This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer File: qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer (raw, json) Hash identifier: O3C+6GdhP2nHMil0Y7m+dZRjqUTPvVjJez1z+UIgkPA= Subject key identifier: AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02742D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft caRepository: rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 09 Nov 2025 14:22:56 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 137832 IP: 103.101.104.0/22 IP: 2402:e240::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160813 (0x2742d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 9 14:22:56 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A919FADC, serialNumber=AACFFAB8804E7D622F43B52549833D3087D9F9C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:96:66:66:60:d4:90:cd:b7:08:56:a4:8f: 85:f3:1e:d0:d5:4b:54:45:05:1e:d6:c3:24:14:90: 79:5f:17:74:58:35:3a:a9:ae:ac:a3:e5:6c:42:e2: d1:cb:73:30:f1:1d:5e:84:cd:ba:aa:8d:9b:7d:c0: 3e:95:dc:90:9e:d0:a9:8d:b3:2b:e7:75:0c:05:ea: 05:50:4e:ad:f3:59:06:03:a0:d0:5c:12:b8:d3:45: b6:3c:9c:68:81:d0:f0:5a:74:a1:5f:a5:16:4e:f0: 94:1d:ce:bd:54:09:0b:0d:fe:b8:39:61:03:1e:21: 1d:4d:58:4d:e8:98:3a:30:c7:43:15:33:cf:32:64: 02:cf:b1:12:f2:a0:e9:be:63:dc:a7:fa:32:c4:cc: d0:d8:8e:c4:f6:77:2a:9d:ca:e8:64:82:f1:c5:e7: 7f:8e:d8:b9:65:24:7c:fc:f9:24:44:92:3e:ae:e5: 82:a0:17:fb:6c:a3:6d:2b:6b:1d:78:b6:ec:99:97: 1c:76:d0:44:ea:10:45:63:4c:68:3d:de:46:2a:6f: 2d:ab:e8:3a:c7:73:11:7c:fb:98:10:3c:53:65:70: cb:6f:4e:a3:68:28:8e:9b:63:d4:c9:0b:83:33:30: 5d:d6:25:d9:b4:cd:6b:48:e2:82:1e:a4:26:61:77: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137832 sbgp-ipAddrBlock: critical IPv4: 103.101.104.0/22 IPv6: 2402:e240::/32 Signature Algorithm: sha256WithRSAEncryption bb:65:78:e0:c0:a6:82:78:8d:6e:9d:f9:df:af:88:64:d6:7f: 23:5d:b8:e5:ad:be:1b:d3:3a:2c:be:92:68:29:9f:01:9a:65: 82:77:b3:b7:d0:be:b2:5a:ba:2f:ce:d0:86:08:e7:1e:f6:df: 2f:d3:d0:0b:0a:20:87:18:cf:86:5a:c5:95:c6:98:24:57:a2: ea:df:a8:a5:6a:9a:ae:98:83:2b:aa:16:13:a6:b2:d2:04:2a: d1:6f:ab:d1:d0:6b:16:74:ac:0e:e8:af:95:49:af:1f:df:55: 34:62:ca:e0:f9:08:1f:3a:99:c0:c1:6a:20:e1:62:b9:89:ce: 19:70:2a:48:b1:36:ce:da:73:d2:61:4b:d2:36:60:43:4a:4e: 7e:ec:f8:43:9a:c7:36:88:4e:22:66:b5:49:73:33:9a:aa:81: c6:c7:83:3b:e8:3d:7b:2d:3e:97:d0:3d:8e:0d:f1:92:e3:68: fc:39:38:34:21:69:78:e1:af:dc:0c:37:f6:5e:fe:24:19:1e: 24:f9:a0:f9:dd:35:92:cb:cc:41:19:d4:40:8a:0d:0f:b4:d7: 6d:2a:55:27:18:69:b8:4e:de:63:1e:f2:bd:b9:e0:cc:95:e9: f1:4a:bc:48:bb:a7:84:a3:3a:f0:98:80:80:c2:ac:68:a3:37: d0:09:d1:21 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnQtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwOTE0MjI1NloXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxOUZBREMxMTAvBgNVBAUTKEFBQ0ZGQUI4ODA0RTdENjIyRjQzQjUy NTQ5ODMzRDMwODdEOUY5QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOHpZmZmDUkM23CFakj4XzHtDVS1RFBR7WwyQUkHlfF3RYNTqprqyj5WxC4tHL czDxHV6EzbqqjZt9wD6V3JCe0KmNsyvndQwF6gVQTq3zWQYDoNBcErjTRbY8nGiB 0PBadKFfpRZO8JQdzr1UCQsN/rg5YQMeIR1NWE3omDowx0MVM88yZALPsRLyoOm+ Y9yn+jLEzNDYjsT2dyqdyuhkgvHF53+O2LllJHz8+SREkj6u5YKgF/tso20rax14 tuyZlxx20ETqEEVjTGg93kYqby2r6DrHcxF8+5gQPFNlcMtvTqNoKI6bY9TJC4Mz MF3WJdm0zWtI4oIepCZhd0yVAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUqs/6uIBO fWIvQ7UlSYM9MIfZ+cgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlGQURDLzRDNEQ2Rjg2RkNCNDExRUE4NDYzODAwOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5RkFEQy80QzRENkY4NkZDQjQxMUVBODQ2MzgwMDlDNEY5QUUwMi9xc182dUlC T2ZXSXZRN1VsU1lNOU1JZlotY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhpoMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ2VoMA0EAgAC MAcDBQAkAuJAMA0GCSqGSIb3DQEBCwUAA4IBAQC7ZXjgwKaCeI1unfnfr4hk1n8j Xbjlrb4b0zosvpJoKZ8BmmWCd7O30L6yWrovztCGCOce9t8v09ALCiCHGM+GWsWV xpgkV6Lq36ilapqumIMrqhYTprLSBCrRb6vR0GsWdKwO6K+VSa8f31U0Ysrg+Qgf OpnAwWog4WK5ic4ZcCpIsTbO2nPSYUvSNmBDSk5+7PhDmsc2iE4iZrVJczOaqoHG x4M76D17LT6X0D2ODfGS42j8OTg0IWl44a/cDDf2Xv4kGR4k+aD53TWSy8xBGdRA ig0PtNdtKlUnGGm4Tt5jHvK9ueDMlenxSrxIu6eEozrwmICAwqxoozfQCdEh -----END CERTIFICATE-----Generated at Sat Dec 6 10:36:04 2025 by rpki-client