This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer File: hsjX-0IuFSejmUSD0fne8sYKMHI.cer (raw, json) Hash identifier: huuVSecXJAWkFg21SQm2pRx4bsXp76INxF9f4kEg0yY= Subject key identifier: 86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027BA6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 02:53:07 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 45470 IP: 103.23.208.0/22 IP: 203.76.172.0/22 IP: 203.195.120.0/22 IP: 223.25.232.0/21 IP: 2407:ac00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162726 (0x27ba6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 02:53:07 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91BEB11, serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5d:f3:87:8b:d8:a8:a6:51:cc:1a:77:3b:c1: c7:8b:e0:15:a9:88:2a:b6:15:46:e7:60:3e:cd:b9: 31:9c:75:96:24:9c:5b:0f:1c:4e:9b:58:18:bc:1f: 0a:7a:62:aa:8f:8f:53:54:06:e4:31:33:05:7b:89: 7b:9e:50:e7:19:b4:69:fc:fc:23:08:98:06:70:92: d8:0d:3e:b0:f2:12:65:b5:a5:c0:82:2f:cf:8e:08: 73:1d:06:95:ba:67:6f:65:38:67:1a:08:16:8e:40: 4d:d2:2a:bb:24:a0:00:05:8e:1d:a6:d3:cd:aa:64: cb:0e:84:39:30:08:8e:94:f2:ed:f5:f6:82:9b:4c: ef:10:85:f9:c5:68:fb:42:97:e1:9f:d2:1f:eb:e5: b7:da:30:89:7e:37:95:c7:e4:c9:44:cd:c1:e2:4f: ca:5f:6f:82:e4:2b:b0:c0:e7:06:af:e9:7e:a1:07: f1:0e:71:f1:28:53:09:c0:43:ba:bd:37:48:2e:7b: 4e:a7:e6:97:4f:65:b1:09:f0:f8:c9:66:9a:de:9d: fc:67:b8:8f:16:64:c5:b9:66:f8:a1:66:80:26:c4: db:d5:e7:9b:45:43:0d:3b:ed:42:37:fd:01:48:37: d1:ee:60:19:7a:02:04:bd:5c:a4:5b:6f:c9:c4:e2: 3f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45470 sbgp-ipAddrBlock: critical IPv4: 103.23.208.0/22 203.76.172.0/22 203.195.120.0/22 223.25.232.0/21 IPv6: 2407:ac00::/32 Signature Algorithm: sha256WithRSAEncryption 71:b3:20:d9:80:55:ef:49:67:68:c9:d5:f2:67:ab:10:66:54: e1:03:d3:f6:d9:59:ff:1d:8e:ad:43:8a:a4:cd:3f:ba:f9:c1: 02:ba:e1:2f:70:fa:08:5f:e5:0f:56:5f:dd:87:52:5b:41:a1: 74:5e:75:e4:90:e9:9e:f7:c4:42:10:0a:89:c5:69:87:45:d6: 89:4b:02:99:8e:7a:fb:02:3b:82:5e:19:b6:ca:99:40:64:ee: dd:5c:7d:d3:7e:81:2e:39:95:65:d8:5e:6a:f2:4f:6f:9e:0e: aa:f7:a4:65:43:0d:e0:6c:05:9c:b4:47:53:7a:bf:df:64:ea: 70:92:ba:3c:cf:28:2c:03:8b:29:02:0e:e3:72:4f:af:a2:c4: 37:62:47:40:42:55:89:c5:2a:90:fd:df:4d:ce:de:aa:f3:34: 6b:6e:c9:2a:cc:4f:b9:9e:7f:0b:60:b2:6c:7d:00:38:74:cc: 32:86:4a:05:f1:2a:75:80:f3:3d:3a:3e:0f:36:9e:54:f8:1b: 8e:c5:f1:20:ed:5a:c1:47:aa:11:e9:92:b9:e9:23:3e:eb:63: 4b:e7:f3:ff:8d:2e:ae:91:ee:d0:ab:47:20:56:a4:f0:2b:6e: 47:f6:81:04:9b:c4:72:8e:04:5b:65:9d:81:73:85:49:58:db: 6c:ce:d1:a9 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIDAnumMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDAyNTMwN1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkVCMTExMTAvBgNVBAUTKDg2QzhEN0ZCNDIyRTE1MjdBMzk5NDQ4 M0QxRjlERUYyQzYwQTMwNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZXfOHi9ioplHMGnc7wceL4BWpiCq2FUbnYD7NuTGcdZYknFsPHE6bWBi8Hwp6 YqqPj1NUBuQxMwV7iXueUOcZtGn8/CMImAZwktgNPrDyEmW1pcCCL8+OCHMdBpW6 Z29lOGcaCBaOQE3SKrskoAAFjh2m082qZMsOhDkwCI6U8u319oKbTO8QhfnFaPtC l+Gf0h/r5bfaMIl+N5XH5MlEzcHiT8pfb4LkK7DA5wav6X6hB/EOcfEoUwnAQ7q9 N0gue06n5pdPZbEJ8PjJZprenfxnuI8WZMW5ZvihZoAmxNvV55tFQw077UI3/QFI N9HuYBl6AgS9XKRbb8nE4j8lAgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQUhsjX+0Iu FSejmUSD0fne8sYKMHIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJFQjExLzlGNDM1ODdFMUQ5QTExRTI5QUY2RkM4NzA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCRUIxMS85RjQzNTg3RTFEOUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJ dUZTZWptVVNEMGZuZThzWUtNSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALGeMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCZxfQAwQCy0ys AwQCy8N4AwQD3xnoMA0EAgACMAcDBQAkB6wAMA0GCSqGSIb3DQEBCwUAA4IBAQBx syDZgFXvSWdoydXyZ6sQZlThA9P22Vn/HY6tQ4qkzT+6+cECuuEvcPoIX+UPVl/d h1JbQaF0XnXkkOme98RCEAqJxWmHRdaJSwKZjnr7AjuCXhm2yplAZO7dXH3TfoEu OZVl2F5q8k9vng6q96RlQw3gbAWctEdTer/fZOpwkro8zygsA4spAg7jck+vosQ3 YkdAQlWJxSqQ/d9Nzt6q8zRrbskqzE+5nn8LYLJsfQA4dMwyhkoF8Sp1gPM9Oj4P Np5U+BuOxfEg7VrBR6oR6ZK56SM+62NL5/P/jS6uke7Qq0cgVqTwK25H9oEEm8Ry jgRbZZ2Bc4VJWNtsztGp -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:38 2025 by rpki-client