This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer File: N3hUTiRpVIvwm1Td2APX19kPfmI.cer (raw, json) Hash identifier: tK1hiJRj7YXsRfdUbBxSYi03slRmJOn/IQUx3zpsuik= Subject key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027CE6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 20:27:50 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 139794 IP: 103.145.88.0/24 IP: 2001:df2:8d80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 12:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163046 (0x27ce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 8 20:27:50 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:a7:aa:3c:79:01:9e:86:5f:6b:c5:0e:f0: 5f:81:32:10:e3:d7:57:3f:2c:34:ba:b8:46:c1:72: 85:ae:5d:2f:05:ca:cb:43:03:56:8a:e2:26:5c:ea: 44:63:00:a0:46:73:a7:e5:10:e9:7d:19:d8:8b:68: af:24:08:4b:1a:f6:fe:ac:21:0e:5f:3d:49:95:6e: 71:0b:b4:f4:5b:1f:4d:3d:fc:65:22:a7:c7:48:05: 4d:d5:f2:30:c1:a9:f1:ff:6b:58:6f:77:50:7c:7a: 79:f2:20:0f:ff:2b:ae:de:13:f8:d9:01:18:e6:26: bd:1b:33:82:b0:bc:0c:11:16:9f:ce:d4:b2:5b:1c: 8c:9c:02:ea:9c:aa:cf:e9:0d:e2:00:77:2a:9f:0c: c5:a4:85:22:ae:fc:8f:79:bd:dc:e0:c2:b0:e6:f6: e6:c5:6c:7b:2a:c8:07:11:6c:9b:6a:f5:4b:03:4b: a2:11:b4:92:e4:08:25:10:83:bb:eb:d7:4f:92:0d: 7d:71:cc:33:f7:87:3c:3c:57:ea:f2:43:62:ce:5c: c5:49:5a:e3:8c:bb:0c:f5:e1:4e:89:d2:67:0f:4b: 4f:98:9a:4e:50:28:11:2b:71:9a:4f:1c:f6:23:6a: b6:a0:27:c4:a2:fe:c5:a4:94:5e:d4:94:f7:9c:5c: b2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139794 sbgp-ipAddrBlock: critical IPv4: 103.145.88.0/24 IPv6: 2001:df2:8d80::/48 Signature Algorithm: sha256WithRSAEncryption bd:ac:ad:30:6b:0b:1e:27:42:60:e2:02:71:a1:26:e3:7a:eb: 51:21:7e:cd:f8:ee:62:fe:55:53:d1:a0:cd:b3:28:bc:32:09: e2:16:5b:2a:9e:55:0d:dd:e9:4c:f6:d1:fa:bf:3f:c8:e7:33: 6a:24:0b:d4:99:05:28:5c:e6:7d:1c:ce:20:0a:7c:bc:74:98: 07:0c:47:a7:c0:c0:52:c3:f2:25:9b:8e:8c:20:25:7d:10:d9: 3d:7a:cf:f5:e5:e4:ac:33:71:8e:41:59:18:fd:74:a2:d6:58: a3:43:66:96:29:42:23:ad:6d:d3:bf:cc:cc:38:c9:5c:3e:a4: b0:47:54:c1:9f:6a:a0:61:b8:ea:52:ce:8f:e9:ff:72:b1:a3: f2:ed:5b:64:01:0e:ab:c4:93:f4:7e:30:eb:55:19:78:67:0f: 72:18:4c:57:a7:e2:9c:79:ba:f9:be:1f:9a:96:27:ea:5a:38: e3:f1:8d:ff:db:ce:ee:64:99:62:9c:a0:3a:1a:a5:26:7c:47: 84:09:1a:2f:e0:b7:2f:9c:90:60:ab:32:9f:64:c6:01:aa:ea: 4c:78:24:0b:70:26:47:d1:ef:0e:9b:0e:7d:ca:e0:ff:cd:bc: 0d:b2:d4:12:bf:d2:4e:e6:82:f3:30:55:b9:18:79:31:52:c4: 14:79:e3:a5 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnzmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwODIwMjc1MFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTRE REQ4MDNEN0Q3RDkwRjdFNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7yaeqPHkBnoZfa8UO8F+BMhDj11c/LDS6uEbBcoWuXS8FystDA1aK4iZc6kRj AKBGc6flEOl9GdiLaK8kCEsa9v6sIQ5fPUmVbnELtPRbH009/GUip8dIBU3V8jDB qfH/a1hvd1B8ennyIA//K67eE/jZARjmJr0bM4KwvAwRFp/O1LJbHIycAuqcqs/p DeIAdyqfDMWkhSKu/I95vdzgwrDm9ubFbHsqyAcRbJtq9UsDS6IRtJLkCCUQg7vr 10+SDX1xzDP3hzw8V+ryQ2LOXMVJWuOMuwz14U6J0mcPS0+Ymk5QKBErcZpPHPYj aragJ8Si/sWklF7UlPecXLJ5AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUN3hUTiRp VIvwm1Td2APX19kPfmIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY4Q0FBL0RDRDAyQTIwRTFFQTExRUU5OTlDNzAyQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGOENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlS cFZJdndtMVRkMkFQWDE5a1BmbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiISMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ5FYMA8EAgAC MAkDBwAgAQ3yjYAwDQYJKoZIhvcNAQELBQADggEBAL2srTBrCx4nQmDiAnGhJuN6 61Ehfs347mL+VVPRoM2zKLwyCeIWWyqeVQ3d6Uz20fq/P8jnM2okC9SZBShc5n0c ziAKfLx0mAcMR6fAwFLD8iWbjowgJX0Q2T16z/Xl5KwzcY5BWRj9dKLWWKNDZpYp QiOtbdO/zMw4yVw+pLBHVMGfaqBhuOpSzo/p/3Kxo/LtW2QBDqvEk/R+MOtVGXhn D3IYTFen4px5uvm+H5qWJ+paOOPxjf/bzu5kmWKcoDoapSZ8R4QJGi/gty+ckGCr Mp9kxgGq6kx4JAtwJkfR7w6bDn3K4P/NvA2y1BK/0k7mgvMwVbkYeTFSxBR546U= -----END CERTIFICATE-----Generated at Sat Dec 20 13:59:26 2025 by rpki-client