This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer File: qkHKgdI-9YhhkyqtErMWkNvPEAM.cer (raw, json) Hash identifier: Cj5SKEzAYyanWLf8h+VtnJrHbdY1rDcKkQ53sGTE8zU= Subject key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027721 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 23 Nov 2025 13:35:52 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 138489 IP: 103.126.108.0/22 IP: 2404:9c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161569 (0x27721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 23 13:35:52 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91A5744, serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:db:e0:5b:39:46:82:b2:b0:14:4a:68:31: f1:d9:bf:ff:41:fa:f0:8c:0b:7e:29:23:fe:1b:aa: 28:b9:7c:9b:41:18:1d:ea:8e:7c:da:aa:99:40:a8: 60:82:6f:8a:a5:ba:ba:fd:e5:69:9a:11:b5:f1:01: d4:21:f4:0b:a1:ae:58:eb:6f:00:f2:d9:8b:ca:a7: e0:5b:a2:b9:d7:c7:ad:eb:23:ab:3a:19:00:4b:44: 92:5b:ef:65:cd:0e:6e:bd:7a:16:21:4d:f9:7e:12: b9:09:01:58:5e:d7:37:8b:95:57:de:e9:9c:44:91: 7e:21:ab:12:2e:fe:7b:7d:50:77:44:29:8a:9f:ad: 60:ba:97:0f:c8:ec:0e:d9:7f:00:ab:6e:75:ba:f2: 10:7c:b6:f0:95:48:d4:cc:cb:94:71:af:e0:d1:a7: 1d:f9:2b:32:67:51:41:18:29:fe:0b:32:0e:dc:6b: bd:b4:11:03:34:01:78:9b:e3:ea:16:09:15:f6:f5: 3f:dd:bb:cd:23:ef:d9:0a:8a:12:87:76:2f:bb:68: 5b:a8:31:9d:07:35:de:72:b7:88:f5:d0:73:50:70: 6d:48:01:09:cc:8a:4c:93:70:ca:ce:8a:76:9d:70: 63:0b:be:65:6b:2b:f7:dc:6c:19:c4:56:3a:64:05: d2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138489 sbgp-ipAddrBlock: critical IPv4: 103.126.108.0/22 IPv6: 2404:9c0::/32 Signature Algorithm: sha256WithRSAEncryption 86:cc:68:b9:8a:3e:14:29:d1:17:9c:37:ee:03:4e:2f:04:9d: b2:86:a4:b9:f2:aa:3e:6e:38:c1:94:58:4d:a2:47:f8:8c:16: 11:7c:1e:9b:93:40:67:58:0d:be:51:30:15:f8:b2:08:0d:c6: 8f:f5:63:ef:19:bb:d3:9f:8b:b7:a1:5d:eb:67:b2:ea:22:12: 1e:54:b1:d6:d3:08:42:02:91:f8:15:90:66:fb:e3:8e:9f:77: d5:67:b9:27:a2:81:ef:58:8b:8d:df:c0:9f:8c:14:2b:07:3e: d6:6b:f9:33:f6:33:c0:b4:ac:06:9f:4f:9f:a3:48:9d:61:b3: 9c:ec:7a:e1:8e:be:48:ac:7d:c1:3d:da:f4:a5:e3:3b:3b:93: ad:d1:36:89:89:48:d6:a5:26:12:aa:41:3b:07:6c:65:41:31: c1:77:90:46:ad:3d:c8:fb:52:ca:21:ba:e0:73:68:31:cb:7f: 8c:76:74:38:c8:4c:fa:a6:75:56:a4:68:d6:35:60:0c:07:c1: 15:b9:b2:58:36:0c:55:bf:17:6e:fd:f6:ce:b1:c4:54:74:4c: 0f:ce:25:ae:c6:00:ed:d5:02:df:f9:2a:5f:fe:11:97:7e:b9: b9:94:ea:98:80:8e:e3:72:53:74:7f:62:0a:78:2f:92:41:35: 4e:de:13:c3 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnchMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMzEzMzU1MloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFB RDEyQjMxNjkwREJDRjEwMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNydvgWzlGgrKwFEpoMfHZv/9B+vCMC34pI/4bqii5fJtBGB3qjnzaqplAqGCC b4qlurr95WmaEbXxAdQh9AuhrljrbwDy2YvKp+BbornXx63rI6s6GQBLRJJb72XN Dm69ehYhTfl+ErkJAVhe1zeLlVfe6ZxEkX4hqxIu/nt9UHdEKYqfrWC6lw/I7A7Z fwCrbnW68hB8tvCVSNTMy5Rxr+DRpx35KzJnUUEYKf4LMg7ca720EQM0AXib4+oW CRX29T/du80j79kKihKHdi+7aFuoMZ0HNd5yt4j10HNQcG1IAQnMikyTcMrOinad cGMLvmVrK/fcbBnEVjpkBdKNAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUqkHKgdI+ 9YhhkyqtErMWkNvPEAMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE1NzQ0LzM5N0Y2Q0Q0MDUyRTExRUE5RDMxNDE0NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBNTc0NC8zOTdGNkNENDA1MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJ LTlZaGhreXF0RXJNV2tOdlBFQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhz5MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ35sMA0EAgAC MAcDBQAkBAnAMA0GCSqGSIb3DQEBCwUAA4IBAQCGzGi5ij4UKdEXnDfuA04vBJ2y hqS58qo+bjjBlFhNokf4jBYRfB6bk0BnWA2+UTAV+LIIDcaP9WPvGbvTn4u3oV3r Z7LqIhIeVLHW0whCApH4FZBm++OOn3fVZ7knooHvWIuN38CfjBQrBz7Wa/kz9jPA tKwGn0+fo0idYbOc7Hrhjr5IrH3BPdr0peM7O5Ot0TaJiUjWpSYSqkE7B2xlQTHB d5BGrT3I+1LKIbrgc2gxy3+MdnQ4yEz6pnVWpGjWNWAMB8EVubJYNgxVvxdu/fbO scRUdEwPziWuxgDt1QLf+Spf/hGXfrm5lOqYgI7jclN0f2IKeC+SQTVO3hPD -----END CERTIFICATE-----Generated at Sat Dec 6 09:38:00 2025 by rpki-client