This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer File: vadiHhrG4FsLoMLvFUF0yL5cE7k.cer (raw, json) Hash identifier: sS67RAInGPC3mx/hum3P7jDPATZdsmrslcKdKnt7xXM= Subject key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027450 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft caRepository: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 10 Nov 2025 12:34:53 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 150394 AS: 152099 IP: 103.29.60.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160848 (0x27450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 10 12:34:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:62:96:4d:56:84:7e:02:0a:f9:be:24:26: ae:7c:da:4d:56:eb:81:37:a2:2c:5d:9b:af:53:60: df:e5:65:23:62:6c:a1:31:4d:ed:85:20:b7:cb:6e: 69:aa:da:20:71:7e:9a:f7:f3:e4:a2:f2:bf:ee:e2: ad:11:fc:5c:7b:2d:70:ee:54:f7:01:b6:06:52:2f: ae:1a:29:65:a5:45:72:a0:02:37:e4:4d:df:a3:ba: 7c:98:a4:b6:ca:38:bd:37:2c:00:ab:35:aa:c6:38: b8:92:c1:36:38:dd:80:2d:0d:a8:10:1b:95:10:69: d9:cc:6b:3b:58:c8:e0:82:9e:42:70:4c:b1:27:e3: 2a:3c:4a:15:c3:5e:b8:ac:78:44:bb:65:a7:a5:b9: d5:f3:13:33:5a:12:59:5a:92:f8:0d:b6:76:8c:62: 7f:7a:6d:35:96:c1:f3:5a:11:68:e6:e6:27:88:5d: 73:4d:4c:5c:07:32:45:c0:b3:1e:8b:c5:82:de:00: 16:2f:5e:a6:96:5d:af:eb:b5:e1:57:cd:05:92:da: 81:ed:11:8f:f7:7d:c1:97:aa:64:c4:ab:78:e2:15: c1:e9:72:32:d5:0a:d8:cb:fc:bc:ba:b3:40:22:e0: f2:d1:99:f8:ea:2f:ef:cb:9a:42:05:83:08:e9:9a: a5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 150394 152099 sbgp-ipAddrBlock: critical IPv4: 103.29.60.0/23 Signature Algorithm: sha256WithRSAEncryption 57:3d:50:ea:48:11:f8:7c:30:24:8d:7e:db:09:59:b8:c5:e9: b0:63:05:3b:c3:ce:eb:da:c2:5f:dc:e4:23:12:63:7c:4f:8f: 42:96:67:ea:a9:13:f6:12:bd:42:9e:f6:10:5b:80:41:19:7d: 18:a7:d2:23:d4:08:e0:1e:77:87:e6:98:84:b9:e1:aa:5d:8c: 05:2f:21:af:35:67:7c:29:fd:31:ac:6a:5e:ac:31:ab:0b:34: b3:ab:0f:90:4d:47:01:71:7b:a1:f7:48:8f:fb:57:e8:e2:79: 21:c3:80:21:fd:85:59:71:45:e3:ba:32:e0:dc:15:b1:d8:55: 63:34:dd:2b:c1:95:4f:47:3f:56:7c:88:05:52:e6:c1:94:92: 54:5c:02:c2:e9:f7:54:fd:86:93:15:d3:4b:c2:33:04:57:90: a3:9b:cb:a6:be:1e:8f:85:4c:35:b3:80:28:aa:4d:69:92:6b: 96:29:3a:ff:9a:fb:c1:b1:ff:47:a6:4e:fb:30:db:61:36:12: d6:96:77:b2:e6:a6:de:41:61:38:48:9a:c0:5b:36:22:37:f0: 50:c0:5d:34:7d:3b:45:2b:b1:ac:c6:ad:8d:5b:fd:32:05:22: 1a:8c:6c:bf:1e:fa:01:a9:90:6c:4b:b8:c2:88:79:97:97:46: 17:38:50:b3 -----BEGIN CERTIFICATE----- MIIGHzCCBQegAwIBAgIDAnRQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMDEyMzQ1M1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJF RjE1NDE3NEM4QkU1QzEzQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3LGKWTVaEfgIK+b4kJq582k1W64E3oixdm69TYN/lZSNibKExTe2FILfLbmmq 2iBxfpr38+Si8r/u4q0R/Fx7LXDuVPcBtgZSL64aKWWlRXKgAjfkTd+junyYpLbK OL03LACrNarGOLiSwTY43YAtDagQG5UQadnMaztYyOCCnkJwTLEn4yo8ShXDXris eES7ZaeludXzEzNaEllakvgNtnaMYn96bTWWwfNaEWjm5ieIXXNNTFwHMkXAsx6L xYLeABYvXqaWXa/rteFXzQWS2oHtEY/3fcGXqmTEq3jiFcHpcjLVCtjL/Ly6s0Ai 4PLRmfjqL+/LmkIFgwjpmqXTAgMBAAGjggMUMIIDEDAdBgNVHQ4EFgQUvadiHhrG 4FsLoMLvFUF0yL5cE7kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI4ODVCL0E5OUMxODkwNkM3OTExRUQ4Q0I2QkM2QkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhy RzRGc0xvTUx2RlVGMHlMNWNFN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAkt6AgMCUiMwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnHTww DQYJKoZIhvcNAQELBQADggEBAFc9UOpIEfh8MCSNftsJWbjF6bBjBTvDzuvawl/c 5CMSY3xPj0KWZ+qpE/YSvUKe9hBbgEEZfRin0iPUCOAed4fmmIS54apdjAUvIa81 Z3wp/TGsal6sMasLNLOrD5BNRwFxe6H3SI/7V+jieSHDgCH9hVlxReO6MuDcFbHY VWM03SvBlU9HP1Z8iAVS5sGUklRcAsLp91T9hpMV00vCMwRXkKOby6a+Ho+FTDWz gCiqTWmSa5YpOv+a+8Gx/0emTvsw22E2EtaWd7Lmpt5BYThImsBbNiI38FDAXTR9 O0UrsazGrY1b/TIFIhqMbL8e+gGpkGxLuMKIeZeXRhc4ULM= -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:29 2025 by rpki-client