This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer File: gZlJOtJlrS3HM5b2ugtu1sxB4Qs.cer (raw, json) Hash identifier: KjaHQ+uOqSurkjah65lbEu6X9HCRlUil0rDVkgBqICc= Subject key identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0278D7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 20:23:49 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 134719 IP: 103.197.216.0/22 IP: 220.158.252.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162007 (0x278d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 27 20:23:49 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91CDC32, serialNumber=8199493AD265AD2DC73396F6BA0B6ED6CC41E10B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:b4:83:c8:f4:47:6d:73:84:b0:19:33:0b: 2f:63:28:b0:5c:c2:f6:a9:6a:3c:af:db:47:94:4e: 85:6f:e2:bd:ca:9e:31:06:b4:4f:7c:18:3d:cb:c5: 4c:54:a7:68:f2:b8:0b:0c:3b:7c:cb:62:95:be:4b: a2:5e:6a:f9:3e:f7:31:a0:06:28:cc:6d:f9:8a:ac: 8b:74:17:1c:4d:b7:18:fe:f1:e2:65:b5:b9:50:41: e8:8f:7f:08:c8:62:d7:92:a5:04:62:69:f1:25:1c: 34:78:d1:a4:bf:9e:29:5f:bd:35:7a:31:be:c3:fe: 9d:68:94:b2:e4:21:0f:53:8f:79:0d:3c:67:68:03: 1d:ae:57:31:7d:4f:89:cb:80:94:38:d8:0f:d3:c0: cb:8c:ad:af:f6:00:07:3a:b6:83:01:e7:5f:a2:a7: 03:35:2f:cf:d0:8e:86:34:5a:64:50:f6:04:2c:99: e2:00:19:44:88:42:92:3f:b2:03:17:05:8d:2f:4e: 3b:73:17:bc:61:41:0f:7c:93:d2:f1:64:2f:85:f4: 46:a0:4c:9f:cf:e7:38:5f:fb:d9:7a:17:93:58:2c: 9d:6c:ed:54:25:11:9c:c5:37:76:ba:77:a3:77:8b: 6e:98:c8:00:2c:28:9f:06:38:03:66:9c:97:ee:7c: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:99:49:3A:D2:65:AD:2D:C7:33:96:F6:BA:0B:6E:D6:CC:41:E1:0B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CDC32/0F0928545ADE11EFA5C9A240C4F9AE02/gZlJOtJlrS3HM5b2ugtu1sxB4Qs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134719 sbgp-ipAddrBlock: critical IPv4: 103.197.216.0/22 220.158.252.0/22 Signature Algorithm: sha256WithRSAEncryption 08:d7:5c:e4:b1:d4:4e:43:f4:46:73:e1:79:b5:e9:97:9d:bc: 66:59:ad:99:6b:b4:2f:22:4a:f0:05:6e:10:4b:9e:06:c2:bd: 88:9b:e7:00:d1:73:a9:b8:1b:5b:b1:77:07:f0:e2:ae:0d:51: 43:9d:a8:2e:6a:57:74:73:ea:8a:24:0c:ab:1d:8a:ca:f1:31: a8:36:9b:b9:73:6a:d4:3d:ed:94:09:34:c7:cf:5f:19:5e:50: 42:8e:fc:00:8a:a7:00:63:40:42:39:87:5e:37:7e:74:d8:12: 0c:34:e9:f1:8b:11:e3:53:fb:96:1a:2b:91:07:b5:f3:1c:d8: 47:fd:c0:44:1c:68:73:97:f6:fd:a8:85:c7:7c:5a:46:2a:24: 6b:cd:f4:85:0f:95:c5:b3:2a:bc:79:be:ec:94:2b:6f:59:f7: 91:f1:e3:45:8a:25:fd:d0:ae:a7:3c:8e:16:e1:13:9b:a1:15: 1e:4e:52:9a:1b:87:5a:c6:12:bd:8c:80:f7:c0:07:4d:a6:7d: f0:8e:45:36:81:f9:22:4f:bb:59:a8:77:93:03:c4:47:9f:8c: 8c:8a:61:c8:5f:06:06:96:04:05:fb:4c:01:bf:27:d8:5c:6c: 63:ea:6b:3a:fe:32:63:93:ec:93:33:bd:b0:bb:a6:54:8d:ee: 1d:b7:ed:8c -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAnjXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNzIwMjM0OVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQ0RDMzIxMTAvBgNVBAUTKDgxOTk0OTNBRDI2NUFEMkRDNzMzOTZG NkJBMEI2RUQ2Q0M0MUUxMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHQbSDyPRHbXOEsBkzCy9jKLBcwvapajyv20eUToVv4r3KnjEGtE98GD3LxUxU p2jyuAsMO3zLYpW+S6Jeavk+9zGgBijMbfmKrIt0FxxNtxj+8eJltblQQeiPfwjI YteSpQRiafElHDR40aS/nilfvTV6Mb7D/p1olLLkIQ9Tj3kNPGdoAx2uVzF9T4nL gJQ42A/TwMuMra/2AAc6toMB51+ipwM1L8/QjoY0WmRQ9gQsmeIAGUSIQpI/sgMX BY0vTjtzF7xhQQ98k9LxZC+F9EagTJ/P5zhf+9l6F5NYLJ1s7VQlEZzFN3a6d6N3 i26YyAAsKJ8GOANmnJfufNONAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUgZlJOtJl rS3HM5b2ugtu1sxB4QswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNEQzMyLzBGMDkyODU0NUFERTExRUZBNUM5QTI0MEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDREMzMi8wRjA5Mjg1NDVBREUxMUVGQTVDOUEyNDBDNEY5QUUwMi9nWmxKT3RK bHJTM0hNNWIydWd0dTFzeEI0UXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg4/MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZ8XYAwQC3J78 MA0GCSqGSIb3DQEBCwUAA4IBAQAI11zksdROQ/RGc+F5temXnbxmWa2Za7QvIkrw BW4QS54Gwr2Im+cA0XOpuBtbsXcH8OKuDVFDnaguald0c+qKJAyrHYrK8TGoNpu5 c2rUPe2UCTTHz18ZXlBCjvwAiqcAY0BCOYdeN3502BIMNOnxixHjU/uWGiuRB7Xz HNhH/cBEHGhzl/b9qIXHfFpGKiRrzfSFD5XFsyq8eb7slCtvWfeR8eNFiiX90K6n PI4W4ROboRUeTlKaG4daxhK9jID3wAdNpn3wjkU2gfkiT7tZqHeTA8RHn4yMimHI XwYGlgQF+0wBvyfYXGxj6ms6/jJjk+yTM72wu6ZUje4dt+2M -----END CERTIFICATE-----Generated at Sat Dec 6 09:38:09 2025 by rpki-client