This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer File: y78mA3JNeFZrHBLDLVxIH10w8fI.cer (raw, json) Hash identifier: Dj8BlVFOI1CJ2HuPMjiz9EzioGLnHRYEdaGfS7q2uWA= Subject key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0273A0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 06 Nov 2025 16:42:18 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 147311 IP: 103.174.196.0/23 IP: 2400:1520::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160672 (0x273a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 6 16:42:18 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:0d:b9:fc:19:97:b0:ba:1f:f6:af:20:6a: ae:c2:e4:b0:51:a1:d7:da:e4:bf:08:9a:6a:b4:d4: 3c:78:b9:f4:e1:70:eb:c1:2a:fc:f1:9e:28:31:33: 25:5f:dc:fd:93:f9:bb:1e:fd:a4:2c:9b:e3:b1:2c: ad:c1:83:c6:87:60:6b:6a:65:8e:2b:e8:f7:fd:d0: 10:6b:1a:e2:c0:da:99:f3:be:95:1c:d9:53:2f:a0: cb:3a:13:56:b4:05:70:b1:0b:e5:31:a5:d7:63:2d: 48:43:28:05:1d:3c:2f:6e:9d:c7:5b:1a:d0:c2:ec: 9e:de:d6:ef:0b:47:4b:7f:d5:e3:c1:34:38:99:ea: 3c:64:bb:cc:30:1a:1f:8e:37:73:07:d4:0e:72:dd: 47:fe:ab:1f:be:7c:63:a1:29:b6:05:5e:d1:75:3f: 7a:e1:12:1e:fc:72:ad:8d:57:80:9f:fd:ec:e1:54: 0a:36:00:75:73:e4:3c:8a:ff:02:c7:c1:21:4f:32: da:0e:0e:31:56:d8:0f:b3:0b:63:3e:a8:ee:9b:84: d4:0b:3b:9d:8a:5c:4a:fb:f8:d9:fc:d0:80:85:b0: c9:4f:32:88:7f:a6:1d:fd:c3:24:79:2d:a5:5d:81: 11:d8:de:85:2b:2e:b2:88:fe:c8:ed:b2:fc:df:3b: bd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 147311 sbgp-ipAddrBlock: critical IPv4: 103.174.196.0/23 IPv6: 2400:1520::/32 Signature Algorithm: sha256WithRSAEncryption 0c:ad:60:f7:0e:0a:8f:22:ac:9e:8a:89:69:2d:ee:a0:e8:6e: c9:f5:df:40:6a:30:05:2c:61:32:c8:52:20:7e:fd:8b:82:45: ee:7a:7c:62:f2:e0:de:bd:a1:ff:c7:3c:1f:80:02:89:5f:17: f6:ba:1d:77:aa:76:6a:9c:a4:17:87:07:a9:05:ac:3b:7c:01: c3:be:90:19:5a:5f:30:e8:db:87:2f:0b:5d:d7:cb:27:09:93: 1e:51:37:7d:b1:ae:47:fc:a7:78:74:27:c7:2e:a3:47:05:55: 49:08:bd:f0:eb:30:03:91:69:63:70:c3:f2:36:fb:e1:74:8e: ad:13:f6:a2:f6:c2:27:11:f5:83:3e:df:59:a0:15:77:57:5f: 1a:07:78:b6:2f:f2:a7:19:3d:09:5a:66:a2:d0:05:e1:1e:38: b4:16:0e:b2:da:60:73:ab:5e:c3:13:5d:2e:41:e3:51:bd:2f: ce:d9:68:df:b7:90:5e:65:4e:e4:64:da:9f:44:b9:9a:8a:a8: 3c:57:71:37:53:f9:5c:22:1c:16:45:8b:a5:b5:37:25:3b:45: 04:30:ec:ce:f1:71:2a:22:e1:55:ea:53:41:31:00:ac:3e:5e: 82:97:0d:bb:d7:e4:4b:05:aa:37:b3:ab:a8:cc:9f:95:e7:16: 21:7f:2f:6c -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnOgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNjE2NDIxOFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjc3MDAxMTAvBgNVBAUTKENCQkYyNjAzNzI0RDc4NTY2QjFDMTJD MzJENUM0ODFGNUQzMEYxRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAEQ25/BmXsLof9q8gaq7C5LBRodfa5L8Immq01Dx4ufThcOvBKvzxnigxMyVf 3P2T+bse/aQsm+OxLK3Bg8aHYGtqZY4r6Pf90BBrGuLA2pnzvpUc2VMvoMs6E1a0 BXCxC+UxpddjLUhDKAUdPC9uncdbGtDC7J7e1u8LR0t/1ePBNDiZ6jxku8wwGh+O N3MH1A5y3Uf+qx++fGOhKbYFXtF1P3rhEh78cq2NV4Cf/ezhVAo2AHVz5DyK/wLH wSFPMtoODjFW2A+zC2M+qO6bhNQLO52KXEr7+Nn80ICFsMlPMoh/ph39wyR5LaVd gRHY3oUrLrKI/sjtsvzfO72RAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUy78mA3JN eFZrHBLDLVxIH10w8fIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI3NzAwL0NDREJGNEYwQUU1NzExRUNCNEExREE2NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNzcwMC9DQ0RCRjRGMEFFNTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNK TmVGWnJIQkxETFZ4SUgxMHc4ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAj9vMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ67EMA0EAgAC MAcDBQAkABUgMA0GCSqGSIb3DQEBCwUAA4IBAQAMrWD3DgqPIqyeiolpLe6g6G7J 9d9AajAFLGEyyFIgfv2LgkXuenxi8uDevaH/xzwfgAKJXxf2uh13qnZqnKQXhwep Baw7fAHDvpAZWl8w6NuHLwtd18snCZMeUTd9sa5H/Kd4dCfHLqNHBVVJCL3w6zAD kWljcMPyNvvhdI6tE/ai9sInEfWDPt9ZoBV3V18aB3i2L/KnGT0JWmai0AXhHji0 Fg6y2mBzq17DE10uQeNRvS/O2Wjft5BeZU7kZNqfRLmaiqg8V3E3U/lcIhwWRYul tTclO0UEMOzO8XEqIuFV6lNBMQCsPl6Clw271+RLBao3s6uozJ+V5xYhfy9s -----END CERTIFICATE-----Generated at Sun Dec 7 02:55:22 2025 by rpki-client