This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer File: ljP2L_shhnbryT8cN2lknAxdhN8.cer (raw, json) Hash identifier: 4Dz1w0vCbuRsw/oz/DHpUgIAqE4I/oqeJvQFrfI2MaU= Subject key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A91 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 11:05:02 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154300 IP: 103.144.240.0/23 IP: 103.145.190.0/23 IP: 2405:7240::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162449 (0x27a91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 11:05:02 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a4:7a:db:61:04:4f:43:2d:77:2a:d9:19:40: d0:e3:94:f8:3d:89:49:0a:ef:24:1c:02:b6:6d:87: 8e:42:d2:10:82:6e:86:8d:99:84:17:73:44:f5:3c: 37:c2:46:22:0f:d1:d3:a7:d5:70:9b:23:76:8c:5c: 86:f1:21:18:91:09:bf:63:cf:f4:0a:1d:c2:c8:1c: 8f:1b:f2:f6:65:09:d0:58:ba:6a:ea:7d:50:a8:62: 0a:ce:87:bb:51:f1:4c:b8:9d:48:6d:1f:b0:68:7a: 21:25:25:d4:a6:09:1e:c4:14:74:7e:a8:d6:85:1e: 2c:d8:c5:81:52:6a:44:90:48:a8:28:df:82:58:af: 0e:a3:9a:7a:ce:8c:94:22:32:20:bc:6d:39:c4:f1: 57:82:49:f4:2b:41:fa:9c:3c:9c:3b:31:20:36:5d: 77:17:95:e2:f1:12:83:da:f7:43:92:1b:84:76:a8: 03:53:bd:48:57:2d:83:fa:33:42:eb:dd:55:0d:5f: 84:00:50:a8:ab:9f:78:1b:5c:c5:81:17:9f:c5:a6: ff:05:4e:9d:d4:79:18:9d:d2:34:4b:58:e8:37:7e: d4:c3:cc:08:8b:ba:e7:f5:40:a5:0f:b3:16:7f:33: d3:a1:55:a8:e9:49:d7:c5:69:a4:26:85:15:41:c3: c4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154300 sbgp-ipAddrBlock: critical IPv4: 103.144.240.0/23 103.145.190.0/23 IPv6: 2405:7240::/32 Signature Algorithm: sha256WithRSAEncryption 79:27:ed:3d:cb:ec:c3:f9:2a:42:de:13:a0:a8:94:46:35:6e: 2e:d0:a5:9c:ce:10:19:0a:83:aa:f3:c1:ab:d2:5e:76:56:db: a0:1a:ce:02:9e:8b:48:86:6e:b2:54:a7:dd:9d:af:2f:28:fd: b6:12:44:58:0c:0a:96:96:43:fb:1b:4d:c7:5d:ff:d9:02:35: fa:51:ed:46:4c:1d:b9:d3:02:f0:2c:1c:d8:6d:ff:8d:98:98: 48:23:7c:72:d9:01:d8:7b:7c:d6:6a:ef:2b:b9:bc:f5:82:51: 05:af:33:ab:20:0c:a0:92:d2:6c:a6:ed:f8:3d:f6:b9:e1:dd: f6:3d:d7:20:a9:f6:81:d6:5e:c3:7b:e6:f1:a0:68:05:fa:b9: bc:86:07:4c:41:99:51:d6:bb:62:02:3b:6a:5a:8f:13:f9:e6: 50:78:0c:12:9a:4e:dc:82:8c:05:23:7a:03:c0:00:b3:09:d1: 33:a6:1b:55:a3:fb:bc:49:3a:b6:4d:22:0c:2a:a5:5e:1a:28: 62:ca:ab:16:c7:49:66:2d:3d:12:d4:73:2b:e8:6a:3b:45:29: 2a:c4:76:72:ce:08:43:4c:fa:0b:04:46:6a:f8:a5:0c:b3:59: 85:d2:17:0b:b0:83:78:4b:4c:76:dd:0f:19:70:c2:51:05:fd: 30:e6:27:87 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAnqRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjExMDUwMloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjIwRjgxMTAvBgNVBAUTKDk2MzNGNjJGRkIyMTg2NzZFQkM5M0Yx QzM3Njk2NDlDMEM1RDg0REYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnpHrbYQRPQy13KtkZQNDjlPg9iUkK7yQcArZth45C0hCCboaNmYQXc0T1PDfC RiIP0dOn1XCbI3aMXIbxIRiRCb9jz/QKHcLIHI8b8vZlCdBYumrqfVCoYgrOh7tR 8Uy4nUhtH7BoeiElJdSmCR7EFHR+qNaFHizYxYFSakSQSKgo34JYrw6jmnrOjJQi MiC8bTnE8VeCSfQrQfqcPJw7MSA2XXcXleLxEoPa90OSG4R2qANTvUhXLYP6M0Lr 3VUNX4QAUKirn3gbXMWBF5/Fpv8FTp3UeRid0jRLWOg3ftTDzAiLuuf1QKUPsxZ/ M9OhVajpSdfFaaQmhRVBw8TlAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUljP2L/sh hnbryT8cN2lknAxdhN8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYyMEY4L0IwNkZBRTJFMTk3QzExRUVCRDIxQkI0Q0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGMjBGOC9CMDZGQUUyRTE5N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9z aGhuYnJ5VDhjTjJsa25BeGRoTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlq8MDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBZ5DwAwQBZ5G+ MA0EAgACMAcDBQAkBXJAMA0GCSqGSIb3DQEBCwUAA4IBAQB5J+09y+zD+SpC3hOg qJRGNW4u0KWczhAZCoOq88Gr0l52VtugGs4CnotIhm6yVKfdna8vKP22EkRYDAqW lkP7G03HXf/ZAjX6Ue1GTB250wLwLBzYbf+NmJhII3xy2QHYe3zWau8rubz1glEF rzOrIAygktJspu34Pfa54d32PdcgqfaB1l7De+bxoGgF+rm8hgdMQZlR1rtiAjtq Wo8T+eZQeAwSmk7cgowFI3oDwACzCdEzphtVo/u8STq2TSIMKqVeGihiyqsWx0lm LT0S1HMr6Go7RSkqxHZyzghDTPoLBEZq+KUMs1mF0hcLsIN4S0x23Q8ZcMJRBf0w 5ieH -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:17 2025 by rpki-client