This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer File: o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer (raw, json) Hash identifier: 4pTYD9sAmNyo16XoJK9poD3mwlRP2CU+7XhaIY3+4KU= Subject key identifier: A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0281CC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft caRepository: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 30 Dec 2025 13:02:52 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 136916 IP: 103.99.20.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164300 (0x281cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 30 13:02:52 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A914F6AF, serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8d:18:79:f3:d5:b7:25:c2:a9:1f:4f:09:09: 3b:85:92:1c:ad:c4:6d:3d:52:99:ab:51:b7:d0:aa: cc:3c:5b:76:73:50:69:56:bc:75:ee:0f:03:35:56: 5a:48:ad:80:55:8a:8f:6a:9a:4d:55:a9:b4:2e:4b: 29:5c:3f:ca:4c:84:49:cf:22:f5:5b:b6:ba:90:28: 61:4b:0d:7a:06:45:10:35:d6:b3:7a:fd:24:b3:60: 00:fb:f9:f4:59:70:bd:95:be:90:3e:ff:64:4b:97: 70:dc:ca:f6:4a:09:44:57:b9:09:fc:35:85:e4:d9: b1:90:2d:6f:04:8b:03:eb:96:d9:b9:2d:af:bf:7a: cb:f3:68:f4:fd:9b:10:11:fc:97:e0:d6:02:2b:00: 6a:99:25:89:53:1a:72:85:14:a9:08:92:ff:57:46: 0b:25:08:fc:f6:93:d3:23:51:ff:71:27:a8:1a:f1: 4c:fc:bc:85:ec:78:84:d7:ee:c6:57:e1:02:7d:81: d8:3e:51:ed:ea:a6:00:d1:92:16:7c:3c:e3:4d:fe: ea:66:34:0c:05:5a:0e:93:0a:73:7c:ed:06:a9:10: 55:96:bf:17:0d:5a:3e:04:5b:a9:87:19:62:ec:57: 23:aa:88:08:05:72:8d:52:9c:4b:3e:a0:8a:d7:86: 78:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136916 sbgp-ipAddrBlock: critical IPv4: 103.99.20.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:fb:c6:24:56:38:1e:b2:49:11:a1:1a:21:82:2e:c5:b5:6b: a9:97:5e:0e:e4:50:26:ce:f7:27:3f:67:f3:9d:75:0b:e8:51: 04:ca:7d:9a:da:ba:6c:10:96:1d:96:0e:93:69:12:e9:58:7b: fc:49:4b:ce:10:20:13:a6:90:31:01:7f:9e:9f:05:25:91:09: d3:e3:0f:41:31:a9:c7:9d:62:a3:4b:46:29:da:fa:fb:1d:23: 2a:ca:ff:05:4d:f8:6b:e3:5e:4b:10:8b:a4:59:77:b9:64:d6: 35:07:c1:83:20:8f:31:c5:76:b9:d0:8a:fe:f6:dc:98:71:b0: 20:e0:2d:38:80:bb:e3:80:6e:5b:48:ab:a8:a0:07:30:5f:67: 53:b3:85:6f:b1:bd:d3:6d:c6:68:3d:00:89:eb:42:92:9c:97: 35:b5:ec:67:5f:d6:a9:b7:76:1c:23:39:8a:eb:ce:ae:d1:99: b9:23:96:c1:56:2f:d4:6f:2b:ba:a6:b5:2f:3b:c9:a0:b1:e5: 58:50:a9:c9:23:89:f7:81:ee:7d:c1:45:37:c2:da:51:50:b1: cd:90:43:3e:54:31:e1:1f:03:b1:64:77:7f:a7:73:b4:92:3f: f6:8a:cd:ba:c3:18:fc:0f:c4:21:67:f5:30:39:49:0c:a5:7b: e0:de:23:e7 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAoHMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMDEzMDI1MloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNEY2QUYxMTAvBgNVBAUTKEEzRDI1MEM1RDUyQzVBOEFDNjdCQTAy MTg4NEQxOTFBNUQ0QTcxODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSjRh589W3JcKpH08JCTuFkhytxG09UpmrUbfQqsw8W3ZzUGlWvHXuDwM1VlpI rYBVio9qmk1VqbQuSylcP8pMhEnPIvVbtrqQKGFLDXoGRRA11rN6/SSzYAD7+fRZ cL2VvpA+/2RLl3DcyvZKCURXuQn8NYXk2bGQLW8EiwPrltm5La+/esvzaPT9mxAR /Jfg1gIrAGqZJYlTGnKFFKkIkv9XRgslCPz2k9MjUf9xJ6ga8Uz8vIXseITX7sZX 4QJ9gdg+Ue3qpgDRkhZ8PONN/upmNAwFWg6TCnN87QapEFWWvxcNWj4EW6mHGWLs VyOqiAgFco1SnEs+oIrXhniXAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUo9JQxdUs WorGe6AhiE0ZGl1KcYIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRGNkFGL0Y2RDhEQTlDNzE0NDExRUQ5RkRGM0QxMkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0RjZBRi9GNkQ4REE5QzcxNDQxMUVEOUZERjNEMTJDNEY5QUUwMi9vOUpReGRV c1dvckdlNkFoaUUwWkdsMUtjWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhbUMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ2MUMA0GCSqG SIb3DQEBCwUAA4IBAQAa+8YkVjgeskkRoRohgi7FtWupl14O5FAmzvcnP2fznXUL 6FEEyn2a2rpsEJYdlg6TaRLpWHv8SUvOECATppAxAX+enwUlkQnT4w9BManHnWKj S0Yp2vr7HSMqyv8FTfhr415LEIukWXe5ZNY1B8GDII8xxXa50Ir+9tyYcbAg4C04 gLvjgG5bSKuooAcwX2dTs4Vvsb3TbcZoPQCJ60KSnJc1texnX9apt3YcIzmK686u 0Zm5I5bBVi/Ubyu6prUvO8mgseVYUKnJI4n3ge59wUU3wtpRULHNkEM+VDHhHwOx ZHd/p3O0kj/2is26wxj8D8QhZ/UwOUkMpXvg3iPn -----END CERTIFICATE-----Generated at Sun Jan 25 02:53:49 2026 by rpki-client