This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer File: mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer (raw, json) Hash identifier: 39iSXHXbB3rO0y43yzVAXJbGD7G+JLF0O96SiqGSIRo= Subject key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D06 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft caRepository: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 09 Dec 2025 13:08:26 +0000 Certificate not after: Thu 30 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 24511 IP: 103.138.131.0/24 IP: 2001:df6:5c40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163078 (0x27d06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 9 13:08:26 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:e4:eb:f5:f7:97:06:f3:a0:ca:59:8e:10: 36:ea:75:5c:85:23:a5:28:98:c5:2e:6e:49:65:5a: 96:21:f4:3e:77:98:8b:41:59:88:eb:f4:45:f1:71: 5b:6c:ea:a9:4f:4c:d0:5a:fe:db:09:38:25:b3:0f: 91:b6:57:cd:de:06:bd:c1:b2:f9:7b:63:f6:19:2a: e5:3c:78:03:cf:af:aa:ed:c8:5c:20:7a:b5:87:59: cc:96:96:a6:04:ad:70:e7:0d:60:44:11:89:90:33: 50:f3:57:e0:4e:04:cc:24:7b:1d:95:6f:de:70:e2: fa:65:22:9a:a2:f0:4b:ae:e2:6a:18:0d:3f:0d:81: 19:aa:e3:29:cc:b7:1e:bd:b8:2f:a5:dd:36:7c:db: b7:f6:8f:12:d0:12:21:30:cd:55:59:24:6e:16:86: 23:10:a1:f5:c1:25:ae:1f:b3:07:54:f1:a1:b4:6e: f1:71:05:a3:ec:d0:7b:3d:86:b1:09:2c:93:9d:14: f1:b1:32:aa:fd:60:60:18:80:64:ee:ce:f3:59:3c: ab:15:8b:0b:9d:44:d0:af:82:88:90:88:b2:59:e5: 9b:58:50:4c:57:3c:f3:ba:52:d8:b8:39:22:11:97: 21:3e:2c:da:fb:4a:9f:0c:b4:d0:75:7e:58:17:ef: 32:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24511 sbgp-ipAddrBlock: critical IPv4: 103.138.131.0/24 IPv6: 2001:df6:5c40::/48 Signature Algorithm: sha256WithRSAEncryption 31:b6:d9:b3:84:d9:d6:fb:51:14:74:40:06:2b:91:f1:16:b0: ed:e9:c4:bf:0d:fb:d8:63:7f:0b:02:06:99:ef:12:17:a1:03: 36:67:ff:dc:5e:83:88:41:c1:77:71:ef:c2:85:43:4d:52:9b: 13:6e:c9:f4:68:d3:3d:f9:6f:11:97:9c:f5:3e:35:cf:39:d8: 95:d5:84:a3:c9:d9:bc:2d:98:54:40:e1:77:10:f6:1d:56:27: 65:bd:57:9a:ae:8f:1e:66:4a:4d:82:07:52:c3:a5:28:7c:de: 86:45:55:b5:00:c3:f1:03:08:1b:ad:78:62:42:bc:6a:c9:9c: 04:df:f7:b5:15:c1:f7:3c:61:7d:c7:87:6b:8c:d2:f6:24:c6: 4d:10:ba:6a:1f:6f:08:a6:36:66:36:13:6d:10:2d:cc:d9:a6: 99:1c:28:24:17:5e:ea:2b:8e:f7:b8:77:6b:da:f6:36:15:70: 5d:d2:c8:42:c2:3f:95:9d:8b:4d:f0:5b:fc:cc:08:71:cc:cd: 27:0c:4d:ed:7e:64:ee:b7:f3:5a:eb:d1:19:d2:33:f7:86:48: e6:49:14:bf:3b:07:83:f3:6d:c0:d4:93:5e:e7:3c:40:32:51: 63:d1:21:e5:a5:82:ed:10:e8:44:54:a2:43:01:11:96:5e:a7: ac:a8:7d:26 -----BEGIN CERTIFICATE----- MIIGKjCCBRKgAwIBAgIDAn0GMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwOTEzMDgyNloXDTI2MDczMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzBGNEIxMTAvBgNVBAUTKDk5MzBEMEZGRUI4NzA3MDFCNEU4RUI0 REIzQzA4NjYyMzNGQzVCNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUcOTr9feXBvOgylmOEDbqdVyFI6UomMUubkllWpYh9D53mItBWYjr9EXxcVts 6qlPTNBa/tsJOCWzD5G2V83eBr3Bsvl7Y/YZKuU8eAPPr6rtyFwgerWHWcyWlqYE rXDnDWBEEYmQM1DzV+BOBMwkex2Vb95w4vplIpqi8Euu4moYDT8NgRmq4ynMtx69 uC+l3TZ827f2jxLQEiEwzVVZJG4WhiMQofXBJa4fswdU8aG0bvFxBaPs0Hs9hrEJ LJOdFPGxMqr9YGAYgGTuzvNZPKsViwudRNCvgoiQiLJZ5ZtYUExXPPO6Uti4OSIR lyE+LNr7Sp8MtNB1flgX7zJfAgMBAAGjggMfMIIDGzAdBgNVHQ4EFgQUmTDQ/+uH BwG06OtNs8CGYjP8W1AwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTMwRjRCLzU3NzJBQTMwNTRFNDExRTk4NTM2RjY1OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzMEY0Qi81NzcyQUEzMDU0RTQxMUU5ODUzNkY2NTlDNEY5QUUwMi9tVERRXy11 SEJ3RzA2T3ROczhDR1lqUDhXMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICX78wMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBABnioMwDwQCAAIw CQMHACABDfZcQDANBgkqhkiG9w0BAQsFAAOCAQEAMbbZs4TZ1vtRFHRABiuR8Raw 7enEvw372GN/CwIGme8SF6EDNmf/3F6DiEHBd3HvwoVDTVKbE27J9GjTPflvEZec 9T41zznYldWEo8nZvC2YVEDhdxD2HVYnZb1Xmq6PHmZKTYIHUsOlKHzehkVVtQDD 8QMIG614YkK8asmcBN/3tRXB9zxhfceHa4zS9iTGTRC6ah9vCKY2ZjYTbRAtzNmm mRwoJBde6iuO97h3a9r2NhVwXdLIQsI/lZ2LTfBb/MwIcczNJwxN7X5k7rfzWuvR GdIz94ZI5kkUvzsHg/NtwNSTXuc8QDJRY9Eh5aWC7RDoRFSiQwERll6nrKh9Jg== -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:26 2025 by rpki-client