This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer File: ihprqbt2zysN7jXqTP0vX_jAieM.cer (raw, json) Hash identifier: /khTCxrOEcLFU8+eEKzOD+g/xFq04Gb2gh7dH9A64Ug= Subject key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D8F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 11 Dec 2025 17:28:55 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 139788 IP: 103.145.56.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163215 (0x27d8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 11 17:28:55 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:b4:da:d3:d3:c4:e2:d0:c4:2b:87:64:a1: fc:8b:9e:fa:f8:af:07:34:aa:74:4c:05:0c:2a:84: 46:d4:24:14:a5:f4:8f:6f:1e:e7:ca:b7:08:64:2c: 09:cf:22:b1:00:98:b1:7c:ad:f0:e1:46:58:08:77: 14:ae:72:18:e0:28:76:5f:f1:e0:9d:68:68:2c:55: 4f:82:3c:db:06:d9:cd:89:e1:46:1b:35:b4:d9:8e: 66:e0:d1:ed:5f:c4:ba:84:ac:b2:33:b2:0f:d2:1e: fd:11:1f:08:18:64:63:7b:40:7b:66:c4:3a:c2:95: ce:98:af:23:ba:53:df:ee:97:74:e9:3f:7c:91:89: b7:e9:7d:00:76:48:bf:bb:2f:07:23:81:22:10:b1: d6:c5:a7:71:ef:2c:8c:bb:58:d4:89:ef:84:70:0e: 62:31:5d:3b:1c:28:bd:e8:0e:cc:ab:1d:4f:14:79: 3c:1d:45:e9:5e:3d:ee:61:02:2b:60:47:d2:b7:9d: 64:6a:cc:3c:ab:6b:76:90:52:26:53:69:3b:89:8b: 19:e1:45:ee:82:45:b7:3b:42:05:4c:58:a7:c8:d9: bb:b2:60:97:c7:7e:52:0b:c7:d2:60:b0:60:dc:3b: 2a:a6:15:23:5c:76:ab:ff:bc:61:c1:a0:c6:ba:cd: 12:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139788 sbgp-ipAddrBlock: critical IPv4: 103.145.56.0/24 Signature Algorithm: sha256WithRSAEncryption 48:1a:82:00:20:ea:37:a5:e5:00:e7:47:60:36:e8:de:56:74: dc:3c:13:6b:d9:5e:38:92:e0:8d:14:93:0e:83:bc:5d:9c:e3: 0d:f1:9e:3a:93:ea:a2:bf:68:27:1f:57:17:db:37:b1:d8:59: ff:ad:25:2a:20:71:2f:e5:87:87:00:b1:16:bb:99:8b:f1:bc: d1:1f:06:a0:b0:2c:09:3b:94:43:c5:06:3e:18:47:a9:3e:44: 64:0c:82:38:23:3d:53:67:0a:58:25:0d:99:eb:54:3d:2e:f7: c9:e0:7f:7e:67:bc:fc:e4:8e:00:8d:fb:e8:93:26:9f:46:88: 25:94:ee:b8:2b:80:0a:4c:2a:5e:b3:16:79:ac:ac:8a:c4:1e: 44:08:10:26:12:b3:79:63:68:ba:89:3c:d3:2e:83:d9:4d:4c: 9d:9f:90:3a:8b:46:0b:a3:24:7d:cb:c7:d4:a0:7a:63:4e:38: dc:de:e6:9b:2c:6d:8b:b3:d0:a3:ef:d1:92:92:d1:b8:db:14: 00:23:4a:eb:57:c3:d9:e4:f4:8c:91:80:98:42:bd:bb:50:f7: 48:2b:e4:ad:c4:db:d9:56:bf:af:d9:61:75:cc:73:57:83:1f: b4:44:62:c1:16:74:0b:c2:db:79:c4:99:c4:d7:70:00:5e:98: cf:0e:07:c4 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAn2PMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMTE3Mjg1NVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzM2RUUxMTAvBgNVBAUTKDhBMUE2QkE5QkI3NkNGMkIwREVFMzVF QTRDRkQyRjVGRjhDMDg5RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV4rTa09PE4tDEK4dkofyLnvr4rwc0qnRMBQwqhEbUJBSl9I9vHufKtwhkLAnP IrEAmLF8rfDhRlgIdxSuchjgKHZf8eCdaGgsVU+CPNsG2c2J4UYbNbTZjmbg0e1f xLqErLIzsg/SHv0RHwgYZGN7QHtmxDrClc6YryO6U9/ul3TpP3yRibfpfQB2SL+7 LwcjgSIQsdbFp3HvLIy7WNSJ74RwDmIxXTscKL3oDsyrHU8UeTwdRelePe5hAitg R9K3nWRqzDyra3aQUiZTaTuJixnhRe6CRbc7QgVMWKfI2buyYJfHflILx9JgsGDc OyqmFSNcdqv/vGHBoMa6zRKpAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUihprqbt2 zysN7jXqTP0vX/jAieMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUMzNkVFL0E4QzFDODdBMTgwMzExRUFCRUM4MkI1NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDMzZFRS9BOEMxQzg3QTE4MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0 Mnp5c043alhxVFAwdlhfakFpZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiIMMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5E4MA0GCSqG SIb3DQEBCwUAA4IBAQBIGoIAIOo3peUA50dgNujeVnTcPBNr2V44kuCNFJMOg7xd nOMN8Z46k+qiv2gnH1cX2zex2Fn/rSUqIHEv5YeHALEWu5mL8bzRHwagsCwJO5RD xQY+GEepPkRkDII4Iz1TZwpYJQ2Z61Q9LvfJ4H9+Z7z85I4AjfvokyafRogllO64 K4AKTCpesxZ5rKyKxB5ECBAmErN5Y2i6iTzTLoPZTUydn5A6i0YLoyR9y8fUoHpj Tjjc3uabLG2Ls9Cj79GSktG42xQAI0rrV8PZ5PSMkYCYQr27UPdIK+StxNvZVr+v 2WF1zHNXgx+0RGLBFnQLwtt5xJnE13AAXpjPDgfE -----END CERTIFICATE-----Generated at Fri Dec 19 17:37:15 2025 by rpki-client