This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer File: lKlQswO0aQDdWjBhAwyJpIloA68.cer (raw, json) Hash identifier: FTF+RNO5+cOg8H2EzfCArq7+CzhmV9yrq5s9ldCtYFs= Subject key identifier: 94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02788B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 02:35:40 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 133894 IP: 43.230.209.0/24 IP: 103.46.208.0/22 IP: 103.96.233.0/24 IP: 103.146.104.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161931 (0x2788b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 27 02:35:40 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91BAD2D, serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f9:fd:59:d7:ca:6e:c5:db:a0:cd:53:18:e5: 96:ca:2f:dd:44:b8:47:83:f0:26:e7:a7:4f:3d:40: 66:d0:49:c5:e6:51:0b:4a:52:aa:85:00:f9:34:9c: 09:d4:e9:0c:33:e8:fa:11:e5:c8:73:96:86:c3:97: 9c:1e:1a:d8:2a:dc:3a:c3:be:80:ca:0c:97:2f:d2: c5:8e:0f:54:78:1a:79:2a:b0:97:83:e0:53:83:b3: 6b:37:10:71:00:73:e3:e1:47:a0:d7:4f:59:8b:34: 51:62:33:b3:c0:ba:09:e9:33:9e:ca:4e:8b:32:d0: a7:26:2a:c3:91:c4:b6:16:19:3e:c1:6a:ef:ba:5e: 1c:89:3e:9c:9a:d3:a6:ca:53:87:75:0e:f4:9e:6b: 03:9b:46:dc:2b:59:b8:fb:ab:4c:7b:f6:d3:9d:55: 95:26:09:da:a4:28:c5:e1:8d:b1:cd:2e:7f:d6:d4: 83:c0:67:a4:7a:57:21:f6:1b:fe:50:9c:e6:39:51: 91:68:13:a6:40:eb:b3:f0:f3:b9:ba:fe:ce:c2:9f: 14:ba:ec:27:07:c7:8e:6d:83:83:8f:20:de:bd:08: ef:b7:80:f3:99:81:f6:7e:85:6e:c7:3b:0f:c9:6d: 73:3b:cb:37:df:4e:1e:83:57:9c:b2:51:4b:e8:64: 99:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133894 sbgp-ipAddrBlock: critical IPv4: 43.230.209.0/24 103.46.208.0/22 103.96.233.0/24 103.146.104.0/24 Signature Algorithm: sha256WithRSAEncryption 04:a0:9e:f2:fa:64:73:11:79:e2:93:7a:7b:a9:9d:a8:d5:be: d2:29:59:30:e8:38:a8:9b:61:ef:2a:fa:39:a7:26:ee:89:77: 11:36:fc:5d:c4:e0:45:e9:ef:6e:90:71:4f:eb:02:ce:b6:8a: 63:6b:02:7b:10:2d:d6:64:73:8d:c5:e0:ef:86:f4:43:6c:dc: 60:04:05:c0:a3:90:aa:3d:31:35:49:dc:2b:73:47:5d:6b:4c: 33:2c:d6:70:41:6c:f5:81:d5:c8:04:80:dd:b5:0c:7b:e6:e7: ea:34:93:1b:6e:a9:2f:2e:2b:1e:07:b0:d8:31:de:77:03:50: d4:57:16:3e:a3:d8:31:b7:76:ea:c0:c0:7d:e4:ac:5d:95:7d: 6c:e0:9b:1d:c9:c1:a4:62:46:94:d1:4f:94:6e:c3:61:7d:19: 43:e8:b6:e9:cd:88:f7:10:78:f6:95:0e:95:92:1e:3a:32:aa: 93:37:83:93:06:b1:7a:34:55:a7:d9:89:04:b3:80:e5:29:2b: 9e:13:e6:92:0a:22:7c:40:e9:5f:b6:65:53:81:3f:61:86:1f: 17:84:25:7f:8e:fb:cd:1d:b8:d9:75:7c:89:5e:3d:63:97:ad: b8:0d:d1:d5:b5:20:48:67:c1:52:3b:08:66:21:c1:5c:95:ba: 77:05:26:c5 -----BEGIN CERTIFICATE----- MIIGLDCCBRSgAwIBAgIDAniLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNzAyMzU0MFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkFEMkQxMTAvBgNVBAUTKDk0QTk1MEIzMDNCNDY5MDBERDVBMzA2 MTAzMEM4OUE0ODk2ODAzQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCf+f1Z18puxdugzVMY5ZbKL91EuEeD8Cbnp089QGbQScXmUQtKUqqFAPk0nAnU 6Qwz6PoR5chzlobDl5weGtgq3DrDvoDKDJcv0sWOD1R4GnkqsJeD4FODs2s3EHEA c+PhR6DXT1mLNFFiM7PAugnpM57KTosy0KcmKsORxLYWGT7Bau+6XhyJPpya06bK U4d1DvSeawObRtwrWbj7q0x79tOdVZUmCdqkKMXhjbHNLn/W1IPAZ6R6VyH2G/5Q nOY5UZFoE6ZA67Pw87m6/s7CnxS67CcHx45tg4OPIN69CO+3gPOZgfZ+hW7HOw/J bXM7yzffTh6DV5yyUUvoZJnjAgMBAAGjggMhMIIDHTAdBgNVHQ4EFgQUlKlQswO0 aQDdWjBhAwyJpIloA68wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJBRDJELzkwODhFRTVBRTgwMTExRUVBRDZDNTAzMEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCQUQyRC85MDg4RUU1QUU4MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dP MGFRRGRXakJoQXd5SnBJbG9BNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgsGMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAK+bRAwQCZy7Q AwQAZ2DpAwQAZ5JoMA0GCSqGSIb3DQEBCwUAA4IBAQAEoJ7y+mRzEXnik3p7qZ2o 1b7SKVkw6Diom2HvKvo5pybuiXcRNvxdxOBF6e9ukHFP6wLOtopjawJ7EC3WZHON xeDvhvRDbNxgBAXAo5CqPTE1Sdwrc0dda0wzLNZwQWz1gdXIBIDdtQx75ufqNJMb bqkvLiseB7DYMd53A1DUVxY+o9gxt3bqwMB95KxdlX1s4JsdycGkYkaU0U+UbsNh fRlD6LbpzYj3EHj2lQ6Vkh46MqqTN4OTBrF6NFWn2YkEs4DlKSueE+aSCiJ8QOlf tmVTgT9hhh8XhCV/jvvNHbjZdXyJXj1jl624DdHVtSBIZ8FSOwhmIcFclbp3BSbF -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:59 2025 by rpki-client