This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer File: wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer (raw, json) Hash identifier: mfRyZgwU7hItJIJBYGWunEhSt5Lz5qzU+o4T6yWwqGY= Subject key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02821C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft caRepository: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 31 Dec 2025 12:21:20 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 150423 IP: 103.38.250.0/23 IP: 2001:df1:88c0::/48 IP: 2401:f2e0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164380 (0x2821c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 31 12:21:20 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:62:20:69:50:e9:5f:35:ea:f7:85:d8:10: 41:d5:3a:97:c3:90:7a:c1:a8:97:20:49:7e:c0:d8: f7:98:99:e3:5f:ee:c1:56:d6:bd:2b:d3:86:2e:28: c1:71:25:1a:09:36:b1:8f:d1:84:40:d9:f0:0b:e8: 79:81:01:68:b9:73:1f:e8:40:39:cf:b4:fc:f2:c8: 2a:0f:c8:bc:92:02:c1:b9:92:be:8b:4f:78:c9:9e: e2:1f:d9:94:79:46:00:e2:6e:58:d3:8d:4c:8c:9c: 53:6f:38:31:ff:45:6f:52:7a:63:ba:62:73:97:2c: 07:55:c8:09:a4:93:45:aa:e3:4e:8c:13:ea:e5:cf: 08:2d:67:23:da:7c:15:8d:80:b6:4b:00:31:6c:eb: 52:64:33:4a:1b:85:cc:53:00:13:fc:62:5e:95:f0: 88:14:c6:c4:13:16:d9:c9:80:f2:05:87:e7:23:ec: 44:ac:ca:be:b2:15:99:8d:d8:8e:e8:38:da:b4:e1: f8:ed:80:2e:51:d2:41:76:95:99:07:76:86:72:a8: 1c:16:7a:b0:cf:7c:14:bf:12:54:29:8d:bd:be:76: 80:8c:a8:a1:73:5a:cc:50:a6:88:df:e7:16:12:44: c9:d0:de:bd:b8:c9:e5:92:48:1c:26:2c:b8:0c:d1: 06:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 150423 sbgp-ipAddrBlock: critical IPv4: 103.38.250.0/23 IPv6: 2001:df1:88c0::/48 2401:f2e0::/32 Signature Algorithm: sha256WithRSAEncryption c9:50:77:22:5d:61:89:af:4a:f2:82:86:a6:74:d2:04:44:66: 6f:08:b6:0e:38:68:ab:a6:0f:1c:7a:1f:b6:e2:58:7a:35:86: 7e:4d:1b:ad:5c:2f:4e:3d:21:4f:8d:18:b7:6f:ae:12:87:1f: cf:a7:d0:67:50:ba:32:4f:77:2b:2e:65:eb:b6:59:fb:59:0c: d3:f0:a6:c5:a8:cb:cb:b9:82:a3:f2:b6:b1:5d:1a:1d:eb:43: f6:c7:66:da:d0:aa:c2:20:6a:eb:4e:59:74:76:93:85:f3:c4: 61:76:a5:c7:1b:c3:f4:66:c0:97:cf:37:99:d2:fd:1f:b4:37: 17:aa:66:4a:67:08:66:85:23:4a:a4:2b:70:ea:0e:e5:59:24: 55:ea:bb:b3:c5:a6:ee:88:5b:e7:c2:57:e3:b6:a6:8d:d0:16: 26:6e:c2:c4:c6:05:7d:41:c8:b7:99:63:0a:bd:d6:92:4a:04: 26:6d:ab:5b:bc:e2:d4:aa:0d:6e:78:b3:3a:00:3d:92:fd:7f: 33:f8:25:44:9c:cc:7d:e2:9f:55:1c:7c:29:b1:29:0f:33:de: fa:fc:89:45:7e:c1:f4:dc:a1:f7:ea:df:ce:e5:5a:4a:4e:92: f4:6f:76:58:56:6e:fa:d4:d2:26:c8:5d:95:a5:65:cd:12:99: ad:53:49:62 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIDAoIcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMTEyMjEyMFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxMTFEMzYxMTAvBgNVBAUTKEMwQUVGNjI1QUY5RDUwNEFFODQ3RjY5 MjNEQTg5MTA2OUM5MDAzRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHd2IgaVDpXzXq94XYEEHVOpfDkHrBqJcgSX7A2PeYmeNf7sFW1r0r04YuKMFx JRoJNrGP0YRA2fAL6HmBAWi5cx/oQDnPtPzyyCoPyLySAsG5kr6LT3jJnuIf2ZR5 RgDibljTjUyMnFNvODH/RW9SemO6YnOXLAdVyAmkk0Wq406ME+rlzwgtZyPafBWN gLZLADFs61JkM0obhcxTABP8Yl6V8IgUxsQTFtnJgPIFh+cj7ESsyr6yFZmN2I7o ONq04fjtgC5R0kF2lZkHdoZyqBwWerDPfBS/ElQpjb2+doCMqKFzWsxQpojf5xYS RMnQ3r24yeWSSBwmLLgM0QapAgMBAAGjggMnMIIDIzAdBgNVHQ4EFgQUwK72Ja+d UEroR/aSPaiRBpyQA/QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTExRDM2L0ZDMTNBM0U0OTFBQTExRUQ4MEMxN0E1RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExMUQzNi9GQzEzQTNFNDkxQUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEt ZFVFcm9SX2FTUGFpUkJweVFBX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkuXMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQBZyb6MBYEAgAC MBADBwAgAQ3xiMADBQAkAfLgMA0GCSqGSIb3DQEBCwUAA4IBAQDJUHciXWGJr0ry goamdNIERGZvCLYOOGirpg8ceh+24lh6NYZ+TRutXC9OPSFPjRi3b64Shx/Pp9Bn ULoyT3crLmXrtln7WQzT8KbFqMvLuYKj8raxXRod60P2x2ba0KrCIGrrTll0dpOF 88RhdqXHG8P0ZsCXzzeZ0v0ftDcXqmZKZwhmhSNKpCtw6g7lWSRV6ruzxabuiFvn wlfjtqaN0BYmbsLExgV9Qci3mWMKvdaSSgQmbatbvOLUqg1ueLM6AD2S/X8z+CVE nMx94p9VHHwpsSkPM976/IlFfsH03KH36t/O5VpKTpL0b3ZYVm761NImyF2VpWXN EpmtU0li -----END CERTIFICATE-----Generated at Sun Jan 25 06:03:39 2026 by rpki-client