This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer File: lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer (raw, json) Hash identifier: 0bLroTnmX5CNwXynxEx65+jGzlOZYiQfK9g3z68iODk= Subject key identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027436 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 09 Nov 2025 16:12:44 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 136975 IP: 103.101.16.0/22 IP: 2403:3240::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160822 (0x27436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 9 16:12:44 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91E9DF8, serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:43:c8:3f:c1:19:4a:eb:de:a3:ee:1e:87: 82:ed:d7:9a:eb:fb:f7:89:e2:6c:b1:7c:67:38:4e: 3f:f6:94:a4:bf:0b:1d:4a:e5:c6:a5:92:ff:2a:36: 2a:87:5d:45:97:cd:bc:1d:64:cf:b7:bc:4c:c6:e9: ab:9c:b7:d8:d1:70:c0:91:69:5e:9f:67:5e:14:d0: 9c:d9:bb:aa:5a:ce:11:2f:cd:14:24:18:df:31:eb: 25:4c:15:33:4e:46:84:a1:4f:9a:93:dd:1a:97:bd: 44:68:54:06:44:3f:b3:86:b9:fc:f1:43:a5:8b:df: ed:aa:41:88:eb:29:e2:b9:7f:91:ca:21:00:3f:c2: 29:28:31:6d:ea:54:76:a1:d4:29:d4:3b:aa:40:c8: 82:60:7b:12:70:02:f0:c6:5b:b9:30:13:0b:ff:e3: 58:6b:6e:29:bd:5a:28:53:b3:f4:4f:f3:42:55:a8: 70:41:39:f8:09:25:3c:cf:74:1c:a7:2f:1d:d5:73: 25:33:c0:59:a1:a4:3d:ce:37:2b:09:65:60:bc:5a: b4:4f:fe:09:25:8f:90:6a:a8:43:2f:13:7a:4f:cf: 4a:a6:92:6d:74:c6:5d:5e:06:7f:b7:ee:b2:54:df: fc:86:83:25:53:df:dd:e8:2e:02:ef:9a:ba:f8:5c: e3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136975 sbgp-ipAddrBlock: critical IPv4: 103.101.16.0/22 IPv6: 2403:3240::/32 Signature Algorithm: sha256WithRSAEncryption bf:9c:0c:ba:06:5a:aa:f5:21:0c:dd:79:52:2d:ce:85:f1:d4: 6b:44:43:33:a7:6f:79:41:ce:ba:88:27:1a:cb:30:a9:f2:c8: c0:17:0b:db:c5:c9:7d:51:45:87:2b:66:e2:28:40:30:88:34: 89:ba:75:51:ef:44:18:8c:6a:b2:9c:e6:1d:80:dc:22:2a:65: 51:1d:08:31:11:84:1f:31:71:31:1b:0a:d5:73:ba:52:12:74: 4a:e6:44:4c:04:f0:4d:93:e3:5b:0f:d1:7d:ae:b8:30:1e:bc: 3d:d4:5d:92:44:6b:a8:12:15:85:6c:c7:75:25:da:ad:67:08: 32:27:8b:b3:f7:21:27:6d:2e:a6:f4:d8:6b:bb:49:54:79:16: c6:88:e5:c5:b4:ef:b6:a4:49:23:9e:5a:b5:c8:91:59:a1:96: 2c:e7:a7:80:c2:e7:3a:00:d8:a8:0f:e3:cd:de:34:04:fa:b2: bf:cd:0e:a3:f3:01:dd:6a:d7:ce:ed:d5:4d:71:a4:9b:8f:e8: 36:f8:52:8d:fc:11:38:7c:fa:79:d3:62:d5:40:02:d0:1d:ea: 2b:4b:d0:89:10:c8:64:95:e1:11:a9:ae:3f:db:a4:f9:a0:4a: 8f:71:fc:76:c9:d0:fc:6a:15:b9:9a:a6:a4:86:0e:cc:0f:59: 6a:97:9f:2a -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnQ2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwOTE2MTI0NFoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTlERjgxMTAvBgNVBAUTKDk1MDY4QkIzMEFCQzdFMDA3RkQ4Mzg3 RTRERTBBODNFRkFBREQ0NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKIUPIP8EZSuveo+4eh4Lt15rr+/eJ4myxfGc4Tj/2lKS/Cx1K5calkv8qNiqH XUWXzbwdZM+3vEzG6auct9jRcMCRaV6fZ14U0JzZu6pazhEvzRQkGN8x6yVMFTNO RoShT5qT3RqXvURoVAZEP7OGufzxQ6WL3+2qQYjrKeK5f5HKIQA/wikoMW3qVHah 1CnUO6pAyIJgexJwAvDGW7kwEwv/41hrbim9WihTs/RP80JVqHBBOfgJJTzPdByn Lx3VcyUzwFmhpD3ONysJZWC8WrRP/gklj5BqqEMvE3pPz0qmkm10xl1eBn+37rJU 3/yGgyVT393oLgLvmrr4XOO7AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUlQaLswq8 fgB/2Dh+TeCoPvqt1HIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU5REY4LzRCM0I4ODFFQjZEOTExRUI4Rjg2NTU1NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFOURGOC80QjNCODgxRUI2RDkxMUVCOEY4NjU1NTRDNEY5QUUwMi9sUWFMc3dx OGZnQl8yRGgtVGVDb1B2cXQxSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhcPMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ2UQMA0EAgAC MAcDBQAkAzJAMA0GCSqGSIb3DQEBCwUAA4IBAQC/nAy6Blqq9SEM3XlSLc6F8dRr REMzp295Qc66iCcayzCp8sjAFwvbxcl9UUWHK2biKEAwiDSJunVR70QYjGqynOYd gNwiKmVRHQgxEYQfMXExGwrVc7pSEnRK5kRMBPBNk+NbD9F9rrgwHrw91F2SRGuo EhWFbMd1JdqtZwgyJ4uz9yEnbS6m9Nhru0lUeRbGiOXFtO+2pEkjnlq1yJFZoZYs 56eAwuc6ANioD+PN3jQE+rK/zQ6j8wHdatfO7dVNcaSbj+g2+FKN/BE4fPp502LV QALQHeorS9CJEMhkleERqa4/26T5oEqPcfx2ydD8ahW5mqakhg7MD1lql58q -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:25 2025 by rpki-client