Subject key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027CE0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 18:46:21 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 139739 IP: 103.68.200.0/23 IP: 103.116.90.0/23 IP: 103.144.117.0/24 IP: 103.163.77.0/24 IP: 2001:df1:c080::/46 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163040 (0x27ce0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 8 18:46:21 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91C9324, serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:43:b6:c6:ca:04:11:96:ca:11:c5:20:c7: 53:02:9c:91:b2:ba:61:9d:51:16:ea:6e:20:2f:f8: fa:90:21:4a:f3:30:cd:ab:46:83:9b:49:f5:17:c1: 13:74:4d:d9:dc:19:aa:72:d3:f4:52:db:c6:bb:99: 82:8a:d1:48:9e:87:90:eb:ae:fa:9f:28:c1:86:f4: 00:d3:17:39:c6:9b:64:e4:11:b9:fe:df:6f:d5:bf: 22:08:d9:37:83:e7:be:82:fa:bb:93:84:f7:cf:b2: ab:43:5b:3e:b4:7c:92:ec:b3:ca:92:07:bc:5c:e1: a4:b8:d8:c0:07:08:27:12:ab:47:de:ce:c6:22:73: f7:e2:ca:52:72:e1:86:2c:0e:29:e0:da:00:83:a3: 47:88:28:bc:e1:f4:51:e1:34:70:2a:4f:ce:a7:fd: c2:db:80:56:71:af:c6:12:01:d0:ba:27:e1:1a:db: af:ef:65:3b:35:73:28:00:d9:c6:03:1c:0f:61:41: bc:ef:99:ad:07:94:f2:40:d2:de:2a:2e:6c:ac:a0: cb:66:bb:3c:b6:8b:06:44:f0:f9:f9:93:67:53:24: e5:ef:e6:b7:ff:f3:41:ec:e3:ae:b4:a4:d6:c0:2e: 0c:6e:32:c5:1c:8e:7b:64:a3:09:87:a1:f8:3e:dd: d0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139739 sbgp-ipAddrBlock: critical IPv4: 103.68.200.0/23 103.116.90.0/23 103.144.117.0/24 103.163.77.0/24 IPv6: 2001:df1:c080::/46 Signature Algorithm: sha256WithRSAEncryption 51:02:c8:94:d3:8a:7a:26:1f:fc:3b:e7:3e:14:9d:4e:e6:73: d6:2d:f3:ab:ed:2c:5e:1d:a5:f9:1d:56:fa:e9:cc:f9:b5:73: 8c:b8:79:06:10:9a:a7:08:53:08:bb:70:99:3e:66:18:11:99: 99:eb:d2:f2:fa:ea:24:03:c7:0e:62:a1:63:20:89:fc:e1:cd: 30:32:50:64:6b:9f:45:e9:f0:b4:62:69:b6:78:4b:7b:d9:48: 43:6a:39:ff:22:41:43:64:50:87:58:fb:88:e5:e5:23:e8:d6: a3:e0:25:e9:b7:39:6a:d9:33:eb:66:3c:79:84:98:8e:4a:c5: 8d:2e:b4:f6:b9:f1:d0:19:88:55:81:3f:b3:f5:40:68:c8:db: 6d:9b:0a:94:08:81:71:37:ad:c3:4d:62:74:fa:9d:44:cb:b4: 36:8d:a0:85:c7:b3:32:f5:15:cd:c3:50:b2:e6:c7:b4:17:c9: 74:35:42:27:29:ce:2d:75:d4:1c:84:c9:92:d1:5a:25:cb:0e: 48:c9:b8:d4:e9:a9:08:8d:d2:e1:02:9d:ce:2f:df:8c:98:67: a9:fa:b4:3c:2f:79:32:3c:f1:7d:50:64:49:dc:b4:69:50:7f: 2d:d2:92:69:a3:49:8b:63:ce:54:10:d8:69:f5:3c:63:06:13: 4f:a0:12:40 -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgIDAnzgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwODE4NDYyMVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzkzMjQxMTAvBgNVBAUTKDc3Mjg0MUEyNjMyNjMxNEVBMkU0Mzgz NDc1REUzMUI2RENFN0RCQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm4UO2xsoEEZbKEcUgx1MCnJGyumGdURbqbiAv+PqQIUrzMM2rRoObSfUXwRN0 TdncGapy0/RS28a7mYKK0Uieh5DrrvqfKMGG9ADTFznGm2TkEbn+32/VvyII2TeD 576C+ruThPfPsqtDWz60fJLss8qSB7xc4aS42MAHCCcSq0fezsYic/fiylJy4YYs Ding2gCDo0eIKLzh9FHhNHAqT86n/cLbgFZxr8YSAdC6J+Ea26/vZTs1cygA2cYD HA9hQbzvma0HlPJA0t4qLmysoMtmuzy2iwZE8Pn5k2dTJOXv5rf/80Hs4660pNbA LgxuMsUcjntkowmHofg+3dB/AgMBAAGjggMyMIIDLjAdBgNVHQ4EFgQUdyhBomMm MU6i5Dg0dd4xttzn26UwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM5MzI0L0VGODNFMzBFRDAwOTExRUM5MkExNkEzQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDOTMyNC9FRjgzRTMwRUQwMDkxMUVDOTJBMTZBM0NDNEY5QUUwMi9keWhCb21N bU1VNmk1RGcwZGQ0eHR0em4yNlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiHbMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQBZ0TIAwQBZ3Ra AwQAZ5B1AwQAZ6NNMA8EAgACMAkDBwIgAQ3xwIAwDQYJKoZIhvcNAQELBQADggEB AFECyJTTinomH/w75z4UnU7mc9Yt86vtLF4dpfkdVvrpzPm1c4y4eQYQmqcIUwi7 cJk+ZhgRmZnr0vL66iQDxw5ioWMgifzhzTAyUGRrn0Xp8LRiabZ4S3vZSENqOf8i QUNkUIdY+4jl5SPo1qPgJem3OWrZM+tmPHmEmI5KxY0utPa58dAZiFWBP7P1QGjI 222bCpQIgXE3rcNNYnT6nUTLtDaNoIXHszL1Fc3DULLmx7QXyXQ1Qicpzi111ByE yZLRWiXLDkjJuNTpqQiN0uECnc4v34yYZ6n6tDwveTI88X1QZEnctGlQfy3Skmmj SYtjzlQQ2Gn1PGMGE0+gEkA= -----END CERTIFICATE-----Generated at Sun Dec 21 06:57:03 2025 by rpki-client