This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer File: n-iB2L0yrRWre-e07E91IhJUbHY.cer (raw, json) Hash identifier: nvaxQc+zH2v79g/XsRxNmoyBz+GbEB5SioCbsOFzXsg= Subject key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027331 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft caRepository: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 05 Nov 2025 05:10:27 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 138194 IP: 103.122.4.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160561 (0x27331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 5 05:10:27 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:11:93:9e:54:5b:78:e2:8f:81:5c:0c:4f: 81:a5:d8:13:d7:b3:24:12:03:49:14:e4:c0:f6:ca: 67:06:34:f7:82:4f:5c:46:0f:84:9b:8b:a0:7c:f9: 51:0e:79:02:b2:4b:dc:d5:8c:09:ee:02:56:88:74: 96:09:2f:bf:24:6b:59:e1:9c:5b:60:92:0e:0e:fc: 0f:5c:d1:9d:da:1a:a9:66:2d:3d:b0:9d:17:4f:3a: a2:f3:f3:a2:3f:47:a7:0f:83:63:a3:ce:8c:34:06: f8:2d:0c:75:7d:8d:39:39:de:85:d2:1d:30:0f:66: 14:39:c9:b5:86:5a:08:f5:27:08:3f:59:dd:ad:66: 52:17:64:0f:10:49:ec:70:a0:32:4a:21:47:4c:dd: 66:fb:cc:6a:5d:32:70:e7:eb:a1:74:0a:c8:d0:e9: b2:8f:d9:0b:bf:28:d2:c9:32:01:37:9b:f9:6d:53: 60:0d:91:9d:c9:16:e0:bc:34:29:73:ec:54:58:c5: 24:c8:08:98:93:e3:c1:e4:51:95:ac:fd:3c:4d:3b: 7f:d4:e2:b5:c4:7b:90:bb:16:5e:48:0c:5c:ff:27: 6d:8e:a0:df:23:5e:c5:4f:1c:63:01:e1:37:a1:fb: 79:91:9e:6b:1a:9f:69:0a:48:d6:dd:72:68:ad:7d: c3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138194 sbgp-ipAddrBlock: critical IPv4: 103.122.4.0/24 Signature Algorithm: sha256WithRSAEncryption 33:5a:9d:55:7d:52:3d:23:31:cd:15:65:3e:30:6c:af:66:5f: 8d:df:f0:83:0e:4b:b7:56:ef:f5:f0:11:fa:9c:1f:13:a2:b1: c0:6b:61:61:86:10:10:f2:3a:cd:9a:e6:1b:59:d4:bc:e9:86: 6e:fb:4d:f1:d9:e1:26:4b:7c:04:5d:ca:78:2c:4a:a0:d8:44: f9:1c:98:0e:fa:0c:76:32:88:e5:b0:3e:f8:af:c0:28:95:ee: f8:7d:45:89:dc:d2:60:f7:59:46:f1:31:62:eb:ea:3a:5d:0b: 82:a8:97:5f:f5:6a:9b:b2:f3:46:c7:66:36:f0:e8:60:57:0b: 17:50:b7:8b:e4:41:ee:65:72:7c:e0:c2:c1:8e:fc:01:d0:95: da:b0:cb:42:62:a9:0b:2c:5d:8e:b1:22:13:d1:f4:2d:69:9a: fd:c6:29:ec:56:6b:a9:04:12:6a:f0:0f:3e:63:ea:14:2e:17: 85:80:60:cc:7f:cc:55:ef:a3:34:46:2e:c0:67:df:4f:b5:b2: 21:7f:c3:54:5e:ea:35:55:c1:68:1b:a3:b1:78:c6:d0:b2:a6: f9:c2:27:f7:4d:50:55:10:11:e0:ca:fb:a1:4b:8c:b7:9d:5f: cb:cb:31:81:2f:d2:55:3b:af:af:5f:d2:5e:90:3f:fd:af:12: e0:4f:34:3c -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnMxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNTA1MTAyN1oXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxMThGRkExMTAvBgNVBAUTKDlGRTg4MUQ4QkQzMkFEMTVBQjdCRTdC NEVDNEY3NTIyMTI1NDZDNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxfxGTnlRbeOKPgVwMT4Gl2BPXsyQSA0kU5MD2ymcGNPeCT1xGD4Sbi6B8+VEO eQKyS9zVjAnuAlaIdJYJL78ka1nhnFtgkg4O/A9c0Z3aGqlmLT2wnRdPOqLz86I/ R6cPg2Ojzow0BvgtDHV9jTk53oXSHTAPZhQ5ybWGWgj1Jwg/Wd2tZlIXZA8QSexw oDJKIUdM3Wb7zGpdMnDn66F0CsjQ6bKP2Qu/KNLJMgE3m/ltU2ANkZ3JFuC8NClz 7FRYxSTICJiT48HkUZWs/TxNO3/U4rXEe5C7Fl5IDFz/J22OoN8jXsVPHGMB4Teh +3mRnmsan2kKSNbdcmitfcNHAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUn+iB2L0y rRWre+e07E91IhJUbHYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE4RkZBLzA1ODYwNjhBMkI3QzExRUY4OUU4NDE0NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExOEZGQS8wNTg2MDY4QTJCN0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkww eXJSV3JlLWUwN0U5MUloSlViSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhvSMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3oEMA0GCSqG SIb3DQEBCwUAA4IBAQAzWp1VfVI9IzHNFWU+MGyvZl+N3/CDDku3Vu/18BH6nB8T orHAa2FhhhAQ8jrNmuYbWdS86YZu+03x2eEmS3wEXcp4LEqg2ET5HJgO+gx2Mojl sD74r8Aole74fUWJ3NJg91lG8TFi6+o6XQuCqJdf9WqbsvNGx2Y28OhgVwsXULeL 5EHuZXJ84MLBjvwB0JXasMtCYqkLLF2OsSIT0fQtaZr9xinsVmupBBJq8A8+Y+oU LheFgGDMf8xV76M0Ri7AZ99PtbIhf8NUXuo1VcFoG6OxeMbQsqb5wif3TVBVEBHg yvuhS4y3nV/LyzGBL9JVO6+vX9JekD/9rxLgTzQ8 -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:01 2025 by rpki-client