This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer File: lJax_GBjZENyOYzqM4uCJCWRdcs.cer (raw, json) Hash identifier: 4YqjHTlsCXd7wNc/45mto94ugN234M+W2y0/h6Eb0fo= Subject key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027400 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 07 Nov 2025 20:03:56 +0000 Certificate not after: Sat 01 May 2027 00:00:00 +0000 Subordinate resources: AS: 18385 AS: 153526 AS: 153977 IP: 163.61.160.128/26 IP: 203.77.168.0/21 IP: 2401:e9a0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160768 (0x27400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 7 20:03:56 2025 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0d:ed:af:4f:29:aa:eb:ad:11:6e:08:26:70: 7f:ab:d2:8b:0c:cc:0c:eb:30:19:ff:96:28:eb:7e: 34:98:28:ee:7c:14:3e:c7:26:01:c3:5c:92:69:53: 09:23:b9:b3:92:4b:37:4d:78:41:de:26:ac:28:cb: e0:ae:9e:5c:1c:6e:3a:5d:6e:f8:31:02:78:fe:4a: a0:d8:8b:97:c2:c4:67:86:7a:f0:40:9f:34:75:99: 21:c5:8a:07:22:1e:b1:a6:48:4f:1f:e9:d9:1d:6d: ca:94:86:67:4e:1c:40:33:7f:22:24:84:da:e9:47: 4c:dc:10:04:42:8a:5a:3c:1a:f5:4f:fd:cd:74:1e: 2d:ec:df:ad:3d:ba:fa:be:27:0c:70:8a:d3:29:a8: aa:aa:65:cb:ad:49:38:57:e1:9e:59:ba:78:52:06: 9b:e5:a2:8e:c8:bb:a9:60:43:a4:91:ac:c5:12:60: 99:73:40:89:4c:7a:48:c2:06:d5:8c:de:13:9d:36: 27:9f:2f:7d:8b:46:83:fe:fa:b2:78:20:d6:f3:4a: 18:7e:65:26:1b:fe:a1:1e:91:8e:cb:71:5c:81:56: 86:40:7c:f7:97:e1:78:07:58:1b:96:12:f4:2b:32: 8a:8b:69:0d:6c:02:86:dc:4b:71:75:7c:a6:fc:7f: e8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18385 153526 153977 sbgp-ipAddrBlock: critical IPv4: 163.61.160.128/26 203.77.168.0/21 IPv6: 2401:e9a0::/32 Signature Algorithm: sha256WithRSAEncryption 4a:06:83:17:89:bd:9b:40:5c:06:c3:bd:d6:56:d6:39:a7:68: 1d:ca:df:7b:3a:fd:da:dd:78:a7:65:f7:ad:97:25:ed:6c:a3: fe:df:1f:6c:30:1f:77:fb:e5:0a:4a:be:cc:30:2e:f9:3a:66: f1:99:0d:fc:7c:5e:a2:f5:27:be:0a:ea:e1:00:d6:1b:e9:fc: 97:1c:34:79:8e:6c:ff:59:be:c9:4d:cf:d0:c9:77:15:c1:7a: ea:62:0b:cc:36:27:18:96:29:43:81:40:af:18:83:8e:50:4a: 7d:2f:c5:08:7e:11:59:cb:95:42:65:85:70:27:9c:5b:bf:1d: d3:80:c4:d3:ce:74:0b:a2:3d:a1:28:55:d7:1d:6e:b5:43:b2: 04:ec:dc:27:0f:ed:c2:de:2d:09:2d:0e:14:7a:7d:22:71:94: 17:8c:75:ce:90:e2:32:10:b4:06:8b:76:b2:23:0b:64:bd:2b: 8c:be:3c:3d:1f:12:6d:d0:43:8f:6c:44:8b:30:aa:a7:93:06: 4b:33:0c:1d:7b:53:94:c1:80:f7:ea:9e:96:ee:11:f2:53:8e: 6e:5c:76:34:f3:b6:7f:0b:52:bf:4e:6c:2f:ec:d2:fc:56:69: e4:86:d1:67:0e:ab:e0:8e:66:d3:38:f1:98:ad:93:85:27:c7: c5:0e:f8:56 -----BEGIN CERTIFICATE----- MIIGOTCCBSGgAwIBAgIDAnQAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNzIwMDM1NloXDTI3MDUwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjNCNUYxMTAvBgNVBAUTKDk0OTZCMUZDNjA2MzY0NDM3MjM5OENF QTMzOEI4MjI0MjU5MTc1Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZDe2vTymq660RbggmcH+r0osMzAzrMBn/lijrfjSYKO58FD7HJgHDXJJpUwkj ubOSSzdNeEHeJqwoy+CunlwcbjpdbvgxAnj+SqDYi5fCxGeGevBAnzR1mSHFigci HrGmSE8f6dkdbcqUhmdOHEAzfyIkhNrpR0zcEARCilo8GvVP/c10Hi3s3609uvq+ JwxwitMpqKqqZcutSThX4Z5ZunhSBpvloo7Iu6lgQ6SRrMUSYJlzQIlMekjCBtWM 3hOdNiefL32LRoP++rJ4INbzShh+ZSYb/qEekY7LcVyBVoZAfPeX4XgHWBuWEvQr MoqLaQ1sAobcS3F1fKb8f+gdAgMBAAGjggMuMIIDKjAdBgNVHQ4EFgQUlJax/GBj ZENyOYzqM4uCJCWRdcswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYzQjVGL0JBMDBDNTE0MTM2NjExRjA4MkUzQzUwREM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGM0I1Ri9CQTAwQzUxNDEzNjYxMUYwODJFM0M1MERDNEY5QUUwMi9sSmF4X0dC alpFTnlPWXpxTTR1Q0pDV1JkY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIwYIKwYBBQUHAQgBAf8EFDAS oBAwDgICR9ECAwJXtgIDAll5MDUGCCsGAQUFBwEHAQH/BCYwJDATBAIAATANAwUG oz2ggAMEA8tNqDANBAIAAjAHAwUAJAHpoDANBgkqhkiG9w0BAQsFAAOCAQEASgaD F4m9m0BcBsO91lbWOadoHcrfezr92t14p2X3rZcl7Wyj/t8fbDAfd/vlCkq+zDAu +Tpm8ZkN/HxeovUnvgrq4QDWG+n8lxw0eY5s/1m+yU3P0Ml3FcF66mILzDYnGJYp Q4FArxiDjlBKfS/FCH4RWcuVQmWFcCecW78d04DE0850C6I9oShV1x1utUOyBOzc Jw/twt4tCS0OFHp9InGUF4x1zpDiMhC0Bot2siMLZL0rjL48PR8SbdBDj2xEizCq p5MGSzMMHXtTlMGA9+qelu4R8lOOblx2NPO2fwtSv05sL+zS/FZp5IbRZw6r4I5m 0zjxmK2ThSfHxQ74Vg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:25 2025 by rpki-client