This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer (raw, json) Hash identifier: suDU6EKHNNE0NVP6zURhKAfKhw9fA7Httme/p7dOb5M= Subject key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027601 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft caRepository: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 16:11:45 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 141193 IP: 103.156.50.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161281 (0x27601) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 18 16:11:45 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:95:e4:4b:28:69:f2:55:c9:3f:2c:30:ec:93: 5a:19:89:a1:95:3f:29:6c:99:0e:6a:21:98:e9:84: c3:cd:d6:6c:97:6b:17:7f:67:d2:af:9b:ba:85:a8: 4a:f8:a7:df:6e:95:f2:ff:8b:5b:db:c9:00:fc:83: 81:07:bc:b9:67:cf:92:0b:35:af:1a:1a:8f:33:73: ea:86:27:15:a0:d2:cd:57:b5:d6:9a:e4:d1:c8:ca: a4:88:c9:27:4a:e7:81:4e:57:72:ca:20:89:ee:39: 44:2d:aa:7e:7c:c3:7f:e9:5e:15:6a:03:09:f4:1b: 3b:84:e8:5c:20:b0:12:02:bb:e5:ba:ea:9c:6b:41: 4d:4e:da:e7:5b:68:3f:1f:92:33:a2:50:9d:13:e3: fd:be:a1:6c:96:57:5a:e2:72:6b:b3:c8:97:47:fe: da:3a:75:40:49:d7:d1:68:1f:e4:b8:c7:a7:65:bd: c1:a8:5f:dc:90:e4:d3:b7:a8:92:8d:18:ba:55:87: 7b:68:bb:88:13:ce:41:a9:e1:4e:3b:a1:51:4b:dc: bd:4b:7e:3f:00:a5:79:8d:00:dd:90:f6:e2:64:82: 91:74:01:92:e7:c0:29:80:7d:6e:c1:9b:78:1d:81: 11:19:48:fb:86:af:de:fe:a4:f9:9a:34:06:eb:dc: f8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141193 sbgp-ipAddrBlock: critical IPv4: 103.156.50.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:9b:ba:90:78:20:66:e7:4a:05:b9:75:0c:c6:b9:9d:2e:e4: 7f:61:61:e5:4c:a1:6b:b3:40:e4:86:73:7f:36:94:d2:16:41: 68:c3:b8:49:54:bb:ca:ba:34:45:5a:57:45:70:ee:10:a8:7c: 50:4f:14:67:fa:9c:d0:79:bd:7c:37:ee:34:73:0a:fb:c6:b2: 4c:ad:34:92:36:5a:d4:ec:2b:7d:2c:13:aa:88:fa:0d:a4:fb: cb:3f:8a:f3:ee:65:d2:ce:57:97:44:c0:5c:a1:21:f5:67:a4: 8f:0e:ca:6d:f7:2f:d7:f8:68:bc:f2:37:92:52:76:37:d3:0a: 0d:13:bc:6b:cf:9a:ca:f3:ce:86:3e:ea:66:fe:53:34:55:d7: fd:2b:99:d3:23:58:5f:49:5b:19:ad:88:67:e0:24:5c:c2:63: e2:d5:a9:d4:9a:e6:66:97:7c:46:8c:23:05:8a:cb:fa:ab:1a: 25:4c:32:45:7b:82:13:89:17:d4:12:19:e7:f2:2f:4e:ac:85: 08:36:20:21:65:00:cf:04:b0:9b:16:0d:81:52:53:10:79:20: 98:c8:40:12:2a:3b:8f:15:fe:2f:99:c1:95:07:52:1c:9b:f3: e8:94:6f:0a:64:32:1f:6a:51:6f:d4:89:cb:fa:8d:a1:0c:a4: 24:27:aa:62 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnYBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExODE2MTE0NVoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0Ux RjQzODQ5MjVERUE1MjU0OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/leRLKGnyVck/LDDsk1oZiaGVPylsmQ5qIZjphMPN1myXaxd/Z9Kvm7qFqEr4 p99ulfL/i1vbyQD8g4EHvLlnz5ILNa8aGo8zc+qGJxWg0s1Xtdaa5NHIyqSIySdK 54FOV3LKIInuOUQtqn58w3/pXhVqAwn0GzuE6FwgsBICu+W66pxrQU1O2udbaD8f kjOiUJ0T4/2+oWyWV1ricmuzyJdH/to6dUBJ19FoH+S4x6dlvcGoX9yQ5NO3qJKN GLpVh3tou4gTzkGp4U47oVFL3L1Lfj8ApXmNAN2Q9uJkgpF0AZLnwCmAfW7Bm3gd gREZSPuGr97+pPmaNAbr3PgRAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUxbnzgbRc 4RFJOT4fQ4SSXepSVIowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZCRTg4L0ZCN0ExNjRBRkJFMTExRUFCQUYyNEI2NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JS YzRSRkpPVDRmUTRTU1hlcFNWSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAieJMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5wyMA0GCSqG SIb3DQEBCwUAA4IBAQB+m7qQeCBm50oFuXUMxrmdLuR/YWHlTKFrs0DkhnN/NpTS FkFow7hJVLvKujRFWldFcO4QqHxQTxRn+pzQeb18N+40cwr7xrJMrTSSNlrU7Ct9 LBOqiPoNpPvLP4rz7mXSzleXRMBcoSH1Z6SPDspt9y/X+Gi88jeSUnY30woNE7xr z5rK886GPupm/lM0Vdf9K5nTI1hfSVsZrYhn4CRcwmPi1anUmuZml3xGjCMFisv6 qxolTDJFe4ITiRfUEhnn8i9OrIUINiAhZQDPBLCbFg2BUlMQeSCYyEASKjuPFf4v mcGVB1Icm/PolG8KZDIfalFv1InL+o2hDKQkJ6pi -----END CERTIFICATE-----Generated at Sat Dec 6 13:16:30 2025 by rpki-client