This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer File: GLHIjO5o9jwhzWoMsbgx1db11s8.cer (raw, json) Hash identifier: uBQs5MJJrjuUc7F9MjsIPug06j7S2+TlfgUnnrsTeNM= Subject key identifier: 18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0280BB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 24 Dec 2025 14:16:54 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 136179 IP: 103.83.59.0/24 IP: 2001:df7:d200::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 06:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164027 (0x280bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 24 14:16:54 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91DAFA2, serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:96:5d:42:40:76:ad:fd:5b:3c:bf:08:cd: 30:d5:e9:a7:e4:a6:19:8d:dc:55:75:43:3f:08:e7: 84:16:f0:32:82:5d:ee:c0:bc:6a:e0:27:93:ee:91: 37:66:d7:75:33:f2:f9:f5:5d:dc:e7:14:d1:7c:d3: e7:62:df:89:be:96:43:b1:c4:1d:f0:8c:f5:c8:63: 73:ac:b6:ae:e9:3b:97:4e:76:73:89:27:fe:51:cf: 3a:06:ba:f5:dd:ac:3b:48:45:73:33:a4:69:5d:c0: 0b:0a:56:1a:43:ba:49:a4:7e:40:be:b0:f5:7f:ce: 90:51:ea:58:09:e0:5b:e5:b1:bc:a8:72:30:e4:70: e9:59:4b:f3:07:13:7b:71:03:a7:51:17:46:fd:9a: 7c:8a:15:bc:8e:0d:87:f4:50:22:0f:4f:b3:65:32: cd:39:9f:81:29:89:2d:3f:43:9e:42:4d:7b:ef:ff: 3e:de:a8:b8:0b:8a:22:7e:af:8b:af:28:99:0d:85: f0:bb:09:78:47:05:3d:d5:3f:f3:98:44:af:2c:8a: 42:a7:55:90:5e:50:c4:2f:77:3e:34:c9:7a:7d:62: b6:07:96:2a:28:29:bc:22:04:cc:e5:b4:cb:17:28: 09:55:b3:7e:1d:ed:18:6d:49:02:49:ed:8a:1c:0e: f1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136179 sbgp-ipAddrBlock: critical IPv4: 103.83.59.0/24 IPv6: 2001:df7:d200::/48 Signature Algorithm: sha256WithRSAEncryption af:9d:d1:24:a1:ae:89:9f:87:c6:7d:f2:71:ab:a4:37:bb:6d: 75:4c:d0:e2:c5:40:69:78:59:18:cc:2d:af:ca:f8:20:8b:a0: 6c:93:9f:fc:83:5c:6a:76:95:ef:5c:95:95:6f:e7:14:52:4c: 3b:77:25:42:f8:c4:0e:a7:c8:90:95:7c:58:41:20:c5:04:04: b6:4b:ec:66:18:f6:e8:4e:92:a0:01:b7:64:d2:e7:03:e0:76: 46:d7:cb:55:36:0b:c3:6c:fd:bd:9b:12:ef:06:f0:38:f0:41: f4:60:4e:4e:c1:9f:af:ce:5c:a0:67:43:d5:0c:df:ca:94:b0: 20:76:56:90:ab:c9:85:10:9c:0d:0a:27:74:d1:7a:96:fb:30: 25:b9:bd:24:5d:c4:fa:0b:a4:c5:11:7a:d0:4c:d5:0e:8e:18: 7e:09:52:a8:26:94:45:54:92:82:59:eb:46:38:12:03:a7:79: 50:d3:ac:69:7d:0a:ab:d0:2a:1a:dd:c1:d2:ed:7a:d0:8c:28: 08:c4:4d:5c:12:2e:72:83:9e:0b:47:94:59:55:34:28:1f:d5: 25:de:e2:6e:96:2a:69:42:d2:55:65:2e:a8:74:0f:28:a7:e0: e4:19:05:ba:22:94:c0:8c:76:d4:24:36:1b:7e:c0:b2:1e:80: f9:a2:33:89 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoC7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyNDE0MTY1NFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxREFGQTIxMTAvBgNVBAUTKDE4QjFDODhDRUU2OEY2M0MyMUNENkEw Q0IxQjgzMUQ1RDZGNUQ2Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLJ5ZdQkB2rf1bPL8IzTDV6afkphmN3FV1Qz8I54QW8DKCXe7AvGrgJ5PukTdm 13Uz8vn1XdznFNF80+di34m+lkOxxB3wjPXIY3Ostq7pO5dOdnOJJ/5RzzoGuvXd rDtIRXMzpGldwAsKVhpDukmkfkC+sPV/zpBR6lgJ4FvlsbyocjDkcOlZS/MHE3tx A6dRF0b9mnyKFbyODYf0UCIPT7NlMs05n4EpiS0/Q55CTXvv/z7eqLgLiiJ+r4uv KJkNhfC7CXhHBT3VP/OYRK8sikKnVZBeUMQvdz40yXp9YrYHliooKbwiBMzltMsX KAlVs34d7RhtSQJJ7YocDvFjAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUGLHIjO5o 9jwhzWoMsbgx1db11s8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURBRkEyL0I3QjY3NzYwRUY2OTExRTZCRDczQzY1MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEQUZBMi9CN0I2Nzc2MEVGNjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81 bzlqd2h6V29Nc2JneDFkYjExczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhPzMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ1M7MA8EAgAC MAkDBwAgAQ330gAwDQYJKoZIhvcNAQELBQADggEBAK+d0SShromfh8Z98nGrpDe7 bXVM0OLFQGl4WRjMLa/K+CCLoGyTn/yDXGp2le9clZVv5xRSTDt3JUL4xA6nyJCV fFhBIMUEBLZL7GYY9uhOkqABt2TS5wPgdkbXy1U2C8Ns/b2bEu8G8DjwQfRgTk7B n6/OXKBnQ9UM38qUsCB2VpCryYUQnA0KJ3TRepb7MCW5vSRdxPoLpMURetBM1Q6O GH4JUqgmlEVUkoJZ60Y4EgOneVDTrGl9CqvQKhrdwdLtetCMKAjETVwSLnKDngtH lFlVNCgf1SXe4m6WKmlC0lVlLqh0Dyin4OQZBboilMCMdtQkNht+wLIegPmiM4k= -----END CERTIFICATE-----Generated at Thu Jan 1 07:36:38 2026 by rpki-client