This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer File: zI7F8Y4keEmlxwbphTthhkju8qY.cer (raw, json) Hash identifier: hubha55IJb7K9k6NjmypMrCyyAyRZLeGHaSj0D1WOIQ= Subject key identifier: CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C65 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 20:27:51 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 58465 IP: 103.23.213.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162917 (0x27c65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 5 20:27:51 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91B8C12, serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:48:78:13:50:42:60:59:96:f3:84:c7:37:a5: d9:cd:13:6c:53:6c:69:36:5c:b3:f3:8e:c2:18:23: b2:4d:19:1f:5f:f0:e0:da:7e:b4:4e:30:d4:a0:8d: 43:72:78:02:88:0e:8c:56:ea:7c:b0:57:f8:f2:e9: fc:e4:e6:17:c3:1c:a6:42:f0:b6:84:eb:30:2f:9e: 6b:f8:22:9d:97:73:7b:09:7c:55:a9:6d:97:61:05: f6:ca:12:25:09:ab:aa:fa:6f:94:fe:08:b8:97:76: 12:f7:d7:76:49:0b:23:18:7d:3f:3e:7d:63:1c:af: fc:9b:eb:bb:f5:23:6e:33:af:3f:4c:02:cd:cb:c8: 1c:6b:9c:b0:dd:87:0e:8d:df:b5:86:bb:37:a5:97: 0c:f1:f2:41:85:65:bc:c0:f8:72:96:6c:35:2c:2e: e7:0c:bd:2f:a9:2f:62:c5:71:ae:0f:3e:cf:8e:b2: 29:69:72:54:71:a5:a2:86:93:e5:62:de:56:df:ec: 4b:67:b8:31:ac:65:d7:fc:d3:9e:76:3b:68:2e:33: a9:70:ff:59:d9:88:63:b6:6b:56:4f:2c:a6:03:ab: 32:83:8a:ee:20:bf:86:8c:1f:f0:d0:99:11:f5:64: 97:6a:17:fc:3f:76:0f:da:08:94:c7:62:32:5e:0c: fd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 58465 sbgp-ipAddrBlock: critical IPv4: 103.23.213.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:c8:20:66:91:a1:06:d6:a4:66:c4:f3:1f:8b:f4:b7:5d:57: 8d:d0:af:f1:2a:63:c7:21:70:ee:e6:62:f5:95:9d:a1:10:cb: 2d:48:f2:22:19:11:f8:75:37:58:6c:1e:f3:7c:f0:b9:e8:68: 02:ad:fc:a9:c3:10:b4:63:ab:4c:9c:b2:39:31:2b:cf:b4:eb: b6:7a:89:1b:2a:e9:90:57:fd:74:68:d2:88:d8:cf:64:83:81: d2:8f:0b:0d:35:6a:ef:f5:97:fb:44:30:92:5f:93:a8:d0:86: dc:29:b2:1d:e4:ac:af:0e:33:dd:28:50:c3:9b:b6:ce:f1:52: f2:3a:13:90:25:7f:5a:02:c9:b1:17:7a:f0:f8:11:b3:d4:3a: 84:d8:85:3f:5c:81:4f:98:4e:2a:2f:b8:67:c0:19:fe:35:86: fc:76:ae:27:1e:1a:ec:07:b2:bf:09:fd:f2:a7:8a:b8:0a:ca: 17:59:bb:a7:3a:8b:2a:44:3c:be:e1:0d:88:35:f8:61:27:36: d6:84:46:f6:c2:27:35:42:ac:c1:82:3d:f3:5a:f8:d2:e9:37: b1:3d:53:cc:c9:1c:1d:b0:8c:32:93:da:22:56:b9:34:2a:1e: 4d:ef:57:07:e6:bc:7f:55:a2:11:88:d5:69:9a:03:a7:c9:21: fa:bd:70:79 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnxlMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNTIwMjc1MVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjhDMTIxMTAvBgNVBAUTKENDOEVDNUYxOEUyNDc4NDlBNUM3MDZF OTg1M0I2MTg2NDhFRUYyQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXSHgTUEJgWZbzhMc3pdnNE2xTbGk2XLPzjsIYI7JNGR9f8ODafrROMNSgjUNy eAKIDoxW6nywV/jy6fzk5hfDHKZC8LaE6zAvnmv4Ip2Xc3sJfFWpbZdhBfbKEiUJ q6r6b5T+CLiXdhL313ZJCyMYfT8+fWMcr/yb67v1I24zrz9MAs3LyBxrnLDdhw6N 37WGuzellwzx8kGFZbzA+HKWbDUsLucMvS+pL2LFca4PPs+OsilpclRxpaKGk+Vi 3lbf7EtnuDGsZdf80552O2guM6lw/1nZiGO2a1ZPLKYDqzKDiu4gv4aMH/DQmRH1 ZJdqF/w/dg/aCJTHYjJeDP07AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUzI7F8Y4k eEmlxwbphTthhkju8qYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI4QzEyLzNFRDA4NTI2OTFBNjExRURCNzJDNTk1NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCOEMxMi8zRUQwODUyNjkxQTYxMUVEQjcyQzU5NTZDNEY5QUUwMi96STdGOFk0 a2VFbWx4d2JwaFR0aGhranU4cVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAORhMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxfVMA0GCSqG SIb3DQEBCwUAA4IBAQAbyCBmkaEG1qRmxPMfi/S3XVeN0K/xKmPHIXDu5mL1lZ2h EMstSPIiGRH4dTdYbB7zfPC56GgCrfypwxC0Y6tMnLI5MSvPtOu2eokbKumQV/10 aNKI2M9kg4HSjwsNNWrv9Zf7RDCSX5Oo0IbcKbId5KyvDjPdKFDDm7bO8VLyOhOQ JX9aAsmxF3rw+BGz1DqE2IU/XIFPmE4qL7hnwBn+NYb8dq4nHhrsB7K/Cf3yp4q4 CsoXWbunOosqRDy+4Q2INfhhJzbWhEb2wic1QqzBgj3zWvjS6TexPVPMyRwdsIwy k9oiVrk0Kh5N71cH5rx/VaIRiNVpmgOnySH6vXB5 -----END CERTIFICATE-----Generated at Sun Dec 7 03:45:04 2025 by rpki-client