This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer
File: esbv-wTCtYD1pWtqdGzf4FOvap4.cer (raw, json)
Hash identifier: pS9shy+8vq/9NCMKm6hoUoNsetIbxfLkqUbY0lr8L+g=
Subject key identifier: 7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02735B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 05 Nov 2025 16:46:26 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 138362
IP: 103.131.144.0/22
IP: 2403:cc40::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160603 (0x2735b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 5 16:46:26 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91747E1, serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:b7:bd:72:b9:d6:04:49:5c:26:e7:6e:2d:
45:5f:eb:8a:93:d4:32:89:84:90:14:a1:11:fe:d5:
94:b4:e9:fe:16:0b:d9:62:2b:30:18:de:1e:d9:f0:
62:9f:cb:2e:2a:2e:15:c6:b0:6f:10:97:3d:dd:2c:
99:95:24:31:f4:61:52:6e:32:3c:15:e1:85:df:8e:
39:9f:3a:6c:69:0b:04:e1:57:77:55:c6:1d:a0:a2:
09:7d:65:c6:8e:aa:6c:b7:d2:3c:0c:a3:fb:77:55:
b5:d5:60:05:8a:d4:a4:ce:60:f7:a9:7d:5e:d0:07:
0c:84:c8:ca:d9:c0:cf:82:8f:54:fe:26:30:44:5f:
0b:1a:16:c3:55:63:db:98:15:8a:94:1a:37:1a:ad:
f9:43:b1:41:aa:6f:ba:c2:8a:1b:72:c3:37:34:a3:
7d:68:1b:e3:ac:ca:2c:0d:fc:67:49:7c:20:0d:a8:
2e:a5:7f:53:92:67:aa:b4:99:80:58:2b:ec:ad:64:
a5:0a:da:da:53:59:e7:b0:5f:31:fb:3b:0b:78:11:
06:88:94:84:ff:d0:d5:1c:72:7a:35:4d:fb:c4:ae:
1c:11:2f:86:3c:7d:1d:8d:dd:b8:7d:9a:f7:ae:92:
5e:3d:0d:c7:9e:09:21:de:86:35:df:c7:f4:65:11:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138362
sbgp-ipAddrBlock: critical
IPv4:
103.131.144.0/22
IPv6:
2403:cc40::/32
Signature Algorithm: sha256WithRSAEncryption
9d:1f:2b:fa:1e:55:a5:b0:e6:8e:c8:ce:15:d3:91:8f:af:c3:
74:96:d6:6a:2f:cf:ac:34:35:24:5a:ea:a0:12:d9:6c:64:af:
a8:23:b0:4e:fa:46:7f:60:02:c5:06:10:e7:92:bf:b5:d5:2a:
1b:8d:f9:a5:21:eb:97:60:b4:0e:7b:18:bb:9d:0a:43:3b:c8:
4f:07:37:75:ba:f3:f4:38:2c:42:5b:b3:80:a5:0f:58:6b:a4:
09:38:ed:58:06:ac:ee:f6:b3:18:ec:b4:b1:76:8b:e6:3b:e2:
f8:e3:8d:62:d9:98:13:c2:e0:91:77:75:62:1f:70:6d:a4:45:
3b:3a:4b:c5:54:a5:2c:f1:4e:69:78:9f:31:41:f4:59:04:ec:
29:98:85:63:42:cc:d8:74:e8:9a:f0:03:37:c2:d7:d8:11:83:
8c:64:d8:5d:3b:d8:5b:c9:8c:90:f9:49:db:eb:22:0e:88:ca:
3d:0a:3a:d5:fe:23:f7:e7:85:4a:49:d9:2b:be:0a:7e:0f:98:
85:07:f5:e3:5c:6b:ff:27:37:b8:83:46:cf:75:ae:aa:bf:79:
27:48:10:dd:08:34:8e:b9:5b:c6:18:5a:21:3f:34:bf:0e:d5:
f9:bc:0d:68:d7:31:48:52:b8:8a:fd:a4:ff:5b:7c:74:8d:09:
7e:33:2c:05
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAnNbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTEwNTE2NDYyNloXDTI3MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzQ3RTExMTAvBgNVBAUTKDdBQzZFRkZCMDRDMkI1ODBGNUE1NkI2
QTc0NkNERkUwNTNBRjZBOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCiCLe9crnWBElcJuduLUVf64qT1DKJhJAUoRH+1ZS06f4WC9liKzAY3h7Z8GKf
yy4qLhXGsG8Qlz3dLJmVJDH0YVJuMjwV4YXfjjmfOmxpCwThV3dVxh2gogl9ZcaO
qmy30jwMo/t3VbXVYAWK1KTOYPepfV7QBwyEyMrZwM+Cj1T+JjBEXwsaFsNVY9uY
FYqUGjcarflDsUGqb7rCihtywzc0o31oG+OsyiwN/GdJfCANqC6lf1OSZ6q0mYBY
K+ytZKUK2tpTWeewXzH7Owt4EQaIlIT/0NUccno1TfvErhwRL4Y8fR2N3bh9mveu
kl49DceeCSHehjXfx/RlEZOLAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUesbv+wTC
tYD1pWtqdGzf4FOvap4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc0N0UxL0NFMzQ3MkRFNENDODExRUFBMDU4RUMxNEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3NDdFMS9DRTM0NzJERTRDQzgxMUVBQTA1OEVDMTRDNEY5QUUwMi9lc2J2LXdU
Q3RZRDFwV3RxZEd6ZjRGT3ZhcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhx6MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ4OQMA0EAgAC
MAcDBQAkA8xAMA0GCSqGSIb3DQEBCwUAA4IBAQCdHyv6HlWlsOaOyM4V05GPr8N0
ltZqL8+sNDUkWuqgEtlsZK+oI7BO+kZ/YALFBhDnkr+11SobjfmlIeuXYLQOexi7
nQpDO8hPBzd1uvP0OCxCW7OApQ9Ya6QJOO1YBqzu9rMY7LSxdovmO+L4441i2ZgT
wuCRd3ViH3BtpEU7OkvFVKUs8U5peJ8xQfRZBOwpmIVjQszYdOia8AM3wtfYEYOM
ZNhdO9hbyYyQ+Unb6yIOiMo9CjrV/iP354VKSdkrvgp+D5iFB/XjXGv/Jze4g0bP
da6qv3knSBDdCDSOuVvGGFohPzS/DtX5vA1o1zFIUriK/aT/W3x0jQl+MywF
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:46:25 2025 by rpki-client