This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer File: tkKboemiWuSuEg8IEuf8LjYjLS8.cer (raw, json) Hash identifier: ctm5AJVK+MVYFAPg0LUOl6Yanxcn4ayiQAkvig7XHTQ= Subject key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027858 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft caRepository: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 26 Nov 2025 16:23:20 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 138149 IP: 103.121.76.0/22 IP: 2403:6ac0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161880 (0x27858) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 26 16:23:20 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:66:50:a0:a7:1e:fb:31:47:6c:ef:71:85: 83:f0:f3:43:42:ee:6f:89:c6:ae:fe:f0:55:89:63: 19:fd:8f:39:65:78:87:40:50:e2:20:8e:3f:59:3a: 59:a2:df:e8:60:a9:27:68:04:26:12:27:38:c5:9b: 30:e3:de:5a:5c:dc:d4:40:21:7f:93:ca:da:8b:97: 25:7f:ee:ce:d6:24:d8:8e:da:34:01:07:b1:ee:0f: 8c:7a:b7:a5:e9:07:6f:fd:d8:80:39:b2:66:7e:4c: 20:74:a6:cf:ab:6b:2a:19:ed:ff:fa:be:a6:02:f7: c4:a5:88:23:b3:17:a9:13:f2:91:51:e0:a2:ff:0f: a0:8b:f5:01:a9:ef:7a:5b:db:91:51:80:cd:36:e9: f7:14:36:f9:f3:70:e2:f7:16:0f:73:fc:e4:45:d7: c1:b1:59:62:4d:5f:5b:f4:da:01:5c:aa:40:b2:59: a8:12:76:f5:67:45:6c:68:19:4c:f6:83:1d:9e:1c: 10:f6:33:fd:91:f5:a8:94:2e:bc:31:39:71:63:c0: 95:51:fd:55:62:a6:74:ac:d4:7c:a6:7f:45:c2:98: 3b:f4:16:6b:5a:4f:8b:12:0f:58:9b:5c:fe:18:c9: 7a:2f:b2:d9:aa:74:15:c3:2b:08:40:6f:a8:0a:a7: 87:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138149 sbgp-ipAddrBlock: critical IPv4: 103.121.76.0/22 IPv6: 2403:6ac0::/32 Signature Algorithm: sha256WithRSAEncryption 42:70:5f:98:b5:46:4c:ed:a0:90:cc:85:e2:e1:83:22:d5:26: 8b:e1:23:1e:b5:d3:14:3f:c6:5f:f8:b1:ee:c9:75:02:7c:ce: 31:71:34:14:56:ff:1e:fc:8d:fc:c6:b1:03:03:b3:a8:7c:e2: 8d:f4:76:71:03:b4:f6:4f:97:da:63:49:f7:0d:25:2d:e4:63: 39:b6:f1:57:62:ce:77:5c:43:95:a1:23:38:9e:25:49:83:4e: f0:c2:f5:71:17:4b:06:d7:40:8a:30:67:49:9b:d3:64:8e:54: 44:5b:18:21:28:bd:20:fe:dd:e2:c8:52:74:89:c5:9b:3d:f9: b6:61:58:52:1c:67:07:d1:84:a7:05:19:7d:7f:ee:d4:c5:9d: bc:36:48:72:92:e5:08:ca:90:a1:b0:1a:3b:ea:7e:bd:d8:a7: 18:2b:0a:35:73:89:56:c4:23:92:c6:53:3f:98:4b:28:0d:2c: a0:e1:46:71:66:57:ac:fd:11:e0:f2:d1:b4:6b:19:ca:d1:bc: 87:cc:8a:81:d8:10:4b:13:77:7e:ea:6c:2a:c1:fd:eb:1b:dd: 3a:3e:ee:d3:f8:67:75:11:fc:9e:e3:5c:5c:e4:8a:68:04:57: 93:9e:c0:a5:51:37:e7:ff:c8:3f:d8:c8:68:9b:e5:71:f1:5e: 7f:60:a0:c3 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnhYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNjE2MjMyMFoXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYw ODEyRTdGQzJFMzYyMzJEMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClHWZQoKce+zFHbO9xhYPw80NC7m+Jxq7+8FWJYxn9jzlleIdAUOIgjj9ZOlmi 3+hgqSdoBCYSJzjFmzDj3lpc3NRAIX+TytqLlyV/7s7WJNiO2jQBB7HuD4x6t6Xp B2/92IA5smZ+TCB0ps+rayoZ7f/6vqYC98SliCOzF6kT8pFR4KL/D6CL9QGp73pb 25FRgM026fcUNvnzcOL3Fg9z/ORF18GxWWJNX1v02gFcqkCyWagSdvVnRWxoGUz2 gx2eHBD2M/2R9aiULrwxOXFjwJVR/VVipnSs1Hymf0XCmDv0FmtaT4sSD1ibXP4Y yXovstmqdBXDKwhAb6gKp4evAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUtkKboemi WuSuEg8IEuf8LjYjLS8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk0MTU2LzM2NDc5Mzg0NzM2MDExRUFCNjM0OTU0NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2Vt aVd1U3VFZzhJRXVmOExqWWpMUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhulMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3lMMA0EAgAC MAcDBQAkA2rAMA0GCSqGSIb3DQEBCwUAA4IBAQBCcF+YtUZM7aCQzIXi4YMi1SaL 4SMetdMUP8Zf+LHuyXUCfM4xcTQUVv8e/I38xrEDA7OofOKN9HZxA7T2T5faY0n3 DSUt5GM5tvFXYs53XEOVoSM4niVJg07wwvVxF0sG10CKMGdJm9NkjlREWxghKL0g /t3iyFJ0icWbPfm2YVhSHGcH0YSnBRl9f+7UxZ28NkhykuUIypChsBo76n692KcY Kwo1c4lWxCOSxlM/mEsoDSyg4UZxZles/RHg8tG0axnK0byHzIqB2BBLE3d+6mwq wf3rG906Pu7T+Gd1Efye41xc5IpoBFeTnsClUTfn/8g/2Mhom+Vx8V5/YKDD -----END CERTIFICATE-----Generated at Sat Dec 6 09:38:02 2025 by rpki-client