This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer (raw, json) Hash identifier: +FsTudJxiuBCNCKbYYmR1eTO5IXhjes+boFs+nCBKIw= Subject key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B1A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft caRepository: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 00:25:43 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 134372 IP: 103.103.96.0/23 IP: 2001:df3:7c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162586 (0x27b1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 00:25:43 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cb:4d:3e:08:7a:b1:4f:03:e2:aa:72:ef:a6: 9a:e0:4b:60:0c:82:29:7e:4f:30:21:e8:37:6d:d9: d8:ec:08:d5:66:bc:44:10:9a:ca:29:c1:2d:ad:ac: 15:50:be:af:58:45:97:47:98:f8:f0:d8:92:50:63: 3e:82:cd:9c:10:2d:55:34:63:b0:b1:dc:4a:4d:d1: 22:1c:ba:7c:d9:e7:99:93:2a:0d:b2:c1:c2:17:25: 1b:f3:3b:a8:86:77:50:42:74:af:4f:0f:f0:2b:76: e1:27:17:fb:a7:1c:2a:31:2b:c0:07:ed:7f:a3:00: ff:f5:e8:8c:b2:f5:e7:fd:a7:7d:4f:d7:60:50:04: 15:b1:60:f9:6d:52:82:1c:c0:ea:23:7a:b6:43:40: d8:e1:f4:80:27:76:d3:31:a8:1a:29:70:ec:f3:d6: a0:16:a9:7d:4d:ae:89:47:20:b4:c3:85:48:6f:ce: ae:f9:21:5a:91:a3:4f:99:2c:c3:ac:75:a4:8d:6a: aa:94:e2:e3:68:56:d4:ef:a1:f1:bf:6a:58:00:7b: 42:80:e1:1b:5e:1b:6e:76:43:95:fa:97:26:93:d5: eb:79:9d:dd:a7:26:0b:15:1d:ee:7e:fa:34:0c:99: 17:bc:68:ec:e1:93:0b:0d:27:c8:13:94:f5:a0:d8: cb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134372 sbgp-ipAddrBlock: critical IPv4: 103.103.96.0/23 IPv6: 2001:df3:7c0::/48 Signature Algorithm: sha256WithRSAEncryption 4c:32:69:68:ac:2b:90:8c:37:96:f1:c8:8a:07:6e:24:d5:a6: 5d:2d:21:c7:cc:c8:92:51:68:8e:fd:6d:62:51:f8:92:14:06: 70:bd:0b:1a:53:b7:9b:14:fb:5c:65:d7:60:b1:92:9c:28:74: 1d:5a:11:ed:e7:16:4d:1b:46:e6:87:2f:2b:d0:ee:72:32:ce: f9:80:03:5f:02:fa:f4:1f:11:97:c4:10:1d:33:45:68:10:86: ac:12:2f:a1:28:8c:fe:60:4f:a0:7e:fb:7a:fa:3e:a3:a6:67: 91:db:38:df:da:73:f4:c0:59:32:10:9e:f8:eb:fd:e2:85:75: b2:17:f4:9a:77:50:21:aa:3d:21:19:73:73:12:28:65:2e:76: b6:f3:1c:ae:13:fd:9d:db:4b:4a:d5:d1:3d:d5:0d:b6:af:86: 2b:c0:e7:22:03:8b:38:c7:bb:bb:d4:72:24:b2:ac:60:9f:d4: 4a:85:6c:0f:0c:6f:6e:d6:e5:14:6b:2c:d7:36:2b:fc:7d:42: f6:1f:3b:1e:e9:67:af:4f:2b:21:43:00:ca:c2:2f:db:ef:c3: 88:76:e2:6f:88:57:d4:f9:14:db:c9:44:ff:2e:5c:37:40:09: 5b:c4:01:7f:0a:f6:55:cc:16:9c:4f:59:9e:14:c9:11:9e:c0: b2:3d:6a:06 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnsaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzAwMjU0M1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxMUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3 MzY3RDU1QzI4RUU0QUYxQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXy00+CHqxTwPiqnLvpprgS2AMgil+TzAh6Ddt2djsCNVmvEQQmsopwS2trBVQ vq9YRZdHmPjw2JJQYz6CzZwQLVU0Y7Cx3EpN0SIcunzZ55mTKg2ywcIXJRvzO6iG d1BCdK9PD/ArduEnF/unHCoxK8AH7X+jAP/16Iyy9ef9p31P12BQBBWxYPltUoIc wOojerZDQNjh9IAndtMxqBopcOzz1qAWqX1NrolHILTDhUhvzq75IVqRo0+ZLMOs daSNaqqU4uNoVtTvofG/algAe0KA4RteG252Q5X6lyaT1et5nd2nJgsVHe5++jQM mRe8aOzhkwsNJ8gTlPWg2MuzAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUsYxDdDRm kh2wQl5zZ9VcKO5K8c0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFCRTM4LzZEQTJEOUIyNTQxQjExRURCRUJBNEE1MEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExQkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERS bWtoMndRbDV6WjlWY0tPNUs4YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgzkMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ2dgMA8EAgAC MAkDBwAgAQ3zB8AwDQYJKoZIhvcNAQELBQADggEBAEwyaWisK5CMN5bxyIoHbiTV pl0tIcfMyJJRaI79bWJR+JIUBnC9CxpTt5sU+1xl12CxkpwodB1aEe3nFk0bRuaH LyvQ7nIyzvmAA18C+vQfEZfEEB0zRWgQhqwSL6EojP5gT6B++3r6PqOmZ5HbON/a c/TAWTIQnvjr/eKFdbIX9Jp3UCGqPSEZc3MSKGUudrbzHK4T/Z3bS0rV0T3VDbav hivA5yIDizjHu7vUciSyrGCf1EqFbA8Mb27W5RRrLNc2K/x9QvYfOx7pZ69PKyFD AMrCL9vvw4h24m+IV9T5FNvJRP8uXDdACVvEAX8K9lXMFpxPWZ4UyRGewLI9agY= -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:08 2025 by rpki-client