This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer File: hHItvUIme93Vm4hBUpklNTHgY2Q.cer (raw, json) Hash identifier: b7M0vRfvewgyx3PPwlzp2Y5tPTXspDwRHB/108Zxpk0= Subject key identifier: 84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0278C4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft caRepository: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 17:14:21 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 137052 IP: 103.103.40.0/23 IP: 2001:df2:fd00::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161988 (0x278c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 27 17:14:21 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A918FEF3, serialNumber=84722DBD42267BDDD59B88415299253531E06364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:f1:d3:ec:38:8d:8f:e1:57:ee:35:cc:00: 6b:54:f6:3c:8f:19:13:50:d1:e8:eb:f5:0f:18:8a: ff:59:a9:83:20:9f:a0:eb:e3:a2:63:c0:77:07:2b: 81:70:25:c7:a1:06:59:13:ce:70:6c:27:fa:35:44: 48:a0:75:7b:96:cb:e5:62:2d:da:ad:e4:d6:01:df: bb:d1:8a:d7:62:d6:24:fb:e7:3b:9a:d3:31:01:53: a0:44:e0:4b:16:5e:4a:65:73:e4:3f:98:3d:ae:95: f6:60:f1:75:b0:f9:31:78:dc:e7:df:05:f8:7a:3d: cb:e4:e4:70:d0:e9:c0:28:53:52:06:5d:22:e9:00: f4:9f:5b:5c:54:db:e7:eb:7e:0e:00:9e:3d:b3:7a: d9:83:f4:f4:d1:69:61:3d:83:af:3e:98:b1:59:3f: 2e:f4:c0:6d:6d:b3:b1:ac:5a:db:56:78:8a:64:7d: b6:26:77:cf:e1:83:5b:e2:e2:9a:d7:7c:23:3f:9b: e2:c9:16:21:03:3c:7e:4b:f2:4a:cc:ca:02:6e:08: 47:ea:4d:14:ce:2f:34:af:0c:d1:d1:1d:f1:00:45: 01:23:41:60:8a:6e:5f:7a:33:70:b3:b4:4f:ae:fa: c7:41:ba:a7:5a:7a:4a:6f:67:eb:5e:95:04:75:9c: c4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137052 sbgp-ipAddrBlock: critical IPv4: 103.103.40.0/23 IPv6: 2001:df2:fd00::/48 Signature Algorithm: sha256WithRSAEncryption 71:3f:93:b7:00:ca:8e:c6:e2:48:a4:1e:f8:68:e4:7e:51:02: e4:b2:df:8f:77:13:9c:8b:0c:5e:e7:1b:79:7f:1d:fa:68:28: 52:9e:01:f5:6b:65:c5:9b:06:8d:bd:f6:eb:48:ed:79:aa:58: cb:05:07:ee:6b:7b:75:19:27:d9:eb:30:ea:ca:61:79:02:7f: db:10:0a:6e:fd:cb:6b:14:12:42:7b:0e:4a:18:fd:e1:d9:0d: 5f:33:e0:0a:9a:69:17:4f:3c:44:7d:2b:23:fe:9b:d9:09:cd: 69:53:c8:c7:ba:aa:a9:a7:f4:60:d5:ff:62:34:f8:51:12:f4: 6b:89:63:ee:ad:30:ec:95:83:9c:c0:1c:f2:05:29:b1:7c:ad: aa:89:46:23:f0:0a:46:fc:86:25:fc:64:0b:6c:f1:fb:c2:89: e2:a3:55:8e:ee:eb:62:0b:b4:a3:1a:93:9c:83:a8:28:ea:a4: ba:ea:24:89:1e:e9:c7:6c:54:56:35:b6:78:7b:3f:1f:96:09: 58:70:ca:b4:5d:64:33:b4:68:0d:35:69:0c:fc:50:4e:9e:87: 41:84:5b:0e:64:f0:ef:b9:84:b6:e2:67:3f:c8:25:95:34:97: 07:13:55:2f:6c:66:23:d9:fe:5d:25:fc:b2:b3:5a:be:d7:94: b5:0a:97:5e -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnjEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNzE3MTQyMVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOEZFRjMxMTAvBgNVBAUTKDg0NzIyREJENDIyNjdCRERENTlCODg0 MTUyOTkyNTM1MzFFMDYzNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5RfHT7DiNj+FX7jXMAGtU9jyPGRNQ0ejr9Q8Yiv9ZqYMgn6Dr46JjwHcHK4Fw JcehBlkTznBsJ/o1REigdXuWy+ViLdqt5NYB37vRitdi1iT75zua0zEBU6BE4EsW Xkplc+Q/mD2ulfZg8XWw+TF43OffBfh6Pcvk5HDQ6cAoU1IGXSLpAPSfW1xU2+fr fg4Anj2zetmD9PTRaWE9g68+mLFZPy70wG1ts7GsWttWeIpkfbYmd8/hg1vi4prX fCM/m+LJFiEDPH5L8krMygJuCEfqTRTOLzSvDNHRHfEARQEjQWCKbl96M3CztE+u +sdBuqdaekpvZ+telQR1nMTnAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUhHItvUIm e93Vm4hBUpklNTHgY2QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThGRUYzL0U2MzM3RDMwQkQzMjExRTdBOUMyQzgxM0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4RkVGMy9FNjMzN0QzMEJEMzIxMUU3QTlDMkM4MTNDNEY5QUUwMi9oSEl0dlVJ bWU5M1ZtNGhCVXBrbE5USGdZMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhdcMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ2coMA8EAgAC MAkDBwAgAQ3y/QAwDQYJKoZIhvcNAQELBQADggEBAHE/k7cAyo7G4kikHvho5H5R AuSy3493E5yLDF7nG3l/HfpoKFKeAfVrZcWbBo299utI7XmqWMsFB+5re3UZJ9nr MOrKYXkCf9sQCm79y2sUEkJ7DkoY/eHZDV8z4AqaaRdPPER9KyP+m9kJzWlTyMe6 qqmn9GDV/2I0+FES9GuJY+6tMOyVg5zAHPIFKbF8raqJRiPwCkb8hiX8ZAts8fvC ieKjVY7u62ILtKMak5yDqCjqpLrqJIke6cdsVFY1tnh7Px+WCVhwyrRdZDO0aA01 aQz8UE6eh0GEWw5k8O+5hLbiZz/IJZU0lwcTVS9sZiPZ/l0l/LKzWr7XlLUKl14= -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:26 2025 by rpki-client