This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer File: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer (raw, json) Hash identifier: c4Sw0/OD61Wq1BApvnvz0sDIXeG9ORjhjvj5gcrl80o= Subject key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027DB2 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft caRepository: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 12 Dec 2025 12:40:10 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 63945 AS: 137068 IP: 103.43.144.0/22 IP: 103.103.182.0/23 IP: 2401:f680::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163250 (0x27db2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 12 12:40:10 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:c6:55:89:a2:64:2f:6a:54:e1:ee:69:17: f6:77:db:70:06:f9:b2:cf:28:4d:17:45:ba:57:ec: bc:a6:9d:ac:f0:95:26:a0:77:a8:32:96:3f:17:95: 06:eb:43:53:1e:39:76:af:74:59:78:0f:f5:53:f6: 97:e4:a3:ba:14:fe:7e:58:13:52:6d:9f:ac:7f:04: f4:35:af:58:7a:d8:02:26:94:c5:d0:fc:b8:cf:74: 25:40:90:38:b3:b6:51:78:83:e3:5e:64:6d:cb:f6: 87:b6:1e:5e:af:03:ae:88:4a:db:8d:49:6d:31:38: 5e:14:07:0e:0e:a0:09:c1:55:4e:5a:39:ca:5f:a4: b7:8e:0c:30:c7:f0:79:ef:b4:54:2f:1a:df:d7:1d: 34:5c:d0:0f:19:43:35:58:fb:a3:66:1d:20:a7:ce: 59:1a:e1:14:2c:59:4e:28:35:af:2f:eb:c2:72:67: 3d:40:84:56:7b:09:43:cf:b8:c6:5c:dc:81:8c:94: 3d:8e:7a:ca:73:e3:0a:dc:fc:66:5d:b2:b1:be:38: a0:4b:7a:ad:2e:4d:7c:78:52:b0:c3:9d:db:2b:63: 92:43:af:b2:7a:22:9c:ee:27:43:a2:dc:4d:77:b1: 93:6d:f6:63:c7:35:3f:e4:92:4a:e6:a4:5f:d8:75: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63945 137068 sbgp-ipAddrBlock: critical IPv4: 103.43.144.0/22 103.103.182.0/23 IPv6: 2401:f680::/32 Signature Algorithm: sha256WithRSAEncryption 26:81:f4:e7:13:5a:45:0f:ab:fe:f1:3d:1c:b1:ce:51:a0:bc: 73:69:1e:e3:16:f1:fd:88:09:af:e6:c0:1a:93:97:11:0d:0a: 64:03:12:df:fa:f3:43:14:09:2d:93:4c:80:da:df:74:00:56: f8:b0:8c:5e:99:86:68:03:d8:8d:a7:ff:1a:06:7b:53:cf:fe: c2:49:11:e9:eb:99:f2:68:39:cd:7b:7c:5d:d4:47:7d:fe:24: 87:60:78:4b:49:f8:41:c2:06:10:20:8b:e0:2c:b3:ac:5d:5e: 28:59:2d:ae:6e:ef:d7:1c:6b:3a:fd:69:ff:db:68:17:90:71: ac:90:8f:04:87:49:e3:5a:64:79:a4:bc:23:18:9e:b6:ff:b5: d8:04:ec:a0:4f:da:af:1c:d6:07:26:0c:82:07:51:e4:de:44: c7:2c:10:c0:b8:62:8b:ea:58:95:80:57:a1:91:66:46:75:ca: 0b:2c:e4:f8:47:56:bd:ef:b9:18:db:1c:ac:ba:4b:22:40:b3: 9c:c9:02:fc:20:e2:a5:76:07:7b:89:49:ab:0a:20:da:b7:23: 9a:7c:d4:c0:f0:fa:bd:31:85:88:c8:17:64:54:6a:a8:05:2e: b6:0c:c2:99:cb:be:0d:49:ae:c7:84:c2:bd:26:4e:ea:38:c4: 9a:51:c8:16 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIDAn2yMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMjEyNDAxMFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxMTkyM0MxMTAvBgNVBAUTKDcyNjg3NDNFNUM1MEREOUY1NEQyQTY5 NUM1QTBFQkY1NDBDRjlCQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjxcZViaJkL2pU4e5pF/Z323AG+bLPKE0XRbpX7LymnazwlSagd6gylj8XlQbr Q1MeOXavdFl4D/VT9pfko7oU/n5YE1Jtn6x/BPQ1r1h62AImlMXQ/LjPdCVAkDiz tlF4g+NeZG3L9oe2Hl6vA66IStuNSW0xOF4UBw4OoAnBVU5aOcpfpLeODDDH8Hnv tFQvGt/XHTRc0A8ZQzVY+6NmHSCnzlka4RQsWU4oNa8v68JyZz1AhFZ7CUPPuMZc 3IGMlD2Oespz4wrc/GZdsrG+OKBLeq0uTXx4UrDDndsrY5JDr7J6IpzuJ0Oi3E13 sZNt9mPHNT/kkkrmpF/YdcFRAgMBAAGjggMpMIIDJTAdBgNVHQ4EFgQUcmh0PlxQ 3Z9U0qaVxaDr9UDPm68wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE5MjNDL0RBMEM5NzI4RDM0NzExRUM5OEZBMjYyOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExOTIzQy9EQTBDOTcyOEQzNDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4 UTNaOVUwcWFWeGFEcjlVRFBtNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAPnJAgMCF2wwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAJnK5AD BAFnZ7YwDQQCAAIwBwMFACQB9oAwDQYJKoZIhvcNAQELBQADggEBACaB9OcTWkUP q/7xPRyxzlGgvHNpHuMW8f2ICa/mwBqTlxENCmQDEt/680MUCS2TTIDa33QAVviw jF6ZhmgD2I2n/xoGe1PP/sJJEenrmfJoOc17fF3UR33+JIdgeEtJ+EHCBhAgi+As s6xdXihZLa5u79ccazr9af/baBeQcayQjwSHSeNaZHmkvCMYnrb/tdgE7KBP2q8c 1gcmDIIHUeTeRMcsEMC4YovqWJWAV6GRZkZ1ygss5PhHVr3vuRjbHKy6SyJAs5zJ Avwg4qV2B3uJSasKINq3I5p81MDw+r0xhYjIF2RUaqgFLrYMwpnLvg1JrseEwr0m Tuo4xJpRyBY= -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:08 2025 by rpki-client