This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer File: jl9h83_7iMhDbtU8A0POq7F06wg.cer (raw, json) Hash identifier: lM5r0SK+n0vs2qW8g6/D+G9CFkDeG6PW/K0tiZ8DEXI= Subject key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027878 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 00:29:24 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 141410 IP: 103.158.110.0/24 IP: 2001:df5:4d80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161912 (0x27878) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 27 00:29:24 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91BC91C, serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:11:7f:e9:3d:27:58:c5:ca:6a:7c:36:35:eb: 07:81:99:fe:51:7d:8e:a2:e6:a4:ff:55:e2:18:83: 50:2c:d4:5f:2a:f9:0a:ab:1d:9a:85:b8:7b:9a:80: 98:fc:a0:81:6e:c3:33:1c:cb:3e:07:0a:43:a4:d5: 7c:1f:f2:09:0f:57:1c:bd:05:53:5a:7f:2d:13:90: aa:50:d9:f5:f6:d8:74:37:15:49:a8:38:82:17:b2: 88:0e:2b:59:fb:f1:f4:aa:19:de:8d:16:9e:82:0d: 9f:9a:c7:a1:f1:f1:1c:95:5e:71:93:da:5d:19:81: 2a:ec:45:b5:de:86:1a:93:64:0a:cc:56:cf:29:37: 89:8d:39:5f:71:04:81:08:7a:79:85:be:9c:4b:0b: 5b:20:51:b9:40:d7:75:7d:bd:55:fd:62:a8:bd:a4: 5e:1e:1f:dd:6e:3e:dd:65:44:76:e9:f9:64:08:4e: 9e:dd:40:cf:15:6e:6f:95:97:8b:0d:e3:75:73:15: ac:11:9f:a0:21:a7:d8:32:a1:2c:b9:92:45:5a:db: 30:0e:f6:36:ef:be:4f:86:92:94:65:9f:ce:03:d8: cd:49:63:8a:64:14:9a:55:cb:8c:15:32:66:f7:df: 37:f4:77:5b:37:e2:0a:ce:8c:fc:c2:83:8a:66:8a: f9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141410 sbgp-ipAddrBlock: critical IPv4: 103.158.110.0/24 IPv6: 2001:df5:4d80::/48 Signature Algorithm: sha256WithRSAEncryption 5a:74:f5:41:fa:d4:d3:79:45:83:06:6b:3b:45:56:02:7c:5a: 75:20:fa:2d:69:1e:f3:c1:62:9c:1f:22:01:64:ca:00:3d:d7: 07:88:a9:88:67:da:21:11:8e:a6:76:2e:fb:67:65:fe:fe:07: c1:77:1f:b4:49:58:60:7e:8e:4a:44:e5:ab:95:b1:07:b0:ef: 36:7c:8d:f1:a8:f1:a4:9f:8e:7a:59:ee:03:bf:c8:65:f5:70: d3:af:2b:81:f1:4e:dc:ca:77:14:cc:21:a6:e5:5e:a8:6a:74: 3a:7e:58:d6:fd:39:ac:e9:49:83:75:8c:2c:a5:9f:f0:cf:ed: bd:fc:63:10:c4:83:34:09:44:0b:e1:e0:aa:4e:cf:3a:18:64: a2:03:a2:5f:b6:db:a8:10:c8:62:9a:d3:93:e0:7a:0a:81:07: d4:f4:69:ce:9e:fd:d7:23:ab:50:12:83:f3:52:69:a1:78:a2: 30:3a:70:52:ef:fa:89:0d:1d:53:ab:5b:38:fb:9b:29:ed:45: ec:6a:39:b2:f1:24:7f:15:c4:bc:88:c8:6a:77:cd:b6:be:3a: da:c5:df:60:bd:6b:a5:ae:ad:41:0f:0f:aa:cb:b7:27:30:83: f4:25:1e:df:74:dd:31:9f:57:74:d1:59:e3:47:b2:4d:42:f3: 7a:28:57:d0 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnh4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNzAwMjkyNFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUz QzAzNDNDRUFCQjE3NEVCMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7EX/pPSdYxcpqfDY16weBmf5RfY6i5qT/VeIYg1As1F8q+QqrHZqFuHuagJj8 oIFuwzMcyz4HCkOk1Xwf8gkPVxy9BVNafy0TkKpQ2fX22HQ3FUmoOIIXsogOK1n7 8fSqGd6NFp6CDZ+ax6Hx8RyVXnGT2l0ZgSrsRbXehhqTZArMVs8pN4mNOV9xBIEI enmFvpxLC1sgUblA13V9vVX9Yqi9pF4eH91uPt1lRHbp+WQITp7dQM8Vbm+Vl4sN 43VzFawRn6Ahp9gyoSy5kkVa2zAO9jbvvk+GkpRln84D2M1JY4pkFJpVy4wVMmb3 3zf0d1s34grOjPzCg4pmivmbAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUjl9h83/7 iMhDbtU8A0POq7F06wgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJDOTFDLzNBNUVBQjQ2OTBBRjExRUQ4NzM5RTMxQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCQzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNf N2lNaERidFU4QTBQT3E3RjA2d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAihiMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ55uMA8EAgAC MAkDBwAgAQ31TYAwDQYJKoZIhvcNAQELBQADggEBAFp09UH61NN5RYMGaztFVgJ8 WnUg+i1pHvPBYpwfIgFkygA91weIqYhn2iERjqZ2LvtnZf7+B8F3H7RJWGB+jkpE 5auVsQew7zZ8jfGo8aSfjnpZ7gO/yGX1cNOvK4HxTtzKdxTMIablXqhqdDp+WNb9 OazpSYN1jCyln/DP7b38YxDEgzQJRAvh4KpOzzoYZKIDol+226gQyGKa05PgegqB B9T0ac6e/dcjq1ASg/NSaaF4ojA6cFLv+okNHVOrWzj7myntRexqObLxJH8VxLyI yGp3zba+OtrF32C9a6WurUEPD6rLtycwg/QlHt903TGfV3TRWeNHsk1C83ooV9A= -----END CERTIFICATE-----Generated at Sat Dec 6 09:34:13 2025 by rpki-client