This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer File: CrPxFJz1w7raaFscahN5tojXQ4Q.cer (raw, json) Hash identifier: VU2szuR8EIYPOnk1fJhsIGv0LpdGJNWa8WgCiWzEaeA= Subject key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0279D0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft caRepository: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 00:11:24 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 140381 IP: 103.146.56.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162256 (0x279d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 00:11:24 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:a0:3e:cd:33:c0:8f:65:d6:f9:6e:2f:e5: 4f:0d:1b:bb:c8:d9:79:14:ed:c5:df:22:11:bb:a0: 0d:1d:df:17:1a:85:50:63:90:73:f5:e2:d7:3b:2f: 42:c6:84:cc:d2:96:fc:65:c9:00:62:e3:ca:a1:eb: b2:4d:6a:99:89:87:b6:d2:f1:a6:54:73:86:86:b5: c9:f3:23:44:63:9c:94:1d:5f:ca:35:59:ed:31:a9: c3:55:70:82:5b:d1:5a:c8:0a:f3:e6:82:50:26:75: 91:5a:53:30:bd:c8:23:d0:6d:8e:92:4f:39:25:a3: 4c:e9:d5:de:f4:01:5c:1c:7e:06:a4:ff:3b:88:7b: 75:67:40:ac:b3:cb:02:fd:16:26:6f:39:6d:d5:59: 79:49:64:77:61:5e:0b:c9:00:23:c7:e4:9c:95:f4: 27:ce:80:33:27:f0:fd:01:f7:21:69:73:4e:f6:f1: 48:47:2d:52:58:1b:bb:44:7b:62:71:f8:51:e7:06: 0e:64:62:fc:03:4c:1f:ba:5f:37:da:ec:43:f5:85: 9b:e7:e7:1b:0c:45:3d:3b:7f:95:d0:67:f5:31:d4: 90:84:3a:16:c4:e6:67:47:4e:b1:a4:2a:24:63:ee: ea:04:7d:ac:4f:9d:7a:b4:88:e1:4d:d6:34:e0:d1: 10:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 140381 sbgp-ipAddrBlock: critical IPv4: 103.146.56.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:e4:3a:04:30:c1:16:e0:ee:fc:d5:83:5c:dd:db:6f:48:0c: 0e:1c:23:06:dc:b6:0a:f6:af:fe:62:db:98:73:8a:a9:17:08: bb:30:a2:49:10:87:3d:90:68:10:dd:c7:aa:ab:a8:a8:e8:42: e1:aa:7b:c4:1e:29:d8:96:b6:9c:8b:17:b2:30:f8:57:a4:4e: 19:a6:00:a2:79:3c:3e:17:81:43:58:fb:18:19:32:84:e6:32: f1:d2:9d:90:07:f3:27:c7:d1:f7:7f:89:0d:c3:a7:1b:90:c7: d3:af:59:55:3c:6f:6b:2c:37:11:7f:d6:5d:ad:3a:72:39:35: 3f:40:ea:42:00:0a:7e:a1:50:61:d9:b2:17:5d:ae:6f:48:62: 73:a1:60:71:86:f2:d5:28:d9:ef:8a:8c:b5:1d:45:db:40:5b: 65:d5:28:39:c7:c9:ff:bd:c2:2b:52:9f:33:cd:51:99:39:94: f3:46:21:29:7c:d3:35:2b:2f:ab:00:96:4c:4b:33:54:f0:a6: 1c:f8:97:9f:b6:bd:92:f8:4b:4c:2c:5d:8e:9f:b3:2a:4f:41: 6d:e3:e1:f4:7e:ef:7c:42:9a:da:ad:60:51:57:93:73:d0:46: 62:c4:d2:76:90:b6:94:4a:ee:5f:5f:9e:fe:6a:4c:5a:48:72: 44:5f:35:bf -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnnQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTAwMTEyNFoXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxM0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIx QzZBMTM3OUI2ODhENzQzODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1pqA+zTPAj2XW+W4v5U8NG7vI2XkU7cXfIhG7oA0d3xcahVBjkHP14tc7L0LG hMzSlvxlyQBi48qh67JNapmJh7bS8aZUc4aGtcnzI0RjnJQdX8o1We0xqcNVcIJb 0VrICvPmglAmdZFaUzC9yCPQbY6STzklo0zp1d70AVwcfgak/zuIe3VnQKyzywL9 FiZvOW3VWXlJZHdhXgvJACPH5JyV9CfOgDMn8P0B9yFpc0728UhHLVJYG7tEe2Jx +FHnBg5kYvwDTB+6Xzfa7EP1hZvn5xsMRT07f5XQZ/Ux1JCEOhbE5mdHTrGkKiRj 7uoEfaxPnXq0iOFN1jTg0RCRAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUCrPxFJz1 w7raaFscahN5tojXQ4QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNERjFFL0NDNjVBNjZBMUY5QTExRUQ4MzVDQUEzRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzREYxRS9DQzY1QTY2QTFGOUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6 MXc3cmFhRnNjYWhONXRvalhRNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiRdMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5I4MA0GCSqG SIb3DQEBCwUAA4IBAQAs5DoEMMEW4O781YNc3dtvSAwOHCMG3LYK9q/+YtuYc4qp Fwi7MKJJEIc9kGgQ3ceqq6io6ELhqnvEHinYlracixeyMPhXpE4ZpgCieTw+F4FD WPsYGTKE5jLx0p2QB/Mnx9H3f4kNw6cbkMfTr1lVPG9rLDcRf9ZdrTpyOTU/QOpC AAp+oVBh2bIXXa5vSGJzoWBxhvLVKNnvioy1HUXbQFtl1Sg5x8n/vcIrUp8zzVGZ OZTzRiEpfNM1Ky+rAJZMSzNU8KYc+Jeftr2S+EtMLF2On7MqT0Ft4+H0fu98Qpra rWBRV5Nz0EZixNJ2kLaUSu5fX57+akxaSHJEXzW/ -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:23 2025 by rpki-client