This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer File: y2yF51LVad_PHekEycvnHkg-9fI.cer (raw, json) Hash identifier: cWfkWWFHJWuLd5qRPLhJbAtMSKqCa2hMFgSfoSpkfUc= Subject key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B9D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 01:49:27 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 133120 IP: 103.40.109.0/24 IP: 103.80.20.0/23 IP: 103.243.110.0/24 IP: 182.161.64.0/23 IP: 203.31.65.0/24 IP: 203.55.90.0/23 IP: 2407:d080::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162717 (0x27b9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 01:49:27 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:9d:8e:2d:65:bf:5b:db:55:e8:83:68:af: 6c:15:08:75:ad:22:25:4b:35:d8:ff:fb:44:00:89: 35:2a:66:6e:70:5b:b6:2c:bc:d6:9f:e9:f0:bf:24: 4b:67:ed:52:cb:f2:28:46:42:5e:ae:71:35:b3:9f: 22:4c:1d:78:15:36:a4:e7:5d:d0:a0:83:32:cd:84: c7:b8:0f:5a:86:22:93:df:c8:83:04:d6:bd:d3:fe: e7:ed:be:f2:70:a8:e5:56:57:7d:e2:6e:59:17:36: 77:34:ad:3f:33:cc:93:3f:b8:83:12:ff:e3:81:f4: 95:0f:a5:a4:07:79:35:dd:ed:fa:68:1d:54:0e:46: c7:f7:27:2e:4e:d2:05:fe:1a:f0:16:89:75:4c:17: df:a5:ca:f4:0b:59:c5:5c:ca:19:5f:7a:62:75:6c: 18:ec:5f:5a:77:9e:92:e7:10:a6:92:d8:f9:98:ee: 66:90:4e:28:0d:33:4d:33:2a:4c:a3:47:3a:f2:2c: d9:04:3f:07:ad:58:17:6b:d1:76:98:64:59:f0:5c: f7:df:e1:69:70:d9:19:dd:03:2c:b7:7c:e9:8a:44: c2:b7:ba:8c:0e:4a:b3:30:0c:a4:07:ea:b5:59:46: 09:96:a7:13:04:6f:dd:ce:92:c1:22:c0:de:d6:9e: 7e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133120 sbgp-ipAddrBlock: critical IPv4: 103.40.109.0/24 103.80.20.0/23 103.243.110.0/24 182.161.64.0/23 203.31.65.0/24 203.55.90.0/23 IPv6: 2407:d080::/32 Signature Algorithm: sha256WithRSAEncryption 5e:47:c2:8a:45:0c:66:4b:66:51:60:fa:3b:2b:b0:d9:00:2d: c0:cc:81:48:09:63:a8:24:ae:1e:09:58:6a:c4:ad:8a:a4:30: be:e3:e4:b1:d9:03:7b:5d:05:24:c8:e0:62:9e:e2:4b:80:85: e9:b0:61:2b:52:26:8d:a9:f9:06:53:76:21:a5:c8:cd:d0:3d: ea:eb:0f:f1:08:45:0d:82:54:6d:a9:5e:28:e7:ad:a6:81:8c: 34:b6:1b:97:6e:4a:60:5a:5d:c0:ee:7b:f9:74:a6:f6:f4:cc: 8a:db:aa:de:6f:47:7f:ff:48:d6:62:33:16:3e:c3:d0:c9:0a: 73:b7:53:6c:5f:b6:59:f5:ff:b3:d6:8f:40:e0:5c:6a:90:9d: 72:f4:c8:88:ca:ad:b3:31:2a:6a:e2:f5:5b:0a:39:34:49:16: 37:8e:87:17:b9:62:16:01:33:c8:37:ac:bb:2e:83:19:9c:31: 08:3f:46:ce:85:f9:81:27:0d:bf:ed:11:5e:ef:02:65:1a:5e: 05:f5:ed:42:49:b7:a0:0f:01:64:dc:2a:91:13:3f:2b:e1:57: 8f:f9:13:48:99:3e:b9:5d:7f:8b:a1:db:03:e3:f8:48:22:7f: b9:99:f2:f2:a6:d5:d4:ec:e8:0e:84:26:05:a4:32:68:51:8b: 8a:9c:be:9e -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIDAnudMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDAxNDkyN1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkMwMzkxMTAvBgNVBAUTKENCNkM4NUU3NTJENTY5REZDRjFERTkw NEM5Q0JFNzFFNDgzRUY1RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE+Z2OLWW/W9tV6INor2wVCHWtIiVLNdj/+0QAiTUqZm5wW7YsvNaf6fC/JEtn 7VLL8ihGQl6ucTWznyJMHXgVNqTnXdCggzLNhMe4D1qGIpPfyIME1r3T/uftvvJw qOVWV33iblkXNnc0rT8zzJM/uIMS/+OB9JUPpaQHeTXd7fpoHVQORsf3Jy5O0gX+ GvAWiXVMF9+lyvQLWcVcyhlfemJ1bBjsX1p3npLnEKaS2PmY7maQTigNM00zKkyj RzryLNkEPwetWBdr0XaYZFnwXPff4Wlw2RndAyy3fOmKRMK3uowOSrMwDKQH6rVZ RgmWpxMEb93OksEiwN7Wnn7xAgMBAAGjggM8MIIDODAdBgNVHQ4EFgQUy2yF51LV ad/PHekEycvnHkg+9fIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJDMDM5L0JCNTMyM0U4MjVDMjExRUNCNDk5RDE1OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCQzAzOS9CQjUzMjNFODI1QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFM VmFkX1BIZWtFeWN2bkhrZy05ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAggAMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQAZyhtAwQBZ1AU AwQAZ/NuAwQBtqFAAwQAyx9BAwQByzdaMA0EAgACMAcDBQAkB9CAMA0GCSqGSIb3 DQEBCwUAA4IBAQBeR8KKRQxmS2ZRYPo7K7DZAC3AzIFICWOoJK4eCVhqxK2KpDC+ 4+Sx2QN7XQUkyOBinuJLgIXpsGErUiaNqfkGU3YhpcjN0D3q6w/xCEUNglRtqV4o 562mgYw0thuXbkpgWl3A7nv5dKb29MyK26reb0d//0jWYjMWPsPQyQpzt1NsX7ZZ 9f+z1o9A4FxqkJ1y9MiIyq2zMSpq4vVbCjk0SRY3jocXuWIWATPIN6y7LoMZnDEI P0bOhfmBJw2/7RFe7wJlGl4F9e1CSbegDwFk3CqREz8r4VeP+RNImT65XX+LodsD 4/hIIn+5mfLyptXU7OgOhCYFpDJoUYuKnL6e -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:36 2025 by rpki-client