This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer File: hbfttaaEvj2aYpdZkKcdmY3vUYs.cer (raw, json) Hash identifier: REcpGfCOpMuWPvp7cqajCd2QT+dShsq5V882R1weuG0= Subject key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027746 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 24 Nov 2025 03:31:23 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 135647 IP: 103.77.225.0/24 IP: 103.137.129.0/24 IP: 2001:df5:fa00::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161606 (0x27746) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 24 03:31:23 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:ff:fe:f3:dc:38:73:90:c7:f5:4d:42:02: 03:14:e8:a3:a1:4b:7b:1d:bf:12:8e:5c:49:14:a4: 33:c5:53:3c:d1:47:8f:d5:18:6f:0b:65:5d:14:4f: 2f:7d:47:5a:1e:75:82:bf:7d:99:c2:11:e5:91:d5: 32:f5:c4:59:15:ba:bb:8a:e2:c9:dd:23:46:4f:cb: 34:a7:d4:a1:a6:fb:f7:89:71:44:2c:dc:0b:f7:77: 46:df:b8:31:ab:2b:87:61:d9:51:35:66:42:b2:c7: 3f:3c:56:4f:49:ed:99:ff:42:ff:4a:22:0a:b6:32: 1c:9e:38:b0:ee:48:0e:38:0e:87:e5:d3:aa:2d:e3: f3:1e:e6:86:6d:11:32:a6:21:82:00:93:5e:52:3b: 72:08:8a:8b:6d:74:59:10:47:d2:b4:c8:70:64:06: 02:dd:1c:0b:b9:d2:54:a0:7c:43:0d:57:7d:28:46: e2:ca:66:4d:4b:6b:cc:4f:4c:9c:d5:d0:ed:83:0a: 9e:db:d8:cf:6a:8a:46:68:dd:5b:55:08:f2:70:08: 6e:e8:1b:58:9f:27:66:a0:a1:57:da:05:14:24:59: 1b:f6:83:a1:61:1f:d6:2a:d6:24:09:55:53:f2:99: 2e:bc:16:3d:bc:68:98:e4:a6:b2:a1:12:af:8e:37: 4e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135647 sbgp-ipAddrBlock: critical IPv4: 103.77.225.0/24 103.137.129.0/24 IPv6: 2001:df5:fa00::/48 Signature Algorithm: sha256WithRSAEncryption d9:fb:0b:37:1f:d5:e1:5f:1a:2b:70:28:c2:cf:24:73:36:23: b0:2f:0e:d5:d4:01:c7:d5:7d:e2:9b:13:46:bc:6f:0e:25:05: bf:d7:5e:6e:45:86:8a:1d:5d:5a:9b:51:9e:17:0a:1a:7b:73: 11:52:29:63:81:1c:5f:47:4a:3e:f7:f7:45:06:54:2b:31:75: fa:b3:f2:c5:b0:59:70:b7:3f:98:4a:91:b8:3f:33:c8:c4:65: 70:9f:3e:fd:40:de:09:b0:aa:91:6d:aa:d0:fe:91:3e:35:f5: 10:71:5a:88:c3:5b:77:66:f1:d6:fa:96:8e:e5:5d:60:da:c6: 09:2d:6a:84:00:c5:32:5b:4d:65:4a:32:57:a6:58:0d:5e:fd: c8:d6:a4:27:de:3b:6b:f3:e9:90:ec:92:a3:d7:e6:3e:0e:1b: 9d:a8:07:c6:5c:6c:ce:ab:5a:66:6b:f2:7a:a2:bb:85:07:4e: e1:9f:71:f7:ba:59:fd:c1:03:a7:ba:6d:bb:3a:1b:8c:c3:a2: 99:2c:1a:8f:2d:2a:b9:7c:ed:5d:2e:64:c7:0e:44:ad:e2:db: 75:bc:3e:5e:5d:2b:f9:67:8b:f0:43:3f:ab:f5:0e:8a:d2:f7: 8a:8f:f1:26:91:e6:e2:46:06:49:84:5f:02:6a:ac:cb:a7:18: 3a:8f:ef:9d -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIDAndGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNDAzMzEyM1oXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjYyRTExMTAvBgNVBAUTKDg1QjdFREI1QTY4NEJFM0Q5QTYyOTc1 OTkwQTcxRDk5OERFRjUxOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9G//+89w4c5DH9U1CAgMU6KOhS3sdvxKOXEkUpDPFUzzRR4/VGG8LZV0UTy99 R1oedYK/fZnCEeWR1TL1xFkVuruK4sndI0ZPyzSn1KGm+/eJcUQs3Av3d0bfuDGr K4dh2VE1ZkKyxz88Vk9J7Zn/Qv9KIgq2MhyeOLDuSA44Dofl06ot4/Me5oZtETKm IYIAk15SO3IIiottdFkQR9K0yHBkBgLdHAu50lSgfEMNV30oRuLKZk1La8xPTJzV 0O2DCp7b2M9qikZo3VtVCPJwCG7oG1ifJ2agoVfaBRQkWRv2g6FhH9Yq1iQJVVPy mS68Fj28aJjkprKhEq+ON06hAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUhbfttaaE vj2aYpdZkKcdmY3vUYswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI2MkUxLzBBQkIzNTY4QzhFNjExRjBBQTBDNUI0N0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNjJFMS8wQUJCMzU2OEM4RTYxMUYwQUEwQzVCNDdDNEY5QUUwMi9oYmZ0dGFh RXZqMmFZcGRaa0tjZG1ZM3ZVWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhHfMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ03hAwQAZ4mB MA8EAgACMAkDBwAgAQ31+gAwDQYJKoZIhvcNAQELBQADggEBANn7Czcf1eFfGitw KMLPJHM2I7AvDtXUAcfVfeKbE0a8bw4lBb/XXm5FhoodXVqbUZ4XChp7cxFSKWOB HF9HSj7390UGVCsxdfqz8sWwWXC3P5hKkbg/M8jEZXCfPv1A3gmwqpFtqtD+kT41 9RBxWojDW3dm8db6lo7lXWDaxgktaoQAxTJbTWVKMlemWA1e/cjWpCfeO2vz6ZDs kqPX5j4OG52oB8ZcbM6rWmZr8nqiu4UHTuGfcfe6Wf3BA6e6bbs6G4zDopksGo8t Krl87V0uZMcORK3i23W8Pl5dK/lni/BDP6v1DorS94qP8SaR5uJGBkmEXwJqrMun GDqP750= -----END CERTIFICATE-----Generated at Sat Dec 6 13:12:38 2025 by rpki-client