This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer File: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer (raw, json) Hash identifier: sNyGNyp1HXYbo5FoW03EqnaxbG+h6jaJNQC7nE0R1PY= Subject key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0273B0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 06 Nov 2025 18:44:57 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 139736 IP: 103.144.98.0/23 IP: 2405:6ac0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160688 (0x273b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 6 18:44:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E473F, serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:10:ae:da:9f:7f:5b:68:4e:a0:6e:7a:41:ec: 1b:7e:1d:0b:d9:e7:b7:7b:7c:7c:ce:df:5d:65:ca: 18:91:56:cb:8b:4d:bb:fc:dc:cd:6d:f1:1d:e7:40: f9:ee:5f:5d:0e:00:72:ee:53:3c:91:94:9d:25:04: f8:ad:dc:c9:71:2c:03:20:46:bc:e8:70:86:c5:b6: e3:53:82:57:3f:d3:32:3c:e6:78:48:c2:95:ff:85: 60:23:ce:d8:61:9d:eb:de:14:24:2b:c4:ff:f0:3f: 22:17:4b:12:d6:0c:89:c9:a3:6f:a0:64:57:48:b3: 56:c2:6c:61:51:9a:93:82:70:97:9c:78:d9:9b:35: 2d:b6:1e:21:fe:be:db:50:45:2c:c7:41:d6:d6:cf: cc:6a:b4:6d:e8:b2:f7:ff:29:ae:c2:43:13:ab:9d: e1:69:34:6b:27:7c:95:8f:ef:70:8c:29:4b:9b:1b: 48:7f:80:0c:ef:5d:af:d3:23:10:65:6d:05:a1:05: e3:dc:14:a6:76:24:d8:2a:a8:54:a7:b4:2b:48:b8: 8f:19:83:e2:e5:ba:df:b8:7f:1c:53:9a:ea:08:eb: a7:60:40:bb:db:c6:48:08:ed:60:1b:90:e3:17:14: 91:ba:11:9b:cb:58:53:62:97:70:14:23:46:f1:ad: 2b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139736 sbgp-ipAddrBlock: critical IPv4: 103.144.98.0/23 IPv6: 2405:6ac0::/32 Signature Algorithm: sha256WithRSAEncryption 0b:fe:a0:22:78:54:80:0e:93:6c:81:c2:4e:67:16:ea:77:77: 87:75:ae:af:05:6e:23:d9:02:3b:25:76:15:72:cc:31:e0:af: 52:ff:ff:34:d7:f0:34:9f:7a:9c:41:4c:c7:8c:dc:62:b3:3b: 0b:52:aa:9c:81:90:df:2a:67:2e:ea:45:27:52:29:96:14:e9: 28:f6:09:81:6d:d9:06:1f:9b:e9:ae:a0:ca:9b:6d:a2:aa:a2: 87:da:41:17:33:35:1c:54:56:c8:b1:30:fc:4f:46:74:89:dd: 49:de:a9:38:b1:90:78:dd:47:da:14:e5:40:08:38:ce:7c:55: 89:5e:44:ef:80:bc:54:b5:1d:aa:4e:b0:83:8b:c6:75:6e:66: fa:22:34:e1:fb:be:55:26:e0:ea:21:7a:47:f9:1c:c7:85:78: b5:e7:aa:a0:69:ed:25:f1:08:28:d2:e2:31:a4:f0:7b:1f:d3: 18:e1:9d:55:80:62:47:a4:76:a6:c5:a8:ff:e5:f3:65:42:eb: b1:34:b2:a9:74:30:50:22:5a:31:be:4a:f4:b3:06:0e:01:9d: 64:cb:63:e4:41:f6:21:98:b3:23:f0:e5:ac:11:7b:b7:98:23: 16:26:cf:b5:47:52:8a:ca:e0:ce:f7:d7:1f:e0:1d:d3:19:14: 3b:37:23:b3 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnOwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNjE4NDQ1N1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTQ3M0YxMTAvBgNVBAUTKDkzNDFGOUI3MEY3MTRGMTMxQzUyRTFG RTRCRTVFNUFCOEMyNkVCRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSEK7an39baE6gbnpB7Bt+HQvZ57d7fHzO311lyhiRVsuLTbv83M1t8R3nQPnu X10OAHLuUzyRlJ0lBPit3MlxLAMgRrzocIbFtuNTglc/0zI85nhIwpX/hWAjzthh neveFCQrxP/wPyIXSxLWDInJo2+gZFdIs1bCbGFRmpOCcJeceNmbNS22HiH+vttQ RSzHQdbWz8xqtG3osvf/Ka7CQxOrneFpNGsnfJWP73CMKUubG0h/gAzvXa/TIxBl bQWhBePcFKZ2JNgqqFSntCtIuI8Zg+Llut+4fxxTmuoI66dgQLvbxkgI7WAbkOMX FJG6EZvLWFNil3AUI0bxrStjAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUk0H5tw9x TxMcUuH+S+Xlq4wm6+owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU0NzNGL0Q2RTU0MDM4OURCMzExRUJCMDMyQjA0Q0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFNDczRi9ENkU1NDAzODlEQjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5 eFR4TWNVdUgtUy1YbHE0d202LW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiHYMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5BiMA0EAgAC MAcDBQAkBWrAMA0GCSqGSIb3DQEBCwUAA4IBAQAL/qAieFSADpNsgcJOZxbqd3eH da6vBW4j2QI7JXYVcswx4K9S//801/A0n3qcQUzHjNxiszsLUqqcgZDfKmcu6kUn UimWFOko9gmBbdkGH5vprqDKm22iqqKH2kEXMzUcVFbIsTD8T0Z0id1J3qk4sZB4 3UfaFOVACDjOfFWJXkTvgLxUtR2qTrCDi8Z1bmb6IjTh+75VJuDqIXpH+RzHhXi1 56qgae0l8Qgo0uIxpPB7H9MY4Z1VgGJHpHamxaj/5fNlQuuxNLKpdDBQIloxvkr0 swYOAZ1ky2PkQfYhmLMj8OWsEXu3mCMWJs+1R1KKyuDO99cf4B3TGRQ7NyOz -----END CERTIFICATE-----Generated at Sat Dec 6 10:46:53 2025 by rpki-client