This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer File: fxYazxZAB-j32MdxFaWjnQQ2SPg.cer (raw, json) Hash identifier: 6+7lf1EacvojZ0CxKBsWWc0M6ivXTf/ct4zdKI3QuPU= Subject key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027665 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 19:07:33 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 58452 IP: 103.11.148.0/23 IP: 2402:5f00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161381 (0x27665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 19 19:07:33 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:f9:66:18:5d:ae:33:22:ab:df:7d:54:65: a7:36:50:2a:a6:5d:df:07:d2:77:2d:f6:51:db:7c: 4b:d5:c0:4e:01:10:e7:1a:dd:ab:99:f7:29:47:ea: 3d:a2:c6:66:46:f9:cd:e2:7a:d7:f2:b9:9f:d9:2c: ec:9f:2d:60:29:02:c1:4e:9b:94:2d:e4:77:2b:9f: 91:5b:63:52:28:77:7d:53:7c:fb:66:1f:0e:67:d2: b5:6f:84:03:8b:f7:fc:2a:4c:16:3e:9d:e6:9c:4c: 3f:1f:f0:fc:f3:dc:bd:7f:81:2d:d1:2b:11:9b:e4: 37:1e:0e:fa:c4:27:03:24:ab:e6:aa:e2:8f:cc:19: 5c:c7:66:1d:c0:df:c6:b0:9e:35:d2:a6:9f:43:82: a9:9b:59:6f:56:7d:d5:ba:05:b4:6b:44:10:86:8b: 64:c8:0f:7a:7b:3f:3a:a6:70:5a:90:1a:87:bb:6e: 23:2f:73:c6:8b:b4:c5:37:06:f8:55:f8:23:dd:46: c9:ce:b8:29:2e:70:cc:80:dd:93:ce:74:ec:80:82: 6f:9e:56:08:87:a9:d3:e3:4d:6f:3a:39:28:95:01: 0e:65:a2:8f:ef:3b:b7:b9:8a:e6:3d:30:cc:29:9d: fe:f0:97:72:26:a4:95:33:1d:00:bb:a3:7d:3b:0a: 21:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 58452 sbgp-ipAddrBlock: critical IPv4: 103.11.148.0/23 IPv6: 2402:5f00::/32 Signature Algorithm: sha256WithRSAEncryption 4e:a6:4d:f1:60:75:f4:01:0f:ea:d0:6b:7f:68:a7:e7:ea:9a: 0d:46:58:f2:c4:1e:31:97:83:98:ed:dd:e5:9d:7f:b1:8a:cc: 89:81:65:4b:e5:6e:4c:cc:8e:89:73:5c:61:f6:36:98:0a:ac: db:17:a2:b1:0e:89:0c:26:b8:f3:fb:c1:7b:99:1c:c8:93:b2: 05:6b:db:cc:3b:40:b3:b6:be:b0:e0:33:c5:86:da:5f:94:98: 24:0a:1d:78:05:f2:8a:0c:01:c0:c1:68:49:98:08:0f:37:19: 30:a2:d7:d8:88:c4:ca:43:e7:7c:cf:24:4c:75:56:2e:e6:c8: 41:40:91:59:ef:8d:9d:cc:d0:5c:04:56:a4:84:40:14:bc:69: 4e:8e:bd:b5:1d:af:d3:c3:b4:01:66:48:5d:10:f6:cc:b9:87: f2:12:48:52:d4:28:5c:11:77:f5:ff:f6:ca:1c:a6:d8:72:81: 3d:d8:de:3b:c2:6a:a6:a4:87:f4:5e:7e:4a:34:f0:93:8c:30: 8e:42:0f:5c:25:ed:d9:9d:ca:b4:a3:39:5f:30:4f:b1:52:4d: e1:40:0d:64:4d:e8:3e:1a:46:38:12:5a:ae:51:51:d7:d0:f8: cd:5b:0b:53:9c:fa:a8:3a:36:0a:05:68:ee:a3:ff:53:20:d6: 9b:07:38:b5 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnZlMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExOTE5MDczM1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTI3NUIxMTAvBgNVBAUTKDdGMTYxQUNGMTY0MDA3RThGN0Q4Qzc3 MTE1QTVBMzlEMDQzNjQ4RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHGPlmGF2uMyKr331UZac2UCqmXd8H0nct9lHbfEvVwE4BEOca3auZ9ylH6j2i xmZG+c3ietfyuZ/ZLOyfLWApAsFOm5Qt5Hcrn5FbY1Iod31TfPtmHw5n0rVvhAOL 9/wqTBY+neacTD8f8Pzz3L1/gS3RKxGb5DceDvrEJwMkq+aq4o/MGVzHZh3A38aw njXSpp9DgqmbWW9WfdW6BbRrRBCGi2TID3p7PzqmcFqQGoe7biMvc8aLtMU3BvhV +CPdRsnOuCkucMyA3ZPOdOyAgm+eVgiHqdPjTW86OSiVAQ5loo/vO7e5iuY9MMwp nf7wl3ImpJUzHQC7o307CiHxAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUfxYazxZA B+j32MdxFaWjnQQ2SPgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUyNzVCL0FCMjAyMjMwMURBOTExRTJCMDk1QzRBNDA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenha QUItajMyTWR4RmFXam5RUTJTUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAORUMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZwuUMA0EAgAC MAcDBQAkAl8AMA0GCSqGSIb3DQEBCwUAA4IBAQBOpk3xYHX0AQ/q0Gt/aKfn6poN RljyxB4xl4OY7d3lnX+xisyJgWVL5W5MzI6Jc1xh9jaYCqzbF6KxDokMJrjz+8F7 mRzIk7IFa9vMO0Cztr6w4DPFhtpflJgkCh14BfKKDAHAwWhJmAgPNxkwotfYiMTK Q+d8zyRMdVYu5shBQJFZ742dzNBcBFakhEAUvGlOjr21Ha/Tw7QBZkhdEPbMuYfy EkhS1ChcEXf1//bKHKbYcoE92N47wmqmpIf0Xn5KNPCTjDCOQg9cJe3Zncq0ozlf ME+xUk3hQA1kTeg+GkY4ElquUVHX0PjNWwtTnPqoOjYKBWjuo/9TINabBzi1 -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:29 2025 by rpki-client