This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer File: w5bB5QN9M19zQcouz4ImEwDN_pU.cer (raw, json) Hash identifier: 1QlNbXhYtqit4BMWex+OhWwqUpXHLqFfTPsuucnjBVU= Subject key identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02761C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 20:31:37 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 141390 AS: 147176 IP: 103.174.190.0/23 IP: 2001:df7:d280::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161308 (0x2761c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 18 20:31:37 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91EC38C, serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:f4:3f:d2:c0:96:7e:49:42:d4:6b:95:df: 49:d2:a8:a5:91:24:42:81:af:54:5d:2f:30:86:fe: 33:64:e2:a5:a7:fc:88:06:aa:f4:ce:b4:a8:47:bf: fd:94:e9:00:57:99:96:ed:e7:cc:16:3f:97:c5:85: 97:72:6d:96:1f:d2:f6:e8:b1:eb:ea:6d:d6:13:84: ac:41:4f:c7:25:58:e1:a8:d9:6d:90:51:4b:1c:59: 5d:a2:0a:ad:4c:58:19:f9:11:55:46:71:4e:55:0e: 72:77:54:53:fb:f7:0d:a5:84:91:40:d5:5b:52:26: ea:a5:1b:11:97:86:4a:47:3c:01:1d:13:87:02:74: 53:00:b3:4f:0e:9d:4e:3a:ed:ad:a9:4b:6a:3b:5d: 1d:a0:4a:6a:73:48:2e:64:d3:ea:1f:04:97:29:de: 1d:86:a2:51:89:78:a6:78:ce:23:95:75:85:42:ee: 6d:91:e1:14:01:a2:94:dd:e4:04:4f:cf:fb:55:b3: 56:7c:97:6c:89:35:f8:ab:a6:15:33:db:38:6f:9f: 60:4a:55:49:2e:7e:c4:c7:41:69:39:a8:31:7f:96: 9d:7a:4e:ca:26:b6:51:b1:99:64:87:12:7b:50:48: 88:c5:6f:fd:04:1e:95:3d:2e:85:fd:76:4a:24:e0: 75:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141390 147176 sbgp-ipAddrBlock: critical IPv4: 103.174.190.0/23 IPv6: 2001:df7:d280::/48 Signature Algorithm: sha256WithRSAEncryption 8f:c1:3b:ae:2b:2c:23:37:f9:b1:7e:a6:ce:96:b5:10:18:61: 4a:53:2e:40:57:17:b6:68:69:4e:00:5b:c7:09:17:49:17:7d: 13:ea:83:73:5c:d3:04:74:5f:94:79:fa:2a:80:bd:7e:c9:4f: d6:d0:54:54:96:25:a6:20:bd:ce:c1:0f:84:24:62:8c:9f:e7: db:70:88:ab:6c:65:11:96:00:c3:a2:54:ab:37:2f:aa:1d:23: db:29:a8:de:d2:7d:43:cd:91:2e:02:d8:30:76:68:8c:a5:41: e3:f2:f2:a1:fe:bc:47:62:f1:10:9f:6e:a9:8d:ad:74:44:53: 87:1d:95:9a:d4:1b:b6:52:a5:b3:21:7f:e5:f7:c4:91:09:3c: db:89:ff:22:bf:75:07:5e:76:e4:17:7e:ea:04:9c:5d:4c:7f: f0:4f:66:f6:22:9c:12:73:ce:d6:b8:f7:a8:b8:33:f3:1d:31: 40:db:82:b0:b9:7a:eb:52:03:4b:7c:8d:0e:6b:86:56:24:2e: 20:66:e8:cb:30:b2:05:5a:5e:10:87:a9:57:9f:4a:0e:82:19: e3:7f:3a:b5:23:c8:cb:52:b8:54:0c:c8:0e:d9:5d:23:02:c6: e9:30:eb:e5:9c:e7:0f:bc:80:8e:e6:79:f1:85:54:5e:f4:1f: 74:02:44:ef -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIDAnYcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExODIwMzEzN1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRUMzOEMxMTAvBgNVBAUTKEMzOTZDMUU1MDM3RDMzNUY3MzQxQ0Ey RUNGODIyNjEzMDBDREZFOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7SfQ/0sCWfklC1GuV30nSqKWRJEKBr1RdLzCG/jNk4qWn/IgGqvTOtKhHv/2U 6QBXmZbt58wWP5fFhZdybZYf0vbosevqbdYThKxBT8clWOGo2W2QUUscWV2iCq1M WBn5EVVGcU5VDnJ3VFP79w2lhJFA1VtSJuqlGxGXhkpHPAEdE4cCdFMAs08OnU46 7a2pS2o7XR2gSmpzSC5k0+ofBJcp3h2GolGJeKZ4ziOVdYVC7m2R4RQBopTd5ARP z/tVs1Z8l2yJNfirphUz2zhvn2BKVUkufsTHQWk5qDF/lp16TsomtlGxmWSHEntQ SIjFb/0EHpU9LoX9dkok4HV7AgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUw5bB5QN9 M19zQcouz4ImEwDN/pUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVDMzhDLzg3MDQ4REFBMzEwNDExRUM4M0RGMkM1QkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFQzM4Qy84NzA0OERBQTMxMDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFO OU0xOXpRY291ejRJbUV3RE5fcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAihOAgMCPugwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAFnrr4w DwQCAAIwCQMHACABDffSgDANBgkqhkiG9w0BAQsFAAOCAQEAj8E7rissIzf5sX6m zpa1EBhhSlMuQFcXtmhpTgBbxwkXSRd9E+qDc1zTBHRflHn6KoC9fslP1tBUVJYl piC9zsEPhCRijJ/n23CIq2xlEZYAw6JUqzcvqh0j2ymo3tJ9Q82RLgLYMHZojKVB 4/Lyof68R2LxEJ9uqY2tdERThx2VmtQbtlKlsyF/5ffEkQk824n/Ir91B1525Bd+ 6gScXUx/8E9m9iKcEnPO1rj3qLgz8x0xQNuCsLl661IDS3yNDmuGViQuIGboyzCy BVpeEIepV59KDoIZ4386tSPIy1K4VAzIDtldIwLG6TDr5ZznD7yAjuZ58YVUXvQf dAJE7w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:51 2025 by rpki-client