This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer (raw, json) Hash identifier: agxL4SyqbQab89a8Gh4+oRyko8aeMuGF+H79tiZASTA= Subject key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027791 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 24 Nov 2025 19:24:01 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 139737 IP: 103.144.95.0/24 IP: 2001:df7:b680::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161681 (0x27791) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 24 19:24:01 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e5:66:aa:af:dc:a8:0d:aa:0b:98:89:96:a2: cb:13:05:3e:94:f0:70:a9:48:96:71:70:b0:c6:d0: 1d:2c:ed:de:b1:41:b4:24:5e:8f:3e:2c:38:a1:7b: db:54:75:d2:8e:b6:f4:f6:2c:4d:ac:22:2b:08:35: 39:f6:30:4d:ef:b5:3d:28:81:32:bb:11:5b:0a:ea: 08:08:9b:65:e5:8b:63:b8:b0:bc:ed:52:4a:b5:1b: da:89:2c:34:87:39:95:b0:6f:91:bf:25:7c:d9:04: 85:b5:35:4a:13:23:6b:27:a8:d3:1e:5d:21:ab:fd: 67:cb:bd:05:0a:75:64:21:e5:e8:00:5f:cb:7e:54: 7e:30:99:50:2f:75:1f:cf:f9:8a:15:a0:82:a1:43: c3:cf:97:64:d0:74:e6:6f:c7:3c:c2:d1:a6:25:f1: 2c:24:45:5c:14:78:9f:a1:d2:61:cd:6f:ee:6b:5c: cc:0a:ab:d6:80:21:f6:6c:5b:db:fe:f0:da:4f:09: 3e:db:fd:e5:f3:c7:ab:5a:50:bc:74:bd:6a:f0:a2: 13:fc:14:a8:7f:f9:cd:83:16:92:45:92:f7:02:97: 19:1a:9b:4f:65:30:a7:12:48:57:d0:ee:06:95:7c: c6:4c:0f:d3:2f:90:fd:fc:7b:c3:d8:e0:0b:fe:89: 94:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139737 sbgp-ipAddrBlock: critical IPv4: 103.144.95.0/24 IPv6: 2001:df7:b680::/48 Signature Algorithm: sha256WithRSAEncryption a0:f8:02:6b:64:59:36:39:29:2e:28:3b:49:9e:1a:10:d8:da: 22:65:90:07:0e:c3:70:a7:6e:b2:21:a5:e7:97:53:3f:23:4c: 23:8b:9a:8d:8d:b2:1e:d1:89:2e:12:20:04:02:f5:74:70:b8: a7:d0:01:50:06:2e:5b:d6:c0:cf:3f:d8:bf:dc:a1:03:13:49: 96:61:87:89:fa:64:5c:ff:3a:ce:fa:7c:c7:ad:59:2b:b9:1f: a9:f8:fe:c2:84:7a:bd:74:31:70:70:b8:cc:b3:4e:a8:9f:b7: fc:7e:8f:a4:14:3a:aa:f9:fa:8a:5e:ea:86:9f:31:4a:c9:8f: 46:fd:6d:68:74:11:26:d4:51:3c:0c:3d:de:e1:ec:a6:86:39: 74:3c:00:96:f2:c0:40:4f:ce:21:14:00:b1:01:d4:a5:9d:f1: d6:ed:ca:ef:a6:ff:73:34:91:a4:e7:e2:fc:5d:19:bc:96:eb: 83:b7:ff:9f:3d:4e:89:c2:ad:b3:64:cc:58:39:a1:7f:91:c1: 7c:ec:cc:47:4b:21:3f:2d:ea:f8:c0:ea:6f:3a:35:94:85:57: a4:e6:10:54:a0:cc:ee:ac:c5:9c:37:0b:97:16:a4:82:4d:27: 2a:4d:9f:71:43:91:54:bc:4b:49:52:b7:6c:a4:ba:91:ff:69: 7d:3c:66:2f -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAneRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNDE5MjQwMVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRDg2QkExMTAvBgNVBAUTKENCMjEwNzMyMEVEQjM5MkMzQjRENkIw NjZENzk5NjZFNzM1NTNERTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDr5Waqr9yoDaoLmImWossTBT6U8HCpSJZxcLDG0B0s7d6xQbQkXo8+LDihe9tU ddKOtvT2LE2sIisINTn2ME3vtT0ogTK7EVsK6ggIm2Xli2O4sLztUkq1G9qJLDSH OZWwb5G/JXzZBIW1NUoTI2snqNMeXSGr/WfLvQUKdWQh5egAX8t+VH4wmVAvdR/P +YoVoIKhQ8PPl2TQdOZvxzzC0aYl8SwkRVwUeJ+h0mHNb+5rXMwKq9aAIfZsW9v+ 8NpPCT7b/eXzx6taULx0vWrwohP8FKh/+c2DFpJFkvcClxkam09lMKcSSFfQ7gaV fMZMD9MvkP38e8PY4Av+iZSfAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUyyEHMg7b OSw7TWsGbXmWbnNVPeQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ4NkJBL0E1NzYwNEM4RkQyMTExRUNBMkM1NjI4M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEODZCQS9BNTc2MDRDOEZEMjExMUVDQTJDNTYyODNDNEY5QUUwMi95eUVITWc3 Yk9TdzdUV3NHYlhtV2JuTlZQZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiHZMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ5BfMA8EAgAC MAkDBwAgAQ33toAwDQYJKoZIhvcNAQELBQADggEBAKD4AmtkWTY5KS4oO0meGhDY 2iJlkAcOw3CnbrIhpeeXUz8jTCOLmo2Nsh7RiS4SIAQC9XRwuKfQAVAGLlvWwM8/ 2L/coQMTSZZhh4n6ZFz/Os76fMetWSu5H6n4/sKEer10MXBwuMyzTqift/x+j6QU Oqr5+ope6oafMUrJj0b9bWh0ESbUUTwMPd7h7KaGOXQ8AJbywEBPziEUALEB1KWd 8dbtyu+m/3M0kaTn4vxdGbyW64O3/589TonCrbNkzFg5oX+RwXzszEdLIT8t6vjA 6m86NZSFV6TmEFSgzO6sxZw3C5cWpIJNJypNn3FDkVS8S0lSt2ykupH/aX08Zi8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:57 2025 by rpki-client