This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer File: rGOF7VY-H9amaz5LUQ3MaTDNSww.cer (raw, json) Hash identifier: FjgAODFBR8y2/qKfJzEQUWoxMXS/+q+XIS0yXjEbtIw= Subject key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F58 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft caRepository: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 03:53:03 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 131283 IP: 103.120.104.0/22 IP: 175.100.160.0/22 IP: 2405:a100::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163672 (0x27f58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 19 03:53:03 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:7e:76:26:16:a6:22:75:14:fd:bd:b5:50: aa:42:bf:b1:17:1b:50:66:4d:b7:ed:e9:c9:fc:52: 12:09:05:1f:28:a6:d8:e7:59:ed:8d:ab:f4:b1:ed: a5:fd:44:4a:aa:92:6f:cc:80:72:87:b1:91:51:0e: b6:19:69:66:92:53:04:eb:96:41:e4:f5:36:4b:8c: c9:48:f2:4a:ef:a9:c8:c4:eb:81:8c:7e:b8:0d:3f: b4:ef:c8:02:87:26:5e:a5:ff:27:be:eb:7a:99:b7: 12:61:14:46:c6:38:5e:aa:8b:1e:9b:17:66:8e:f6: 7a:ee:c1:db:19:14:98:d6:a0:24:26:5f:30:95:f8: a9:98:00:d5:43:3c:4c:f6:54:6b:ce:82:35:06:99: f2:0a:d9:0a:38:3c:f6:1b:ec:b2:9b:f6:88:66:55: 35:fd:0a:39:10:e0:86:8a:60:36:dc:6f:c3:91:cd: 15:9f:64:98:9c:bc:9c:28:7c:93:62:5a:21:52:6e: df:21:bc:9c:b7:a7:09:23:3e:e7:6b:05:e1:21:8b: 44:81:bb:0a:d7:72:96:97:cf:3e:5b:45:7d:49:47: cc:4d:d2:cd:24:f0:f9:ce:68:fa:5e:7c:18:b4:7b: 14:b6:1e:44:ef:9c:1b:73:8b:16:3b:5d:df:de:76: b5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131283 sbgp-ipAddrBlock: critical IPv4: 103.120.104.0/22 175.100.160.0/22 IPv6: 2405:a100::/32 Signature Algorithm: sha256WithRSAEncryption 35:59:a7:7e:2f:79:7f:b6:a6:93:79:97:cd:19:b8:20:08:49: df:5f:f6:7e:13:21:b9:ae:71:02:09:e8:81:60:88:33:ea:94: f8:fb:e3:1c:f9:8b:ac:46:cf:90:8e:b7:b8:77:43:4e:5e:7f: d1:40:00:81:e6:3b:42:63:b6:5e:a5:03:d2:f2:de:48:c5:d1: 9e:be:dc:ef:4a:b3:16:2b:12:39:0d:ce:98:df:e3:9e:62:dc: c0:51:31:da:12:08:93:2f:96:72:7f:a6:c1:ff:b4:a8:4e:4d: 8d:93:db:4e:b6:c5:56:35:b4:3a:3b:0a:16:21:da:ae:9b:28: 25:1f:1e:49:34:4d:36:54:e3:12:28:e3:4e:69:6d:8a:fa:5d: 1e:09:b8:6b:1f:33:08:85:84:85:c1:87:d9:b6:04:56:1d:13: 79:13:9f:1b:89:f4:5c:7d:f0:83:fa:12:27:7d:6e:fb:fe:d7: e1:5a:52:7d:e3:ca:a7:53:1b:f4:1e:a1:9e:bf:18:15:25:75: 9a:57:2c:f0:aa:f4:37:57:46:f3:5b:92:24:47:63:be:92:52: 77:be:36:a9:fc:fd:c1:8d:df:1f:24:b5:54:a3:da:36:82:dd: bb:68:43:f2:59:52:4e:42:7c:ee:38:ef:a5:56:33:cd:a3:dd: e3:04:8b:0b -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAn9YMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxOTAzNTMwM1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0 QjUxMERDQzY5MzBDRDRCMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPrX52JhamInUU/b21UKpCv7EXG1BmTbft6cn8UhIJBR8optjnWe2Nq/Sx7aX9 REqqkm/MgHKHsZFRDrYZaWaSUwTrlkHk9TZLjMlI8krvqcjE64GMfrgNP7TvyAKH Jl6l/ye+63qZtxJhFEbGOF6qix6bF2aO9nruwdsZFJjWoCQmXzCV+KmYANVDPEz2 VGvOgjUGmfIK2Qo4PPYb7LKb9ohmVTX9CjkQ4IaKYDbcb8ORzRWfZJicvJwofJNi WiFSbt8hvJy3pwkjPudrBeEhi0SBuwrXcpaXzz5bRX1JR8xN0s0k8PnOaPpefBi0 exS2HkTvnBtzixY7Xd/edrXBAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUrGOF7VY+ H9amaz5LUQ3MaTDNSwwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTYwRDBBLzU2NEExMzVFRDIyMjExRUQ5QTIwNkM0NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZ LUg5YW1hejVMVVEzTWFURE5Td3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgDTMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ3hoAwQCr2Sg MA0EAgACMAcDBQAkBaEAMA0GCSqGSIb3DQEBCwUAA4IBAQA1Wad+L3l/tqaTeZfN GbggCEnfX/Z+EyG5rnECCeiBYIgz6pT4++Mc+YusRs+Qjre4d0NOXn/RQACB5jtC Y7ZepQPS8t5IxdGevtzvSrMWKxI5Dc6Y3+OeYtzAUTHaEgiTL5Zyf6bB/7SoTk2N k9tOtsVWNbQ6OwoWIdqumyglHx5JNE02VOMSKONOaW2K+l0eCbhrHzMIhYSFwYfZ tgRWHRN5E58bifRcffCD+hInfW77/tfhWlJ948qnUxv0HqGevxgVJXWaVyzwqvQ3 V0bzW5IkR2O+klJ3vjap/P3Bjd8fJLVUo9o2gt27aEPyWVJOQnzuOO+lVjPNo93j BIsL -----END CERTIFICATE-----Generated at Fri Dec 19 16:05:59 2025 by rpki-client