This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer File: xHENSLTk8rc1vksbXJDtuI0mmyw.cer (raw, json) Hash identifier: PIRkQLC4rs5Om138I8R89DgJ6kH9+pwceSk0nBqWT48= Subject key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02765F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 17:28:58 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 142543 IP: 103.22.96.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161375 (0x2765f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 19 17:28:58 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91BC2E3, serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:08:21:bc:c1:1d:86:9d:bc:25:9b:f5:3a: 4d:85:28:58:a4:14:e2:fc:d4:ae:4a:1a:22:99:07: 31:d7:b1:85:31:a9:6b:61:4b:cd:e0:0a:bc:f9:dd: 93:80:03:c4:6c:af:bf:35:eb:e1:79:a3:d1:09:1d: 66:36:4d:0c:42:92:c5:dc:4e:1d:44:0d:77:42:39: 92:4b:91:dc:82:5d:7b:72:21:aa:6e:1d:c3:47:96: 52:83:06:c3:d0:d0:f7:03:e5:42:17:17:45:62:5b: c8:2f:88:d5:bc:66:88:dd:54:27:73:48:41:4b:0e: 7d:ed:ea:27:b3:11:2f:51:0d:0e:d4:b1:47:6b:ba: 92:57:45:4a:6b:a0:f9:62:28:ca:14:a7:8f:fa:51: c3:9d:ce:a2:72:ad:9f:d0:1e:ff:47:e3:db:36:a4: 68:ce:32:59:cd:b3:04:5f:40:91:9c:33:28:61:88: e5:89:6a:0c:88:93:21:e2:f9:d1:49:42:34:c8:f6: a0:87:5a:6a:db:70:c6:df:b4:99:d7:34:04:19:1a: f2:46:e5:a3:58:fa:c1:d4:cc:f4:19:9d:8c:e5:0e: a7:f1:ce:6c:de:0f:8f:2e:bb:52:85:be:d0:64:f1: e5:83:97:2d:d9:1a:f7:0e:53:fb:b5:9e:91:8f:fb: ee:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 142543 sbgp-ipAddrBlock: critical IPv4: 103.22.96.0/23 Signature Algorithm: sha256WithRSAEncryption 60:8b:6c:16:12:17:3b:75:cf:76:2b:3b:0c:75:05:da:ce:e1: f5:98:cc:f9:dd:69:54:d8:c1:35:86:ff:e5:db:2a:48:65:f9: fe:ea:29:ea:32:c4:9e:8a:12:7e:fa:a5:9f:a8:79:bc:e1:33: 52:68:84:fe:de:6f:b3:6b:af:1f:14:0d:e9:5d:8b:74:69:9c: 8a:c6:a6:04:d7:23:20:ae:95:07:f2:d0:90:87:7a:16:c2:c2: e0:dc:a4:e2:1b:b7:52:a1:6b:19:bb:7c:86:0f:1f:6d:40:1c: 77:8f:d3:7c:bb:e5:1d:8e:33:23:c3:7d:13:8b:d6:a0:0c:d9: 05:b7:05:1e:0b:00:af:db:19:0c:37:fe:d0:c6:a7:01:57:d1: b8:fc:e9:a0:06:4c:1a:62:5c:e1:c5:76:40:64:5e:21:8d:05: 7e:02:83:cc:7d:77:c6:bf:f1:25:ca:9d:05:a0:fd:46:50:fe: f3:38:55:0c:41:97:cc:30:d5:4f:12:1e:ef:21:03:83:9d:bc: 2e:8b:9b:56:1f:5b:b6:47:36:25:88:4b:e4:3e:98:3f:cb:62: 1c:0b:d8:93:f7:a7:77:ef:c9:a2:a0:e3:03:6d:12:5f:4e:22: 74:9d:b9:10:c7:cc:06:e5:4f:26:be:8f:d4:22:0a:0b:6e:b1: b5:9a:f9:b5 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnZfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExOTE3Mjg1OFoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIx QjVDOTBFREI4OEQyNjlCMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZPQghvMEdhp28JZv1Ok2FKFikFOL81K5KGiKZBzHXsYUxqWthS83gCrz53ZOA A8Rsr7816+F5o9EJHWY2TQxCksXcTh1EDXdCOZJLkdyCXXtyIapuHcNHllKDBsPQ 0PcD5UIXF0ViW8gviNW8ZojdVCdzSEFLDn3t6iezES9RDQ7UsUdrupJXRUproPli KMoUp4/6UcOdzqJyrZ/QHv9H49s2pGjOMlnNswRfQJGcMyhhiOWJagyIkyHi+dFJ QjTI9qCHWmrbcMbftJnXNAQZGvJG5aNY+sHUzPQZnYzlDqfxzmzeD48uu1KFvtBk 8eWDly3ZGvcOU/u1npGP++4rAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUxHENSLTk 8rc1vksbXJDtuI0mmywwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJDMkUzLzlCNEE0ODkwODlBMDExRUQ4Mzc1OTM0NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCQzJFMy85QjRBNDg5MDg5QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xU azhyYzF2a3NiWEpEdHVJMG1teXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAizPMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZxZgMA0GCSqG SIb3DQEBCwUAA4IBAQBgi2wWEhc7dc92KzsMdQXazuH1mMz53WlU2ME1hv/l2ypI Zfn+6inqMsSeihJ++qWfqHm84TNSaIT+3m+za68fFA3pXYt0aZyKxqYE1yMgrpUH 8tCQh3oWwsLg3KTiG7dSoWsZu3yGDx9tQBx3j9N8u+UdjjMjw30Ti9agDNkFtwUe CwCv2xkMN/7QxqcBV9G4/OmgBkwaYlzhxXZAZF4hjQV+AoPMfXfGv/Elyp0FoP1G UP7zOFUMQZfMMNVPEh7vIQODnbwui5tWH1u2RzYliEvkPpg/y2IcC9iT96d378mi oOMDbRJfTiJ0nbkQx8wG5U8mvo/UIgoLbrG1mvm1 -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:30 2025 by rpki-client