This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer File: fvLsMxvWVD0y25gMUGJsBAfKiYI.cer (raw, json) Hash identifier: SWpp/mngb6iJolqyds+tCpRMQ5tzBu2lXtsBe47TFFA= Subject key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02834D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:25:16 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 136035 IP: 103.80.100.0/23 IP: 2001:df7:2200::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 10:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164685 (0x2834d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 2 14:25:16 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a3:3c:6d:69:63:c1:bb:80:08:6e:75:f0:16: 07:a7:e6:bb:0b:19:80:bb:62:ff:5b:6c:5d:95:47: 5f:a4:cd:d3:3a:b5:25:1f:6b:88:69:07:91:49:3b: 6b:11:42:01:22:77:7e:8f:6f:7e:19:30:04:a6:61: 07:1b:26:d5:61:c1:ca:15:0b:7c:8a:3b:cd:fa:a3: 9e:50:3e:bd:e5:98:bb:97:4c:96:08:6a:89:05:6d: e6:c0:07:9e:a4:91:e4:86:a1:ad:59:cc:8f:78:35: f2:86:a5:b3:c8:f2:63:fe:58:c5:8c:18:92:5c:f2: 27:62:d0:8d:b0:dd:c9:08:8a:64:bd:b0:5c:8f:6e: b9:b3:e3:f7:6f:34:a8:60:85:fd:81:61:21:b0:cc: 94:d8:e8:65:58:8b:10:74:52:29:93:2c:85:40:4a: a3:78:41:98:ec:0a:de:b3:16:15:37:00:b3:c5:1e: 93:47:56:8f:f8:02:42:d0:03:b2:c5:ac:e6:20:c8: 3d:0a:63:91:1c:6b:e7:b1:1a:b5:d0:ea:06:be:2f: c4:aa:98:9f:e1:d1:d4:cd:1b:8b:12:5e:ef:e9:42: be:3c:bd:d9:0f:8c:34:92:82:33:20:07:84:7c:41: 81:4e:d9:45:f4:a0:8b:0e:4b:89:db:c4:18:3c:86: 68:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136035 sbgp-ipAddrBlock: critical IPv4: 103.80.100.0/23 IPv6: 2001:df7:2200::/48 Signature Algorithm: sha256WithRSAEncryption 90:38:73:57:46:84:31:92:f2:3d:ec:7e:5a:c6:f1:27:23:33: 42:d2:a4:cb:fc:4c:4b:c6:dc:03:56:15:ad:99:3c:df:4e:15: 37:93:a7:2a:27:5e:35:59:39:7c:8c:30:8c:a9:99:d0:79:78: 77:2d:85:aa:dc:63:04:d6:1e:bc:13:3c:73:cd:1c:e7:dc:13: 28:1a:7b:7f:fa:51:e7:df:33:1f:a1:06:5b:bd:d4:5f:c2:c2: 91:f7:bd:7c:e4:59:28:9a:a4:bb:11:48:1a:99:f8:0b:d1:9f: 96:7e:52:9f:80:4e:80:ae:af:a2:f8:d8:1a:6a:b1:c4:61:68: 5e:94:73:43:0b:e1:fc:1f:0c:ed:86:5e:b3:f0:6a:b3:e2:14: c4:70:85:0b:ba:cb:1a:76:5a:58:d1:be:8f:ec:77:47:fb:1a: 26:8d:48:43:2d:62:85:35:ab:af:b2:fd:33:2b:ce:95:c4:c5: 2b:6c:7e:0e:da:5c:9a:e3:97:34:8a:72:1e:9b:a0:61:5c:f7: a4:a4:ce:ba:98:1b:55:25:d7:0d:cd:3f:e8:25:b4:c8:2f:18: 65:22:3c:6b:0a:6c:92:3e:e7:4c:f4:8a:88:14:b8:64:99:45: c7:fa:2a:6c:31:7a:3e:7f:46:4a:8d:76:89:46:12:50:9a:30: 92:9b:cc:e0 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoNNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMjE0MjUxNloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxRDVFMjMxMTAvBgNVBAUTKDdFRjJFQzMzMUJENjU0M0QzMkRCOTgw QzUwNjI2QzA0MDdDQTg5ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnozxtaWPBu4AIbnXwFgen5rsLGYC7Yv9bbF2VR1+kzdM6tSUfa4hpB5FJO2sR QgEid36Pb34ZMASmYQcbJtVhwcoVC3yKO836o55QPr3lmLuXTJYIaokFbebAB56k keSGoa1ZzI94NfKGpbPI8mP+WMWMGJJc8idi0I2w3ckIimS9sFyPbrmz4/dvNKhg hf2BYSGwzJTY6GVYixB0UimTLIVASqN4QZjsCt6zFhU3ALPFHpNHVo/4AkLQA7LF rOYgyD0KY5Eca+exGrXQ6ga+L8SqmJ/h0dTNG4sSXu/pQr48vdkPjDSSgjMgB4R8 QYFO2UX0oIsOS4nbxBg8hmh7AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUfvLsMxvW VD0y25gMUGJsBAfKiYIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ1RTIzLzg2MkE4M0NBQjA3MzExRUE5MEVDOTk2RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFENUUyMy84NjJBODNDQUIwNzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2 V1ZEMHkyNWdNVUdKc0JBZktpWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhNjMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ1BkMA8EAgAC MAkDBwAgAQ33IgAwDQYJKoZIhvcNAQELBQADggEBAJA4c1dGhDGS8j3sflrG8Scj M0LSpMv8TEvG3ANWFa2ZPN9OFTeTpyonXjVZOXyMMIypmdB5eHctharcYwTWHrwT PHPNHOfcEygae3/6UeffMx+hBlu91F/CwpH3vXzkWSiapLsRSBqZ+AvRn5Z+Up+A ToCur6L42BpqscRhaF6Uc0ML4fwfDO2GXrPwarPiFMRwhQu6yxp2WljRvo/sd0f7 GiaNSEMtYoU1q6+y/TMrzpXExStsfg7aXJrjlzSKch6boGFc96SkzrqYG1Ul1w3N P+gltMgvGGUiPGsKbJI+50z0iogUuGSZRcf6Kmwxej5/RkqNdolGElCaMJKbzOA= -----END CERTIFICATE-----Generated at Sun Jan 25 13:51:45 2026 by rpki-client