This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer File: ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer (raw, json) Hash identifier: ueI1w6yxkmRGos0q0jJQ0j2RqWvgPXNrXewynCpNBMc= Subject key identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02749A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 11 Nov 2025 17:03:45 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 103.144.40.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160922 (0x2749a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 11 17:03:45 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91D2ACF, serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:84:b2:ce:85:e3:55:12:6f:d3:b9:77:fd:4d: 3b:b0:8e:66:0d:55:fe:8a:b4:e0:fc:0b:99:2d:a8: 58:b4:25:28:3e:20:43:33:b8:6d:dc:6e:df:5a:9a: 90:a0:98:d2:d2:cf:94:18:ca:e9:0a:a8:0a:9f:29: ea:87:a6:a9:e9:7c:cb:a1:09:16:f4:77:8d:ee:0f: 87:72:cb:d5:87:07:85:58:85:2d:e7:57:86:02:4c: a5:f1:20:7f:3b:81:a8:8a:e4:01:cc:ef:1e:2b:a4: a6:3d:0b:f1:b9:26:97:3f:f7:3f:f9:1a:79:ca:7c: 64:21:b1:5a:4f:25:74:c5:cc:41:44:87:de:ef:5d: ca:26:0f:20:10:e8:d6:ca:5f:0e:41:c3:0a:79:28: 42:09:50:7e:2f:99:8b:df:85:71:7a:a0:fd:90:75: 4b:5a:82:df:49:cf:2a:df:a3:7d:63:41:47:82:14: 6d:b0:67:c9:91:75:98:ec:82:b5:69:b2:32:a8:2b: 80:2e:9d:c9:de:f5:ed:04:59:7b:50:c0:81:97:93: 41:2f:45:88:37:92:fd:b7:50:74:90:c6:d9:4d:ca: 59:14:35:49:00:c5:12:35:a7:8a:58:55:58:96:b9: 75:ba:2a:c0:88:a9:e1:4b:13:b3:42:0e:15:3b:85: 7d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.40.0/23 Signature Algorithm: sha256WithRSAEncryption 87:33:b7:c3:ea:55:c9:06:88:7f:01:0f:b2:86:ad:b2:5c:02: 41:d8:06:52:d3:5b:36:66:75:7c:eb:10:31:ba:15:2a:f3:20: 25:72:1f:4f:d2:6b:c2:56:1d:bf:1f:13:ee:79:35:03:fb:73: 78:a0:71:3c:fa:cd:5a:50:a2:2b:ff:0e:17:a5:2a:9a:6e:8a: 9a:ab:a8:48:39:30:f1:d6:05:00:2f:ed:43:1a:81:5c:a2:00: c1:3b:80:b3:b1:42:27:ae:e1:bf:22:dd:5a:e4:96:9f:e4:2b: 2f:fe:d1:5a:3d:03:34:c7:a4:70:7e:3a:5f:63:76:c5:dc:c2: e3:4f:bd:cb:70:f0:cf:16:67:1e:e9:40:89:83:5e:62:ed:4b: b7:31:92:ab:23:b6:3f:b9:b3:1b:89:e2:09:29:6f:c3:0b:8e: eb:84:a2:46:2a:43:a5:f2:2b:58:e0:e0:63:22:ba:7a:ea:49: c7:49:ec:40:38:08:d9:c4:ec:ae:89:4b:4f:37:d7:67:32:04: e7:24:51:bd:3a:74:0f:fd:7e:51:0f:21:91:1a:c6:cf:5a:3d: 60:44:00:f9:ed:df:09:15:b1:17:06:7b:e3:a6:48:a4:29:72: a6:bc:3e:64:39:66:f6:b5:cc:27:e5:d8:6e:21:35:0c:53:4e: cf:4a:93:3b -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAnSaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMTE3MDM0NVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRDJBQ0YxMTAvBgNVBAUTKEM5RUQ0Qjc2NzZFM0Y1QTVCMUY4QTZB MEREN0UyMjFCNjNFNTM0QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8hLLOheNVEm/TuXf9TTuwjmYNVf6KtOD8C5ktqFi0JSg+IEMzuG3cbt9ampCg mNLSz5QYyukKqAqfKeqHpqnpfMuhCRb0d43uD4dyy9WHB4VYhS3nV4YCTKXxIH87 gaiK5AHM7x4rpKY9C/G5Jpc/9z/5GnnKfGQhsVpPJXTFzEFEh97vXcomDyAQ6NbK Xw5Bwwp5KEIJUH4vmYvfhXF6oP2QdUtagt9Jzyrfo31jQUeCFG2wZ8mRdZjsgrVp sjKoK4Auncne9e0EWXtQwIGXk0EvRYg3kv23UHSQxtlNylkUNUkAxRI1p4pYVViW uXW6KsCIqeFLE7NCDhU7hX35AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUye1Ldnbj 9aWx+Kag3X4iG2PlNKswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQyQUNGLzVBQzYyQjJBNzNFMzExRUE5QjU5NDM2RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEMkFDRi81QUM2MkIyQTczRTMxMUVBOUI1OTQzNkVDNEY5QUUwMi95ZTFMZG5i ajlhV3gtS2FnM1g0aUcyUGxOS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAFnkCgwDQYJKoZIhvcNAQELBQADggEBAIczt8PqVckGiH8BD7KG rbJcAkHYBlLTWzZmdXzrEDG6FSrzICVyH0/Sa8JWHb8fE+55NQP7c3igcTz6zVpQ oiv/DhelKppuipqrqEg5MPHWBQAv7UMagVyiAME7gLOxQieu4b8i3Vrklp/kKy/+ 0Vo9AzTHpHB+Ol9jdsXcwuNPvctw8M8WZx7pQImDXmLtS7cxkqsjtj+5sxuJ4gkp b8MLjuuEokYqQ6XyK1jg4GMiunrqScdJ7EA4CNnE7K6JS08312cyBOckUb06dA/9 flEPIZEaxs9aPWBEAPnt3wkVsRcGe+OmSKQpcqa8PmQ5Zva1zCfl2G4hNQxTTs9K kzs= -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:22 2025 by rpki-client