This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer File: G1Zt71944xm_wNFADedV4mSoK7w.cer (raw, json) Hash identifier: asQry9NdG/yjLpY1y0x2T6iPwNy/2LlxfI8rc8Gg/WA= Subject key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D52 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 10 Dec 2025 16:29:11 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 137269 AS: 138035 IP: 103.106.117.0/24 IP: 103.120.41.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163154 (0x27d52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 10 16:29:11 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:65:03:98:70:06:78:5a:86:1e:63:e7:21:31: 49:70:eb:5f:31:8f:2a:92:a9:84:87:fa:9e:76:e3: 99:23:d9:f3:f4:ae:42:b4:2b:08:ab:b5:f6:ec:09: 0f:5f:a6:64:00:1c:d1:f2:a4:0f:fa:6e:aa:d1:96: 88:2b:f8:af:84:1c:f8:08:32:e9:47:9b:32:26:38: 25:3b:71:fe:d2:94:13:3a:4e:f6:e1:fe:ae:ef:f2: 99:f5:9c:62:19:90:19:b5:c3:9e:20:24:87:db:af: cb:b6:a9:cf:d8:8a:a0:cb:6a:d5:0b:30:05:77:6b: 5a:39:51:70:49:69:90:aa:86:8d:83:32:db:7a:a7: 74:9a:98:fb:c1:69:e7:94:5b:d0:75:ac:0a:09:e1: 34:1b:df:02:95:cb:f3:a5:d7:c7:fc:6a:3d:fb:d7: 77:7a:6f:d7:cd:b0:fc:ac:30:30:e6:43:97:c1:d7: ea:81:33:dc:e6:c9:7c:a2:1d:cd:c3:24:91:0b:b9: d5:4d:55:e8:81:2a:de:a6:ee:7a:f5:90:59:f4:75: 96:f4:af:12:9e:65:d6:4c:7a:89:cb:2a:e4:5c:64: 98:f9:c3:da:92:a7:e7:73:af:68:4c:09:14:3e:2f: 8d:14:d8:af:ea:9c:ab:d3:a5:4d:53:8e:ec:f0:a9: cf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137269 138035 sbgp-ipAddrBlock: critical IPv4: 103.106.117.0/24 103.120.41.0/24 Signature Algorithm: sha256WithRSAEncryption 75:58:ae:b3:17:79:1e:e1:6b:97:b7:50:ba:2a:34:61:07:cf: a5:d5:25:36:36:76:17:7f:71:01:6c:3e:4d:c9:96:70:c1:de: 8b:20:6e:fd:be:1b:7c:3f:c8:58:50:cb:45:2c:a9:a3:63:bc: 08:0a:a3:de:d7:1e:15:af:bc:5e:91:16:82:53:a4:3c:fa:cd: 47:ba:28:f5:dc:1c:1f:a5:de:5e:57:91:6f:ba:e9:55:0e:ca: 28:45:06:b7:61:6a:f0:63:c0:de:9e:2d:aa:f4:69:cd:4d:5f: ed:09:fb:0a:6c:be:a5:f6:fe:8f:89:c8:8f:12:a9:c5:04:8a: e9:f8:b9:d8:64:d6:01:fa:f5:9b:92:15:53:7c:aa:ad:5c:7e: f3:74:6f:98:c1:a7:0c:8d:32:bf:6f:e5:23:bf:40:ca:7c:f8: 85:e3:f0:98:fe:bc:3e:46:47:2d:b6:55:62:53:69:06:13:9b: 52:00:18:fa:a4:6e:f3:3f:60:31:27:21:5c:70:d7:d9:ed:6c: 08:8d:a8:bc:a9:17:79:51:98:6e:a4:06:46:7f:20:4a:d0:83: eb:96:b9:c2:51:8a:65:db:76:6d:e3:33:e4:8b:3d:fa:b1:1f: d3:3e:2a:de:c6:ac:5a:42:c7:75:fd:be:2d:24:78:c3:d0:70: 90:a7:fc:87 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgIDAn1SMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMDE2MjkxMVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzIwQUIxMTAvBgNVBAUTKDFCNTY2REVGNUY3OEUzMTlCRkMwRDE0 MDBERTc1NUUyNjRBODJCQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChZQOYcAZ4WoYeY+chMUlw618xjyqSqYSH+p5245kj2fP0rkK0KwirtfbsCQ9f pmQAHNHypA/6bqrRlogr+K+EHPgIMulHmzImOCU7cf7SlBM6Tvbh/q7v8pn1nGIZ kBm1w54gJIfbr8u2qc/YiqDLatULMAV3a1o5UXBJaZCqho2DMtt6p3SamPvBaeeU W9B1rAoJ4TQb3wKVy/Ol18f8aj3713d6b9fNsPysMDDmQ5fB1+qBM9zmyXyiHc3D JJELudVNVeiBKt6m7nr1kFn0dZb0rxKeZdZMeonLKuRcZJj5w9qSp+dzr2hMCRQ+ L40U2K/qnKvTpU1Tjuzwqc83AgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUG1Zt7194 4xm/wNFADedV4mSoK7wwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUMyMEFCLzZCRTU1MEIwQjA5MzExRUE4QUYzMTc1RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDMjBBQi82QkU1NTBCMEIwOTMxMUVBOEFGMzE3NUVDNEY5QUUwMi9HMVp0NzE5 NDR4bV93TkZBRGVkVjRtU29LN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAhg1AgMCGzMwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABnanUD BABneCkwDQYJKoZIhvcNAQELBQADggEBAHVYrrMXeR7ha5e3ULoqNGEHz6XVJTY2 dhd/cQFsPk3JlnDB3osgbv2+G3w/yFhQy0UsqaNjvAgKo97XHhWvvF6RFoJTpDz6 zUe6KPXcHB+l3l5XkW+66VUOyihFBrdhavBjwN6eLar0ac1NX+0J+wpsvqX2/o+J yI8SqcUEiun4udhk1gH69ZuSFVN8qq1cfvN0b5jBpwyNMr9v5SO/QMp8+IXj8Jj+ vD5GRy22VWJTaQYTm1IAGPqkbvM/YDEnIVxw19ntbAiNqLypF3lRmG6kBkZ/IErQ g+uWucJRimXbdm3jM+SLPfqxH9M+Kt7GrFpCx3X9vi0keMPQcJCn/Ic= -----END CERTIFICATE-----Generated at Fri Dec 19 17:30:54 2025 by rpki-client