This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer File: mc3A6r4YBBJhGaHVGpjMhxkT86k.cer (raw, json) Hash identifier: fEnevXOuXuOhSpO0u7TEj35FydOIQF3Zkq3VG7SJbas= Subject key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D40 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft caRepository: rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 10 Dec 2025 13:56:11 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 141371 IP: 103.157.198.0/23 IP: 2001:df5:2a80::/47 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163136 (0x27d40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 10 13:56:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9183F7F, serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:12:e4:37:1c:af:af:96:c0:5a:63:e3:31: 2f:4f:e1:72:76:a1:b3:a4:60:98:83:1a:a9:2f:44: f9:9a:34:d9:29:b8:20:ef:ca:eb:b3:19:d2:f7:35: 05:23:e5:dd:3b:c8:33:1a:e0:d9:5c:14:1a:c1:cc: 49:1f:16:83:6d:0a:8d:52:7c:ef:bd:35:47:51:84: ee:cd:37:f1:d8:9b:ad:c3:e9:e6:69:ac:32:03:ea: 2f:ff:9f:6f:1f:12:6b:10:3c:e2:90:1a:a5:21:aa: 69:0a:8e:d7:48:29:79:c4:e3:6e:73:8b:5c:ac:f8: ff:47:37:91:bd:ad:b0:5a:7d:e3:6d:4a:8e:9f:54: 5e:d1:37:eb:a9:04:e9:67:80:d9:23:c4:cd:2d:d2: 8a:36:c2:4c:e3:a1:35:56:93:89:50:a4:2e:ee:a5: 55:a4:26:10:64:b5:1a:77:32:1e:d9:85:39:84:c0: 3b:a7:45:c8:c6:3e:0f:17:3b:87:8e:8b:0f:f3:a6: a5:3f:b6:26:0d:e0:d8:21:11:1f:f8:5b:cc:26:3f: 72:d4:ac:da:89:74:51:df:a8:68:bd:6f:f1:cc:6f: 66:be:87:2e:c4:01:47:eb:a1:21:b8:b5:e2:52:5b: 9d:fe:69:a9:91:3d:25:e4:7f:9e:41:59:24:d6:8d: 51:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141371 sbgp-ipAddrBlock: critical IPv4: 103.157.198.0/23 IPv6: 2001:df5:2a80::/47 Signature Algorithm: sha256WithRSAEncryption d2:c8:e8:d4:bc:05:bc:9f:1f:ec:97:73:24:46:3e:86:1e:4a: e2:4b:02:b2:05:eb:8e:87:65:ab:a2:d8:bd:92:b5:09:a5:a4: 9a:a9:a7:90:fe:2d:98:7c:d5:44:59:25:25:59:6a:04:1c:cd: 44:f5:9f:28:23:e4:d1:18:13:53:a4:89:16:bd:35:09:d3:27: 6a:46:83:11:47:29:3b:cc:ec:48:04:25:43:ea:48:d4:bd:da: 18:0e:bb:5b:5b:d3:28:59:33:53:62:a7:31:4e:21:37:1d:fb: c3:68:2a:8e:d4:70:2d:6f:45:29:70:35:08:f1:ca:d8:40:2f: 3a:c7:38:0d:35:61:94:21:fd:41:c4:6c:d4:5c:2e:9f:39:75: 64:b8:f9:41:08:4e:63:92:bd:f0:73:46:41:b6:b3:b3:cc:9d: ca:db:21:cd:a4:bc:91:23:fd:45:71:51:32:3d:27:bf:52:15: 8b:74:03:05:b6:38:99:09:42:0c:75:8b:57:6e:5a:91:42:bd: 06:9f:2d:99:c2:55:06:c3:9b:2b:f2:8c:a8:b9:c8:f4:ba:00: 12:e5:4f:6b:58:ec:e6:6f:81:88:92:64:0f:1d:ec:b6:53:4e: 36:43:62:b2:a1:18:57:4b:db:27:a6:0c:82:e9:89:df:a0:1d: f0:c6:7b:d2 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAn1AMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMDEzNTYxMVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxODNGN0YxMTAvBgNVBAUTKDk5Q0RDMEVBQkUxODA0MTI2MTE5QTFE NTFBOThDQzg3MTkxM0YzQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCBBLkNxyvr5bAWmPjMS9P4XJ2obOkYJiDGqkvRPmaNNkpuCDvyuuzGdL3NQUj 5d07yDMa4NlcFBrBzEkfFoNtCo1SfO+9NUdRhO7NN/HYm63D6eZprDID6i//n28f EmsQPOKQGqUhqmkKjtdIKXnE425zi1ys+P9HN5G9rbBafeNtSo6fVF7RN+upBOln gNkjxM0t0oo2wkzjoTVWk4lQpC7upVWkJhBktRp3Mh7ZhTmEwDunRcjGPg8XO4eO iw/zpqU/tiYN4NghER/4W8wmP3LUrNqJdFHfqGi9b/HMb2a+hy7EAUfroSG4teJS W53+aamRPSXkf55BWSTWjVHFAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUmc3A6r4Y BBJhGaHVGpjMhxkT86kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTgzRjdGL0UzN0U1QjMyMTUwRTExRUI4Q0VCOTU0M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4M0Y3Ri9FMzdFNUIzMjE1MEUxMUVCOENFQjk1NDNDNEY5QUUwMi9tYzNBNnI0 WUJCSmhHYUhWR3BqTWh4a1Q4NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAig7MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ53GMA8EAgAC MAkDBwEgAQ31KoAwDQYJKoZIhvcNAQELBQADggEBANLI6NS8BbyfH+yXcyRGPoYe SuJLArIF646HZaui2L2StQmlpJqpp5D+LZh81URZJSVZagQczUT1nygj5NEYE1Ok iRa9NQnTJ2pGgxFHKTvM7EgEJUPqSNS92hgOu1tb0yhZM1NipzFOITcd+8NoKo7U cC1vRSlwNQjxythALzrHOA01YZQh/UHEbNRcLp85dWS4+UEITmOSvfBzRkG2s7PM ncrbIc2kvJEj/UVxUTI9J79SFYt0AwW2OJkJQgx1i1duWpFCvQafLZnCVQbDmyvy jKi5yPS6ABLlT2tY7OZvgYiSZA8d7LZTTjZDYrKhGFdL2yemDILpid+gHfDGe9I= -----END CERTIFICATE-----Generated at Fri Dec 19 16:02:27 2025 by rpki-client