This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer File: jnhDSe8t33hXX9VMx47YxFyXbL8.cer (raw, json) Hash identifier: EGeoGFvs4oiAP7/CFzOkP5bL89YkAD0toA/aQ3Aup30= Subject key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02778C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 24 Nov 2025 18:26:27 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 139750 IP: 45.253.248.0/21 IP: 103.144.140.0/23 IP: 2405:6e40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161676 (0x2778c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 24 18:26:27 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:9e:09:83:61:01:97:db:c3:ba:20:73:55: 43:ea:ec:fb:ab:2a:38:4a:0a:1b:10:77:99:ee:5c: 98:cf:2c:74:b3:75:bf:a1:8f:de:46:7a:bc:92:a5: 1e:df:7a:72:d8:10:3c:84:dd:3d:41:fd:e5:9e:61: 28:14:b3:06:52:0b:15:5f:9f:fa:29:9b:98:2a:68: b1:9f:cc:4c:29:eb:dd:79:ad:33:fa:cf:2b:40:e5: 3a:c0:87:c0:48:31:65:fe:8b:43:5f:95:8d:3e:8c: ca:3c:3e:7d:32:1e:aa:7d:6c:91:2c:2b:b0:59:29: 74:9a:b3:41:7c:66:b8:eb:ba:8c:aa:90:dd:48:df: 10:ff:a5:0d:5f:a7:37:53:6d:db:f9:2b:55:a8:c1: e5:77:0b:f9:af:4a:b5:77:88:c6:1f:59:85:85:1a: 47:64:3d:07:3c:3a:66:a2:d1:10:c3:3e:e8:c2:a8: 31:b7:f0:33:67:9d:6b:cc:14:bc:d2:72:4c:81:b9: 0a:d7:a7:4b:4e:c7:af:b3:08:02:8b:27:85:eb:70: dc:9d:ef:3d:49:38:0d:64:01:9b:53:4b:a8:2d:83: fe:40:4b:b0:4d:08:7d:f3:fb:55:4f:1a:e6:2b:e6: 33:d6:d5:ec:56:a6:67:e6:bc:a5:63:ff:16:4d:ad: b6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139750 sbgp-ipAddrBlock: critical IPv4: 45.253.248.0/21 103.144.140.0/23 IPv6: 2405:6e40::/32 Signature Algorithm: sha256WithRSAEncryption 29:cd:dc:6a:0c:b1:e4:bb:40:40:4f:31:44:03:13:cc:12:0e: 79:25:15:17:49:6f:71:18:fa:87:68:b9:2b:3f:1a:50:a1:02: 34:ff:8f:b7:f7:99:a4:b9:44:94:83:ba:72:d3:c4:9b:34:3d: 74:9e:0e:d1:c9:4a:51:be:8b:3c:81:f9:2c:67:e2:da:12:1b: 20:a9:f6:5d:56:c5:fb:c0:a2:0e:e9:f1:64:06:f7:d0:0a:fa: fc:84:15:6c:49:ee:f6:02:cf:f6:04:a4:8e:8c:2e:b0:b7:0d: 7b:3d:d3:1e:52:81:e5:20:f4:b0:82:70:59:46:21:43:3e:78: d8:07:9d:c9:16:17:47:2c:56:c9:47:42:ca:d9:aa:70:d3:bc: d5:b0:93:3b:c1:bb:b9:5b:a6:f3:22:af:70:ec:e6:89:82:ba: b1:22:8b:a8:54:4d:4e:17:54:36:83:c1:d5:5c:59:6b:76:5b: c5:ff:46:6f:05:4a:96:04:35:76:70:75:9e:03:dd:a7:06:c3: 9e:07:19:51:00:f0:d6:2c:7c:c9:75:60:13:2a:cf:c8:8b:24: a1:ce:6f:71:7d:e0:b4:61:95:37:94:14:94:6f:17:5a:e1:8e: 56:c9:d6:38:d6:e9:51:d7:8b:2e:dc:f5:18:6a:ad:ed:de:fe: 6d:74:70:ae -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAneMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNDE4MjYyN1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzQwRDYxMTAvBgNVBAUTKDhFNzg0MzQ5RUYyRERGNzg1NzVGRDU0 Q0M3OEVEOEM0NUM5NzZDQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAXZ4Jg2EBl9vDuiBzVUPq7PurKjhKChsQd5nuXJjPLHSzdb+hj95GerySpR7f enLYEDyE3T1B/eWeYSgUswZSCxVfn/opm5gqaLGfzEwp6915rTP6zytA5TrAh8BI MWX+i0NflY0+jMo8Pn0yHqp9bJEsK7BZKXSas0F8ZrjruoyqkN1I3xD/pQ1fpzdT bdv5K1WoweV3C/mvSrV3iMYfWYWFGkdkPQc8Omai0RDDPujCqDG38DNnnWvMFLzS ckyBuQrXp0tOx6+zCAKLJ4XrcNyd7z1JOA1kAZtTS6gtg/5AS7BNCH3z+1VPGuYr 5jPW1exWpmfmvKVj/xZNrbaxAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUjnhDSe8t 33hXX9VMx47YxFyXbL8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM0MEQ2L0NBOEU3RjdFQTU0NDExRUE5NERBMzY4M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDNDBENi9DQThFN0Y3RUE1NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4 dDMzaFhYOVZNeDQ3WXhGeVhiTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiHmMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLf34AwQBZ5CM MA0EAgACMAcDBQAkBW5AMA0GCSqGSIb3DQEBCwUAA4IBAQApzdxqDLHku0BATzFE AxPMEg55JRUXSW9xGPqHaLkrPxpQoQI0/4+395mkuUSUg7py08SbND10ng7RyUpR vos8gfksZ+LaEhsgqfZdVsX7wKIO6fFkBvfQCvr8hBVsSe72As/2BKSOjC6wtw17 PdMeUoHlIPSwgnBZRiFDPnjYB53JFhdHLFbJR0LK2apw07zVsJM7wbu5W6bzIq9w 7OaJgrqxIouoVE1OF1Q2g8HVXFlrdlvF/0ZvBUqWBDV2cHWeA92nBsOeBxlRAPDW LHzJdWATKs/IiyShzm9xfeC0YZU3lBSUbxda4Y5WydY41ulR14su3PUYaq3t3v5t dHCu -----END CERTIFICATE-----Generated at Sat Dec 6 09:34:13 2025 by rpki-client