This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer File: oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer (raw, json) Hash identifier: e4i+CUnhRvrS2oXMLUIcuM7QWkF1j1ExthPaL30znpA= Subject key identifier: A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0275BD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 17 Nov 2025 17:59:35 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 63890 IP: 103.43.52.0/22 IP: 2001:df7:4500::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161213 (0x275bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 17 17:59:35 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91D9D8B, serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:81:0b:c0:fa:20:21:c3:9c:64:25:5c:da:5c: b6:f5:c1:e0:2c:c1:16:29:20:9e:25:ff:f6:b2:4b: 93:fe:81:93:a9:35:99:2b:78:5e:24:50:08:41:1a: 5b:cc:6a:0a:79:ae:a2:8c:b3:eb:de:b2:0a:09:78: a0:c2:7c:64:d7:34:1b:43:6d:68:62:06:8a:42:09: 19:7d:5f:bb:9a:b6:a3:9a:75:9c:63:24:56:c0:af: 5f:9b:3e:dd:f5:cc:fd:46:90:7f:c4:83:84:d4:69: dd:e2:66:40:f3:31:8d:17:4a:69:07:8d:63:9c:a3: 43:42:cb:bc:46:b2:d4:3c:fc:3f:f0:40:17:ae:22: b5:eb:f3:60:88:e2:81:eb:62:13:d0:64:b0:05:aa: 01:2d:b1:14:d1:5e:b1:9c:15:3f:c5:c1:41:7f:69: e9:44:d2:08:57:15:df:44:6d:b9:10:4c:c9:58:46: 29:3a:b8:dd:89:dc:13:b9:c3:37:5c:8e:3b:ca:f9: 6b:f6:d4:c6:6b:09:a4:61:44:cb:ca:eb:69:fc:a0: ed:8e:45:61:13:6c:35:f2:e2:5f:18:bc:0c:9b:4e: cb:c6:26:48:78:9d:07:c8:89:af:a2:12:1a:31:c9: 82:90:12:71:c9:9c:59:c6:c8:2b:61:84:c8:e3:42: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63890 sbgp-ipAddrBlock: critical IPv4: 103.43.52.0/22 IPv6: 2001:df7:4500::/48 Signature Algorithm: sha256WithRSAEncryption 16:dc:e7:ba:72:35:9b:f7:b5:07:84:8c:70:f8:0c:19:ba:23: a6:6d:10:75:0e:ab:d7:dd:21:e0:90:6c:ea:b9:d6:b8:c6:1b: cc:40:1a:6a:b3:79:1e:97:6e:49:6e:b2:a0:b7:c6:b3:73:41: 3b:45:c9:d7:1c:ec:90:07:ff:50:a2:32:7b:2b:1a:77:cd:bb: 0f:54:db:42:33:39:7c:70:a5:1c:26:fd:95:2a:d8:a0:99:3b: 02:88:02:54:5b:bc:18:3e:22:33:0c:ca:ba:a2:b9:5c:c3:8f: 3a:c9:21:58:15:9a:44:79:45:3c:f4:a5:0c:2c:f5:6a:e3:32: fe:c5:16:03:91:ba:62:49:d9:70:1f:21:8d:d4:58:21:03:da: 7d:30:30:ad:b1:cb:86:17:e1:f9:fa:9b:cf:c7:2e:ba:45:7d: f1:e4:f2:ec:59:b0:f6:34:1e:d8:9f:00:34:4d:97:95:42:56: 0f:09:cd:41:6b:87:74:33:ea:3a:8a:57:da:2a:f5:93:ee:79: 6f:9e:c0:c5:fc:ec:51:6d:c4:43:e7:ee:df:9c:38:01:22:f6: 1d:b5:6c:f9:0f:f7:4f:48:a7:c5:0b:22:7b:9b:e3:91:51:0a: fe:a3:d2:1a:8c:7d:9b:86:a8:d7:81:ea:d1:96:9d:b5:b2:0f: cf:9d:9e:c7 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnW9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNzE3NTkzNVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRDlEOEIxMTAvBgNVBAUTKEExOTM4QzkxMkFDMkY0QTk1OEI5M0RB RjhGNEIyNzIwMTVCMEQ4RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjgQvA+iAhw5xkJVzaXLb1weAswRYpIJ4l//ayS5P+gZOpNZkreF4kUAhBGlvM agp5rqKMs+vesgoJeKDCfGTXNBtDbWhiBopCCRl9X7uatqOadZxjJFbAr1+bPt31 zP1GkH/Eg4TUad3iZkDzMY0XSmkHjWOco0NCy7xGstQ8/D/wQBeuIrXr82CI4oHr YhPQZLAFqgEtsRTRXrGcFT/FwUF/aelE0ghXFd9EbbkQTMlYRik6uN2J3BO5wzdc jjvK+Wv21MZrCaRhRMvK62n8oO2ORWETbDXy4l8YvAybTsvGJkh4nQfIia+iEhox yYKQEnHJnFnGyCthhMjjQqPtAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUoZOMkSrC 9KlYuT2vj0snIBWw2NgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ5RDhCLzVGMTFFMDJBN0Y3NTExRUQ4QUZCRTY3M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEOUQ4Qi81RjExRTAyQTdGNzUxMUVEOEFGQkU2NzNDNEY5QUUwMi9vWk9Na1Ny QzlLbFl1VDJ2ajBzbklCV3cyTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAPmSMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCZys0MA8EAgAC MAkDBwAgAQ33RQAwDQYJKoZIhvcNAQELBQADggEBABbc57pyNZv3tQeEjHD4DBm6 I6ZtEHUOq9fdIeCQbOq51rjGG8xAGmqzeR6XbklusqC3xrNzQTtFydcc7JAH/1Ci MnsrGnfNuw9U20IzOXxwpRwm/ZUq2KCZOwKIAlRbvBg+IjMMyrqiuVzDjzrJIVgV mkR5RTz0pQws9WrjMv7FFgORumJJ2XAfIY3UWCED2n0wMK2xy4YX4fn6m8/HLrpF ffHk8uxZsPY0HtifADRNl5VCVg8JzUFrh3Qz6jqKV9oq9ZPueW+ewMX87FFtxEPn 7t+cOAEi9h21bPkP909Ip8ULInub45FRCv6j0hqMfZuGqNeB6tGWnbWyD8+dnsc= -----END CERTIFICATE-----Generated at Sat Dec 6 10:36:57 2025 by rpki-client