This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer File: kBqfnorkBi5SGbdlLY6f7n7FrjM.cer (raw, json) Hash identifier: l1qP5A/QgWRuDFJhlfHeCY8sY6Lh3HpA4qAXbsH/4GM= Subject key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027824 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 26 Nov 2025 02:18:11 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 134717 IP: 103.197.192.0/22 IP: 220.158.244.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161828 (0x27824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 26 02:18:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91F2CE7, serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8c:ab:31:11:59:15:df:57:c2:29:01:ba:e6: cd:0f:ef:7d:cc:14:a6:13:a2:aa:b1:87:5a:2d:e6: d0:f0:57:97:61:d4:c6:9f:b3:d4:c6:66:97:40:4c: 26:c1:74:ae:0a:90:ea:33:2e:71:b1:79:f5:f7:41: 8d:02:d9:30:c9:39:9f:0c:3b:41:6a:f0:ae:ba:86: 16:ab:db:e9:c3:98:8c:05:a6:29:98:4c:3f:11:da: b3:9d:0c:1f:1f:96:1f:ee:e4:23:5d:4b:71:ab:e7: ea:e1:eb:bf:7f:d3:35:63:a0:9e:29:fa:b3:31:20: 0e:3e:15:9c:de:e0:6a:5a:f0:50:39:f4:71:5b:ef: 43:b5:e6:52:26:0c:b5:06:5b:f3:55:ff:5d:cb:a1: 59:26:0c:ff:3f:14:56:66:1e:a0:68:7d:3c:5a:62: 10:d9:b9:fa:d6:97:e6:af:de:41:cd:c2:a8:6e:19: f9:30:8a:e0:0c:12:87:9a:15:db:20:76:46:be:54: c2:e1:9d:ad:ba:50:45:01:5d:57:6e:fa:c7:49:62: f1:2a:96:ad:64:de:33:5f:96:8e:2b:14:f7:d1:f9: 05:48:2b:f2:3d:fc:f5:2d:b9:44:7e:06:2a:4b:00: 51:3e:74:37:ac:f9:b7:5f:be:a2:02:2a:16:ef:98: 13:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134717 sbgp-ipAddrBlock: critical IPv4: 103.197.192.0/22 220.158.244.0/22 Signature Algorithm: sha256WithRSAEncryption 54:5d:c6:ff:32:2d:fa:87:2c:99:37:99:1e:18:b4:35:d6:2f: c4:b1:6a:96:0c:ef:ea:e9:a8:0d:5e:59:73:f4:63:bd:71:e3: 5d:86:dc:fa:9b:5c:6c:95:6e:24:d8:11:1e:af:e0:32:e6:ce: 79:40:bf:cf:7b:32:da:b8:7e:39:df:b6:2e:4b:88:66:82:ad: 7c:29:11:43:4d:25:a9:c0:c9:9a:df:c0:f0:69:7a:20:4f:6e: 13:e0:27:71:49:95:7e:ca:5b:33:78:aa:31:dd:a4:d6:83:4a: 9e:47:4a:b9:9c:30:68:7b:e5:8f:68:00:4f:0f:07:e8:6e:f4: 19:80:b8:a7:1f:7f:cd:97:35:a2:7c:f0:e2:a3:79:69:8c:41: f3:2b:06:b5:83:75:10:e2:77:50:1e:29:f5:c0:a9:70:ce:bc: 10:60:bb:3b:6e:47:d7:f6:24:5a:6e:e4:54:f8:75:00:9f:b8: ff:aa:f9:ff:a0:6e:e3:a3:5d:e5:b7:b0:2c:84:97:78:fa:d4: 93:79:7f:4c:b5:b2:90:c4:3c:80:45:4a:0d:6f:64:b3:47:13: 8b:4f:1d:b9:84:65:18:f3:63:ba:23:91:7d:37:43:4d:5e:9b: 45:16:14:00:08:e7:58:d6:66:76:12:10:60:1d:b0:3c:3c:7d: f5:74:2c:8c -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAngkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNjAyMTgxMVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjJDRTcxMTAvBgNVBAUTKDkwMUE5RjlFOEFFNDA2MkU1MjE5Qjc2 NTJEOEU5RkVFN0VDNUFFMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPjKsxEVkV31fCKQG65s0P733MFKYToqqxh1ot5tDwV5dh1Mafs9TGZpdATCbB dK4KkOozLnGxefX3QY0C2TDJOZ8MO0Fq8K66hhar2+nDmIwFpimYTD8R2rOdDB8f lh/u5CNdS3Gr5+rh679/0zVjoJ4p+rMxIA4+FZze4Gpa8FA59HFb70O15lImDLUG W/NV/13LoVkmDP8/FFZmHqBofTxaYhDZufrWl+av3kHNwqhuGfkwiuAMEoeaFdsg dka+VMLhna26UEUBXVdu+sdJYvEqlq1k3jNflo4rFPfR+QVIK/I9/PUtuUR+BipL AFE+dDes+bdfvqICKhbvmBNhAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUkBqfnork Bi5SGbdlLY6f7n7FrjMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYyQ0U3LzcyRjc1Qjk4NUFERDExRUY4MTJDOTIzRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGMkNFNy83MkY3NUI5ODVBREQxMUVGODEyQzkyM0ZDNEY5QUUwMi9rQnFmbm9y a0JpNVNHYmRsTFk2ZjduN0Zyak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg49MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZ8XAAwQC3J70 MA0GCSqGSIb3DQEBCwUAA4IBAQBUXcb/Mi36hyyZN5keGLQ11i/EsWqWDO/q6agN Xllz9GO9ceNdhtz6m1xslW4k2BEer+Ay5s55QL/PezLauH4537YuS4hmgq18KRFD TSWpwMma38DwaXogT24T4CdxSZV+ylszeKox3aTWg0qeR0q5nDBoe+WPaABPDwfo bvQZgLinH3/NlzWifPDio3lpjEHzKwa1g3UQ4ndQHin1wKlwzrwQYLs7bkfX9iRa buRU+HUAn7j/qvn/oG7jo13lt7AshJd4+tSTeX9MtbKQxDyARUoNb2SzRxOLTx25 hGUY82O6I5F9N0NNXptFFhQACOdY1mZ2EhBgHbA8PH31dCyM -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:35 2025 by rpki-client