This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer (raw, json) Hash identifier: Zv7XmTQCxF29QB4xpjrUk8FJzD//re1baXPbTjVBkf0= Subject key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027FB1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft caRepository: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 20 Dec 2025 12:28:32 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 147307 IP: 103.174.188.0/23 IP: 2001:df7:d180::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163761 (0x27fb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 20 12:28:32 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a5:c2:e7:59:59:a1:72:20:ec:26:01:c2:69: d6:27:03:05:3d:d6:ea:bd:28:e9:bb:c1:26:c2:99: 68:ed:d2:1c:be:fa:b0:94:6d:8a:52:79:16:80:78: d7:ca:a8:21:dd:e7:c3:9e:05:d8:c1:ba:d6:09:29: fc:15:06:b9:e3:bf:21:5b:7f:4a:03:b6:71:bc:42: 0a:1c:46:89:08:54:91:ad:2a:3b:72:89:65:f4:10: 30:50:29:46:72:b0:62:00:c3:06:14:26:f7:7b:cf: 06:c4:bb:31:b0:52:58:72:81:2a:f2:f3:8a:b7:0d: 73:70:b9:69:db:94:4e:68:37:99:54:bf:95:7c:2f: 9b:ee:60:f4:1f:d5:32:81:29:6c:8d:39:b4:7b:53: e7:3b:04:99:d5:b7:de:67:66:46:fa:3e:4c:39:53: 88:4a:a8:60:5a:8d:8b:d0:1c:a9:c6:e9:da:bb:62: 51:b5:8d:83:25:74:3f:51:66:d7:5d:54:f0:aa:c3: 77:d5:ed:14:b8:08:95:60:1b:8e:a8:fb:fa:88:12: 25:29:39:30:39:5a:95:c7:64:34:73:4c:c7:dd:b9: 58:79:99:bf:9b:5b:f2:ac:2b:fa:cc:7c:24:29:4e: 27:5e:08:8c:c5:1a:17:18:4a:65:2e:71:1f:cf:67: fa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 147307 sbgp-ipAddrBlock: critical IPv4: 103.174.188.0/23 IPv6: 2001:df7:d180::/48 Signature Algorithm: sha256WithRSAEncryption b7:49:bd:9c:1a:78:8a:60:15:3a:5c:e5:06:18:cc:85:d6:f6: cb:24:33:87:33:f4:32:5d:1b:d1:73:0c:b4:92:8d:0e:87:72: b1:a3:67:10:cb:3c:6e:ee:7f:4d:10:69:69:29:9b:f3:1a:9b: 9a:65:c1:44:a4:de:d2:19:19:e2:ef:74:03:c3:a6:e6:86:fa: 79:85:b8:81:3d:8f:c2:81:be:e7:eb:c6:99:29:41:5e:06:58: 83:74:39:3c:4f:10:7c:b4:5d:28:6a:97:a9:cd:d2:05:c9:e3: 28:e6:57:21:01:ee:8b:ac:1c:da:09:19:f0:35:cb:6f:42:5c: a0:d4:2e:e8:fe:72:eb:64:73:c9:a1:fc:d9:55:a9:70:b8:72: 94:86:29:43:3b:cb:42:60:d1:af:94:5b:f9:f5:57:42:fb:ae: 2b:ff:a0:d7:43:25:f5:77:5a:54:10:33:4c:f9:2d:f9:9b:64: 35:5d:08:b2:4b:27:b5:85:4b:8f:c8:10:85:3e:84:c0:b9:6a: ac:e6:20:2d:f0:5c:cf:6d:46:ec:9d:5d:82:c5:d4:f4:47:55: 3c:cd:3c:b8:16:06:b6:dc:02:09:3f:b0:b7:9e:d5:38:fa:76: bb:c6:c5:d1:7f:45:9f:8e:fc:05:df:df:e9:1f:2d:cc:bd:0a: 76:2c:82:7b -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAn+xMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMDEyMjgzMloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMUFDQUMxMTAvBgNVBAUTKDkxRTY3OTcyMUVEMUUwOTI3RUJCN0U0 NjFDODA1ODBEMjM5MzU5MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1pcLnWVmhciDsJgHCadYnAwU91uq9KOm7wSbCmWjt0hy++rCUbYpSeRaAeNfK qCHd58OeBdjButYJKfwVBrnjvyFbf0oDtnG8QgocRokIVJGtKjtyiWX0EDBQKUZy sGIAwwYUJvd7zwbEuzGwUlhygSry84q3DXNwuWnblE5oN5lUv5V8L5vuYPQf1TKB KWyNObR7U+c7BJnVt95nZkb6Pkw5U4hKqGBajYvQHKnG6dq7YlG1jYMldD9RZtdd VPCqw3fV7RS4CJVgG46o+/qIEiUpOTA5WpXHZDRzTMfduVh5mb+bW/KsK/rMfCQp TideCIzFGhcYSmUucR/PZ/oTAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUkeZ5ch7R 4JJ+u35GHIBYDSOTWSowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFBQ0FDL0IzQkRBNTY0MzFEMzExRUM4RDNCQkYzMEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExQUNBQy9CM0JEQTU2NDMxRDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3 UjRKSi11MzVHSElCWURTT1RXU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAj9rMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ668MA8EAgAC MAkDBwAgAQ330YAwDQYJKoZIhvcNAQELBQADggEBALdJvZwaeIpgFTpc5QYYzIXW 9sskM4cz9DJdG9FzDLSSjQ6HcrGjZxDLPG7uf00QaWkpm/Mam5plwUSk3tIZGeLv dAPDpuaG+nmFuIE9j8KBvufrxpkpQV4GWIN0OTxPEHy0XShql6nN0gXJ4yjmVyEB 7ousHNoJGfA1y29CXKDULuj+cutkc8mh/NlVqXC4cpSGKUM7y0Jg0a+UW/n1V0L7 riv/oNdDJfV3WlQQM0z5LfmbZDVdCLJLJ7WFS4/IEIU+hMC5aqzmIC3wXM9tRuyd XYLF1PRHVTzNPLgWBrbcAgk/sLee1Tj6drvGxdF/RZ+O/AXf3+kfLcy9CnYsgns= -----END CERTIFICATE-----Generated at Sun Jan 25 02:49:12 2026 by rpki-client