This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer File: xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer (raw, json) Hash identifier: srR7wD8+3CJBXxqrW8xGiCXxDT48OYlUqke2n8zSc6o= Subject key identifier: C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B5D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 16:40:38 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 132102 IP: 103.28.20.0/24 IP: 2001:df0:267::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162653 (0x27b5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 16:40:38 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9157B66, serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:77:d2:8a:61:0e:cd:8c:e1:c7:ab:d2:7c:06: 9a:65:cd:0a:69:4c:22:8d:d9:83:bc:4f:5e:41:e7: 99:1d:21:1f:34:4c:6f:1a:b9:4f:cc:6a:87:23:1d: fa:8e:94:57:be:eb:f9:cf:27:64:52:3a:0a:8d:55: 8b:e7:5d:1c:0f:a3:38:dd:63:49:75:95:c4:97:bd: c8:3e:45:b9:d3:dc:cf:53:9d:be:f7:c2:63:af:62: 9e:3a:66:eb:64:7b:cf:4e:2d:76:b1:b6:53:6d:0d: c0:a8:b2:3d:bb:1c:84:04:bf:63:62:1c:b5:b4:fc: 35:a6:a0:67:32:a3:23:83:8c:52:0b:5c:f0:07:fa: 45:c4:f1:d5:e7:f8:c0:d6:3a:a2:78:13:23:11:d5: 3f:45:b1:b3:30:cd:66:a5:15:e2:a0:13:4e:22:f7: e1:06:dd:7a:48:b6:69:47:f1:10:8c:69:f4:2b:d6: 87:ca:bf:69:27:f9:6d:48:92:4a:46:6a:29:55:ee: 28:19:5e:a6:97:ba:3c:19:17:38:e8:15:d0:49:51: c6:c4:bc:22:98:82:e3:a4:54:68:f5:2e:47:b8:94: 8f:89:16:3b:d7:cf:46:15:45:1f:6b:70:63:12:a7: 21:e7:9f:84:4c:73:76:eb:ed:38:a4:d4:6e:3d:44: 20:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 132102 sbgp-ipAddrBlock: critical IPv4: 103.28.20.0/24 IPv6: 2001:df0:267::/48 Signature Algorithm: sha256WithRSAEncryption bf:4f:fa:d1:b4:43:98:12:5d:ac:6e:a7:19:75:bb:fb:83:f6: b8:31:1a:48:8c:e6:03:77:15:c8:4a:96:71:a4:7a:44:a7:af: 1f:ea:63:3a:b5:e8:21:99:d4:a3:ff:fa:85:2a:80:a7:27:32: 9e:da:6b:93:32:60:1b:06:a7:3a:29:f3:08:61:bf:e5:6c:17: 9b:ab:77:3f:03:0a:2f:d4:1b:2f:c7:25:98:79:47:20:20:0d: f3:49:82:ed:ae:6d:34:bf:a1:c1:71:81:35:b9:93:5f:b3:9c: 9c:dc:29:b5:e5:f4:0d:2e:88:57:a3:6b:6b:03:be:d5:3b:a0: 2f:57:a6:65:dc:6b:5a:4b:53:1c:bb:4b:61:c6:d5:d3:47:ce: e9:5e:48:88:97:9e:0e:ec:74:b4:bf:60:a6:09:74:86:3f:95: c5:b1:94:43:f6:8f:de:13:45:c0:6a:35:17:14:d8:be:a8:67: 4c:e3:3d:74:1a:39:a8:4a:4f:16:bf:25:38:3e:c2:b0:ea:bc: 6b:47:64:99:f9:2f:cb:db:58:75:f6:fd:8a:3a:de:82:33:74: 90:77:fc:2f:9f:56:1c:22:59:e8:e8:18:d8:e1:b6:20:c8:9e: 65:91:3f:73:19:67:19:f1:bf:13:44:03:d7:e6:ce:5d:0c:7b: 55:ec:16:44 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAntdMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzE2NDAzOFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTdCNjYxMTAvBgNVBAUTKEM0NTVCMDg2QkFCODY0N0NEMjUxMENB ODMyNDFFNzAwMTRDRDhBNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDad9KKYQ7NjOHHq9J8BpplzQppTCKN2YO8T15B55kdIR80TG8auU/MaocjHfqO lFe+6/nPJ2RSOgqNVYvnXRwPozjdY0l1lcSXvcg+RbnT3M9Tnb73wmOvYp46Zutk e89OLXaxtlNtDcCosj27HIQEv2NiHLW0/DWmoGcyoyODjFILXPAH+kXE8dXn+MDW OqJ4EyMR1T9FsbMwzWalFeKgE04i9+EG3XpItmlH8RCMafQr1ofKv2kn+W1IkkpG ailV7igZXqaXujwZFzjoFdBJUcbEvCKYguOkVGj1Lke4lI+JFjvXz0YVRR9rcGMS pyHnn4RMc3br7Tik1G49RCCfAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUxFWwhrq4 ZHzSUQyoMkHnABTNikQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU3QjY2L0U1QzREMzI2OTAzODExRUJBNERDNUE1NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1N0I2Ni9FNUM0RDMyNjkwMzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJx NFpIelNVUXlvTWtIbkFCVE5pa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgQGMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZxwUMA8EAgAC MAkDBwAgAQ3wAmcwDQYJKoZIhvcNAQELBQADggEBAL9P+tG0Q5gSXaxupxl1u/uD 9rgxGkiM5gN3FchKlnGkekSnrx/qYzq16CGZ1KP/+oUqgKcnMp7aa5MyYBsGpzop 8whhv+VsF5urdz8DCi/UGy/HJZh5RyAgDfNJgu2ubTS/ocFxgTW5k1+znJzcKbXl 9A0uiFeja2sDvtU7oC9XpmXca1pLUxy7S2HG1dNHzuleSIiXng7sdLS/YKYJdIY/ lcWxlEP2j94TRcBqNRcU2L6oZ0zjPXQaOahKTxa/JTg+wrDqvGtHZJn5L8vbWHX2 /Yo63oIzdJB3/C+fVhwiWejoGNjhtiDInmWRP3MZZxnxvxNEA9fmzl0Me1XsFkQ= -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:50 2025 by rpki-client