This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer File: AZgxEf1vCyfiQEY7aKehmEXHuwo.cer (raw, json) Hash identifier: x2NC7QxUwBwzsBQbHM9HIEVI3qrKcCaDfeWvTb5gEvg= Subject key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027EF4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft caRepository: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 17 Dec 2025 13:46:52 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 138461 IP: 103.125.115.0/24 IP: 103.147.172.0/24 IP: 2001:df0:ea40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163572 (0x27ef4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 17 13:46:52 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2e:34:b9:e9:97:fe:6b:ee:21:3f:e7:40:ad: 6e:04:48:05:88:a2:4c:ed:49:09:cc:2b:ce:ca:cb: 63:cd:84:08:5f:b1:0d:7b:c3:51:17:36:30:c2:2d: ca:58:27:f3:03:83:a5:14:18:0d:3c:56:60:f3:b4: ea:51:e3:66:52:74:f9:94:2a:f5:26:cf:19:f2:a3: bd:25:2c:a8:ea:d4:43:e3:6b:18:8d:65:d3:6a:9c: 41:46:5d:99:2b:68:bb:6f:ae:6c:22:8c:a5:ef:9f: 72:f4:ef:38:c5:f8:29:e7:21:23:bd:41:ba:cf:c1: c9:3c:99:4b:d3:13:c1:93:be:35:ec:49:db:09:32: 7d:54:a1:2f:d7:77:06:6d:ff:64:f1:87:53:5d:fe: 9b:e6:07:18:ee:60:b3:8e:61:38:b4:87:46:f7:0a: 97:13:f9:63:2b:66:a1:1d:07:2e:f8:26:0c:fc:6f: 3d:01:fe:10:43:71:b9:3b:e2:3c:af:15:18:1d:6f: 3f:39:2d:f7:27:6f:14:13:3b:b0:f8:f0:e8:8f:f5: ec:cb:27:46:1c:76:22:e2:b0:1c:20:9e:d4:49:e1: e3:73:96:77:88:cc:c3:d5:f7:9c:10:40:a3:18:37: e2:e5:04:92:8d:0e:57:ea:5f:f0:5c:b6:2f:d5:6a: 78:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138461 sbgp-ipAddrBlock: critical IPv4: 103.125.115.0/24 103.147.172.0/24 IPv6: 2001:df0:ea40::/48 Signature Algorithm: sha256WithRSAEncryption 6c:34:f5:4c:d7:dd:85:90:fd:47:cf:e5:c4:ac:13:ec:28:09: 87:e7:29:1a:5b:dc:ad:01:be:75:7f:f9:61:1b:e5:7f:2c:0e: 15:7c:2f:45:73:1f:8a:bb:a8:8e:0c:78:ef:d9:ad:1e:65:75: 7b:4f:21:14:21:4d:9b:58:0d:ac:48:8c:c7:50:cf:f3:36:9f: f6:ca:8b:ea:fc:00:af:31:49:bc:0c:57:7d:cf:13:b0:cb:34: fc:e5:9c:e8:ca:5a:7b:e4:58:c4:59:db:29:83:cf:ab:8f:81: 0d:bb:23:e8:fd:31:50:a0:98:86:af:d4:bb:4b:69:3a:f2:9b: 5f:a9:16:bd:06:bc:ae:88:35:22:ed:b2:bb:e2:b0:75:d9:aa: aa:72:4f:05:4f:4b:bb:bc:73:2a:56:fd:37:e2:57:e6:fa:7b: 20:b9:70:8d:71:ff:54:b6:6a:91:31:0c:97:03:fd:7e:6f:85: cd:d1:37:51:45:64:82:87:6a:cd:b2:98:14:4f:eb:79:27:78: 0b:3b:d7:fc:ae:06:9d:55:4a:60:58:ea:3c:0e:91:dd:08:2e: 4b:f0:61:10:e0:8e:c4:27:1e:ad:fb:f8:7c:33:75:4c:6a:e2: 53:42:b5:d8:5c:c8:2a:21:77:10:31:a2:49:02:4a:9d:ab:94: 73:a0:70:97 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIDAn70MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNzEzNDY1MloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTEzQjAxMTAvBgNVBAUTKDAxOTgzMTExRkQ2RjBCMjdFMjQwNDYz QjY4QTdBMTk4NDVDN0JCMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJLjS56Zf+a+4hP+dArW4ESAWIokztSQnMK87Ky2PNhAhfsQ17w1EXNjDCLcpY J/MDg6UUGA08VmDztOpR42ZSdPmUKvUmzxnyo70lLKjq1EPjaxiNZdNqnEFGXZkr aLtvrmwijKXvn3L07zjF+CnnISO9QbrPwck8mUvTE8GTvjXsSdsJMn1UoS/XdwZt /2Txh1Nd/pvmBxjuYLOOYTi0h0b3CpcT+WMrZqEdBy74Jgz8bz0B/hBDcbk74jyv FRgdbz85LfcnbxQTO7D48OiP9ezLJ0YcdiLisBwgntRJ4eNzlneIzMPV95wQQKMY N+LlBJKNDlfqX/Bcti/VanjHAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUAZgxEf1v CyfiQEY7aKehmEXHuwowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTUxM0IwLzEzOEUxNDMwMTQ0RjExRUM4OTE3RDAwQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1MTNCMC8xMzhFMTQzMDE0NEYxMUVDODkxN0QwMENDNEY5QUUwMi9BWmd4RWYx dkN5ZmlRRVk3YUtlaG1FWEh1d28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhzdMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ31zAwQAZ5Os MA8EAgACMAkDBwAgAQ3w6kAwDQYJKoZIhvcNAQELBQADggEBAGw09UzX3YWQ/UfP 5cSsE+woCYfnKRpb3K0BvnV/+WEb5X8sDhV8L0VzH4q7qI4MeO/ZrR5ldXtPIRQh TZtYDaxIjMdQz/M2n/bKi+r8AK8xSbwMV33PE7DLNPzlnOjKWnvkWMRZ2ymDz6uP gQ27I+j9MVCgmIav1LtLaTrym1+pFr0GvK6INSLtsrvisHXZqqpyTwVPS7u8cypW /TfiV+b6eyC5cI1x/1S2apExDJcD/X5vhc3RN1FFZIKHas2ymBRP63kneAs71/yu Bp1VSmBY6jwOkd0ILkvwYRDgjsQnHq37+HwzdUxq4lNCtdhcyCohdxAxokkCSp2r lHOgcJc= -----END CERTIFICATE-----Generated at Fri Dec 19 18:48:55 2025 by rpki-client