This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer (raw, json) Hash identifier: G+wEuhIJ9h1G0uuVjdi/GZWGfYEX5A9shYCT0f4hJaI= Subject key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028131 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 28 Dec 2025 13:23:07 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 138492 IP: 103.127.0.0/22 IP: 2404:16c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 16:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164145 (0x28131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 28 13:23:07 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b1:9f:63:c4:8d:27:ac:8c:68:bd:cd:21:3d: a0:7e:34:ad:cb:65:2e:83:c3:09:b8:60:3b:92:53: 43:14:e7:da:72:58:39:e6:31:c4:54:33:d7:b1:b6: d7:5d:ae:80:f6:c7:ab:02:fc:87:4a:46:0b:95:cc: 44:d6:ce:2b:ee:3f:0f:43:70:1d:62:9f:38:75:5d: 69:24:70:95:02:c5:84:d2:be:72:c1:19:18:42:7b: 97:ef:3c:f6:83:86:64:24:f4:e0:8b:98:6c:5b:1c: 65:b4:32:cc:3f:5c:ec:e3:3c:03:8a:ad:fe:10:3e: bc:92:15:68:25:7b:25:67:ed:1d:ba:40:12:c6:f3: ed:6e:da:29:d0:4a:96:dc:53:8f:de:a3:22:d6:f5: 51:fc:8a:fd:52:c1:06:2b:0e:03:eb:5c:2d:44:a0: 97:7f:56:bf:17:44:da:5f:2e:a0:c3:7a:37:5c:c2: fa:ec:d2:29:e8:d1:6e:66:82:5b:2a:4c:90:73:28: da:29:60:79:a3:b4:e8:35:c1:6f:4e:10:b4:4a:f3: 59:11:08:c1:2a:24:03:c8:d9:2b:e5:a4:0f:e4:f7: 78:fb:98:02:80:c9:74:c7:70:80:3b:9a:0e:81:00: 86:e5:e7:e5:b8:13:5e:00:43:1d:0f:be:60:e1:f8: 98:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138492 sbgp-ipAddrBlock: critical IPv4: 103.127.0.0/22 IPv6: 2404:16c0::/32 Signature Algorithm: sha256WithRSAEncryption 64:44:bf:07:1b:85:2f:0e:f2:39:85:94:f4:02:d7:70:7b:3e: 4b:d4:cd:f0:41:da:fc:ce:6d:43:50:31:f5:a2:81:48:cc:5d: 02:7c:dc:66:f7:a9:d8:03:82:2e:bf:94:11:e0:d3:57:e2:7f: 91:67:10:c5:60:90:28:12:09:99:54:d7:e3:40:5e:63:de:95: 67:40:45:c5:05:f7:01:24:aa:f9:6d:b6:cb:a5:04:20:02:f2: 8e:6f:7e:64:99:c9:23:85:8c:f1:ce:d0:b1:70:ed:d6:58:1f: dc:ce:a1:c6:e1:37:82:24:99:fa:f9:a3:53:9e:c6:4a:6b:f6: 87:ca:38:ba:8c:0e:8c:63:03:8a:b0:62:a9:74:49:65:bc:8d: 35:3c:d0:5c:7d:c6:2a:98:49:4a:3f:f4:ef:3c:e9:95:85:47: 72:da:1e:6f:bf:38:46:61:e1:55:43:9e:82:38:f4:ce:d1:0e: 21:3b:6e:13:a3:be:00:73:10:55:ae:a9:92:16:d4:ea:8a:03: 19:fd:b7:80:93:2e:b9:3f:a4:c2:4c:02:c5:be:78:81:a2:5b: 6e:94:4c:1b:c2:c1:82:94:57:4a:12:82:c2:85:4b:15:d1:5f: 53:c5:6a:69:73:36:9f:f2:0e:5b:39:1a:12:f9:7b:4f:a7:a0: 77:44:3a:91 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoExMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyODEzMjMwN1oXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxN0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4 NkNBMjAyNjZGMUY2RUZCMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUsZ9jxI0nrIxovc0hPaB+NK3LZS6Dwwm4YDuSU0MU59pyWDnmMcRUM9exttdd roD2x6sC/IdKRguVzETWzivuPw9DcB1inzh1XWkkcJUCxYTSvnLBGRhCe5fvPPaD hmQk9OCLmGxbHGW0Msw/XOzjPAOKrf4QPrySFWgleyVn7R26QBLG8+1u2inQSpbc U4/eoyLW9VH8iv1SwQYrDgPrXC1EoJd/Vr8XRNpfLqDDejdcwvrs0ino0W5mglsq TJBzKNopYHmjtOg1wW9OELRK81kRCMEqJAPI2SvlpA/k93j7mAKAyXTHcIA7mg6B AIbl5+W4E14AQx0PvmDh+JiHAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU6ZI7rA9c WMq+uTKGyiAmbx9u+xQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdDQkQ3LzE5MjNCRjY4NjQyODExRUFBNzA0MUQ0OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3Q0JENy8xOTIzQkY2ODY0MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5 Y1dNcS11VEtHeWlBbWJ4OXUteFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhz8MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ38AMA0EAgAC MAcDBQAkBBbAMA0GCSqGSIb3DQEBCwUAA4IBAQBkRL8HG4UvDvI5hZT0Atdwez5L 1M3wQdr8zm1DUDH1ooFIzF0CfNxm96nYA4Iuv5QR4NNX4n+RZxDFYJAoEgmZVNfj QF5j3pVnQEXFBfcBJKr5bbbLpQQgAvKOb35kmckjhYzxztCxcO3WWB/czqHG4TeC JJn6+aNTnsZKa/aHyji6jA6MYwOKsGKpdEllvI01PNBcfcYqmElKP/TvPOmVhUdy 2h5vvzhGYeFVQ56COPTO0Q4hO24To74AcxBVrqmSFtTqigMZ/beAky65P6TCTALF vniBoltulEwbwsGClFdKEoLChUsV0V9TxWppczaf8g5bORoS+XtPp6B3RDqR -----END CERTIFICATE-----Generated at Thu Jan 1 19:35:25 2026 by rpki-client