This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer File: XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer (raw, json) Hash identifier: LUQE2CEIkT1DA7Tcti2E/3hl1QL88Yxas6zQnmp5e40= Subject key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E97 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft caRepository: rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 16 Dec 2025 13:50:12 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 149039 IP: 103.177.72.0/23 IP: 2001:df0:1ec0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163479 (0x27e97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 16 13:50:12 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91524AF, serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:c3:fb:69:5b:27:f3:69:00:7a:e0:3e:2e: 89:4d:68:ce:ee:9b:e0:54:1d:58:f1:40:93:3a:a0: 43:b0:e4:b4:34:19:da:56:56:4f:04:c6:7e:a4:80: b4:8a:0c:5f:52:9c:16:fc:10:24:15:ae:63:a4:45: 57:c5:7f:51:1f:2c:92:ad:91:fa:95:85:91:0b:ec: 32:03:37:40:87:35:8f:60:d7:58:75:6f:a8:5c:e4: 0e:4f:22:f7:a6:e2:4d:8f:d9:e8:55:89:2e:5f:49: 0d:96:20:94:4f:d6:17:4d:22:ea:73:d5:24:82:a6: 7e:6c:37:04:07:e3:d2:99:7b:5c:91:49:4e:51:69: 92:52:f8:e4:52:cd:b0:f8:e9:33:6e:72:c4:51:4a: e5:70:3d:27:15:86:a3:ff:b4:d9:15:bd:2a:a0:c2: 91:75:9b:be:72:39:b9:38:03:6b:87:ff:7c:23:bd: 3b:98:fb:ce:c0:82:8a:74:14:40:5c:bc:d9:41:49: a5:49:3f:19:02:01:f8:a9:43:d3:e7:37:43:94:9c: 3d:99:66:6e:17:71:da:a4:1b:6e:3d:b9:a7:7a:11: 14:1c:02:ca:ab:64:66:4c:0e:d5:3a:8b:39:0f:36: 8c:8e:e4:4b:45:16:e3:c7:d4:25:c6:03:97:8e:23: db:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 149039 sbgp-ipAddrBlock: critical IPv4: 103.177.72.0/23 IPv6: 2001:df0:1ec0::/48 Signature Algorithm: sha256WithRSAEncryption 06:59:73:75:c7:1d:81:52:89:0c:d4:6b:40:30:94:0c:98:5a: f3:98:61:45:f6:38:f5:af:94:fd:95:17:7b:3d:4f:7b:6e:74: 14:50:77:ba:4b:af:e0:f5:97:d7:7e:05:d3:99:eb:f5:d7:a7: 29:a8:76:08:16:b5:64:89:e4:2c:13:a1:39:83:7d:61:8d:b0: 9f:35:ae:95:3a:47:b4:6b:9c:c0:91:1b:b0:fa:a7:bb:00:e1: 3e:16:22:f0:07:0d:8d:c1:06:b9:e9:e2:a2:d9:04:3e:6f:88: 2f:72:0f:c1:39:82:68:2f:d3:4f:32:e3:2e:c5:78:9d:5f:dc: 9a:1c:7c:9b:d2:d3:c7:40:a7:89:b1:4f:d1:79:81:e2:b5:95: 61:a9:98:5e:e0:8d:26:59:73:36:06:83:dd:ac:ab:af:14:d8: d6:2e:fb:da:30:70:28:de:19:97:03:43:63:43:0f:79:aa:ef: 60:3f:de:dc:ab:29:26:50:86:9c:56:9f:a9:23:4f:b4:62:66: fe:bb:51:61:af:df:ba:ed:37:02:32:53:10:4e:ab:83:bb:eb: b2:f1:44:32:58:8b:b9:56:48:a8:6f:ab:c2:77:97:1c:61:5e: aa:bd:e4:74:2b:05:b5:90:8b:44:f9:6e:79:db:d3:74:61:ec: b4:a1:f6:f7 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAn6XMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNjEzNTAxMloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTI0QUYxMTAvBgNVBAUTKDVDMzE1REFGQzUzQTgyRkRENjJDNzIw MDVDNzY0NDMzM0JDMDI5N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoeMP7aVsn82kAeuA+LolNaM7um+BUHVjxQJM6oEOw5LQ0GdpWVk8Exn6kgLSK DF9SnBb8ECQVrmOkRVfFf1EfLJKtkfqVhZEL7DIDN0CHNY9g11h1b6hc5A5PIvem 4k2P2ehViS5fSQ2WIJRP1hdNIupz1SSCpn5sNwQH49KZe1yRSU5RaZJS+ORSzbD4 6TNucsRRSuVwPScVhqP/tNkVvSqgwpF1m75yObk4A2uH/3wjvTuY+87Agop0FEBc vNlBSaVJPxkCAfipQ9PnN0OUnD2ZZm4XcdqkG249uad6ERQcAsqrZGZMDtU6izkP NoyO5EtFFuPH1CXGA5eOI9uPAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUXDFdr8U6 gv3WLHIAXHZEMzvAKXowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTUyNEFGLzc2QzdGMEY0NTFGNjExRUM5RTNDNkMzQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1MjRBRi83NkM3RjBGNDUxRjYxMUVDOUUzQzZDM0FDNEY5QUUwMi9YREZkcjhV Nmd2M1dMSElBWEhaRU16dkFLWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkYvMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ7FIMA8EAgAC MAkDBwAgAQ3wHsAwDQYJKoZIhvcNAQELBQADggEBAAZZc3XHHYFSiQzUa0AwlAyY WvOYYUX2OPWvlP2VF3s9T3tudBRQd7pLr+D1l9d+BdOZ6/XXpymodggWtWSJ5CwT oTmDfWGNsJ81rpU6R7RrnMCRG7D6p7sA4T4WIvAHDY3BBrnp4qLZBD5viC9yD8E5 gmgv008y4y7FeJ1f3JocfJvS08dAp4mxT9F5geK1lWGpmF7gjSZZczYGg92sq68U 2NYu+9owcCjeGZcDQ2NDD3mq72A/3tyrKSZQhpxWn6kjT7RiZv67UWGv37rtNwIy UxBOq4O767LxRDJYi7lWSKhvq8J3lxxhXqq95HQrBbWQi0T5bnnb03Rh7LSh9vc= -----END CERTIFICATE-----Generated at Fri Dec 19 16:03:48 2025 by rpki-client