This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer (raw, json) Hash identifier: USs1TWMToUH3RYC4xPQmv18cvSPFESUCzCRK82LaQa0= Subject key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F07 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 17 Dec 2025 17:35:11 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 136145 IP: 103.79.224.0/22 IP: 2001:df6:c600::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163591 (0x27f07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 17 17:35:11 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:47:14:2b:f2:8d:38:8e:04:e5:30:5c:75:dd: 60:ad:87:23:9b:8e:f0:f5:bd:bf:63:48:4b:92:c4: 2f:c3:c4:c8:0f:a2:e4:dd:67:06:96:d1:63:35:cb: 94:24:70:e6:eb:76:77:05:4d:82:18:b0:af:ef:f9: 67:51:2c:ec:7c:9d:0b:79:24:ac:d8:4d:c3:14:99: a5:ad:9d:de:b9:46:cf:6d:14:f1:74:6b:aa:be:a3: 20:76:f2:86:5c:69:43:17:e3:e4:1f:51:f9:ec:9e: a8:d7:e9:87:7b:dc:62:7d:9e:a7:b8:fc:6a:4d:4a: 7f:ec:9d:9a:cb:8a:23:1f:7c:24:29:5d:5b:11:21: 82:31:e7:15:29:96:d0:3d:c4:41:86:26:73:83:cc: fd:29:ff:ce:d4:2c:37:01:bc:cc:d8:5b:74:84:ec: 24:7b:4a:b7:c0:96:3d:07:23:34:8c:09:4e:f9:97: 44:cd:1b:33:c7:40:52:75:b7:60:de:a9:36:84:5a: fe:2e:8a:fb:54:81:39:b5:ee:05:62:46:00:aa:f1: 79:f9:a1:48:99:c8:86:f1:2c:18:f8:65:3d:1a:9d: ba:48:ae:ba:3a:cc:69:d4:2d:5e:28:52:be:20:82: a2:57:b6:1c:3b:8c:30:99:9e:39:1c:26:69:4e:14: 7f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136145 sbgp-ipAddrBlock: critical IPv4: 103.79.224.0/22 IPv6: 2001:df6:c600::/48 Signature Algorithm: sha256WithRSAEncryption 80:79:c3:88:88:91:c7:e6:81:3d:3c:57:e9:0b:51:d1:90:c0: 25:3c:8a:b7:f9:d1:72:a5:2a:a3:3d:75:76:9d:74:a4:0d:dd: 30:65:a2:36:dd:f4:4d:c5:8e:ba:81:62:38:cb:cb:d3:84:a1: 12:95:80:6a:9f:12:5a:15:67:0d:1d:a4:0c:3f:15:a4:ef:b7: 1c:45:a5:75:1c:d5:f6:99:8a:0b:84:cc:d8:d0:c3:0e:b7:bb: 3f:f2:85:ea:f7:2a:56:4b:be:f1:b5:79:25:88:1d:70:7d:c9: 50:5e:56:52:a8:e4:4c:96:85:66:40:ed:40:9c:af:09:f6:20: b0:19:80:58:d8:9b:9f:bf:5c:4e:5c:c9:fc:71:74:8d:27:b7: cf:58:a4:73:bb:90:0c:95:c3:cb:26:d2:29:70:ad:9c:48:46: 6f:9b:46:6d:3e:4c:59:d8:b6:36:66:a0:ad:c5:bc:59:1a:4c: 44:92:83:31:b8:26:19:ef:17:6c:9d:d8:7e:1d:67:7f:8a:78: 7d:6d:3b:52:6e:9e:9b:9e:3a:7d:8d:12:19:0f:15:b0:19:46: b9:13:b9:cd:ff:58:20:03:5c:83:78:2d:65:58:7c:58:f5:d5: 8c:e0:c9:a5:90:a4:4d:76:a8:02:96:16:93:fa:d9:01:ce:27: 61:15:0f:f4 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAn8HMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNzE3MzUxMVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRkQzOEExMTAvBgNVBAUTKEI2MjBBOUM0OTYzNzY2Q0MzQzU4MDYw Njk0OTIyRTlGNjc4ODExREUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdRxQr8o04jgTlMFx13WCthyObjvD1vb9jSEuSxC/DxMgPouTdZwaW0WM1y5Qk cObrdncFTYIYsK/v+WdRLOx8nQt5JKzYTcMUmaWtnd65Rs9tFPF0a6q+oyB28oZc aUMX4+QfUfnsnqjX6Yd73GJ9nqe4/GpNSn/snZrLiiMffCQpXVsRIYIx5xUpltA9 xEGGJnODzP0p/87ULDcBvMzYW3SE7CR7SrfAlj0HIzSMCU75l0TNGzPHQFJ1t2De qTaEWv4uivtUgTm17gViRgCq8Xn5oUiZyIbxLBj4ZT0anbpIrro6zGnULV4oUr4g gqJXthw7jDCZnjkcJmlOFH87AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUtiCpxJY3 Zsw8WAYGlJIun2eIEd4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZEMzhBLzlBRUYxN0JFMDVGNDExRUE4ODZBM0MyM0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGRDM4QS85QUVGMTdCRTA1RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZ M1pzdzhXQVlHbEpJdW4yZUlFZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhPRMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCZ0/gMA8EAgAC MAkDBwAgAQ32xgAwDQYJKoZIhvcNAQELBQADggEBAIB5w4iIkcfmgT08V+kLUdGQ wCU8irf50XKlKqM9dXaddKQN3TBlojbd9E3FjrqBYjjLy9OEoRKVgGqfEloVZw0d pAw/FaTvtxxFpXUc1faZiguEzNjQww63uz/yher3KlZLvvG1eSWIHXB9yVBeVlKo 5EyWhWZA7UCcrwn2ILAZgFjYm5+/XE5cyfxxdI0nt89YpHO7kAyVw8sm0ilwrZxI Rm+bRm0+TFnYtjZmoK3FvFkaTESSgzG4JhnvF2yd2H4dZ3+KeH1tO1JunpueOn2N EhkPFbAZRrkTuc3/WCADXIN4LWVYfFj11YzgyaWQpE12qAKWFpP62QHOJ2EVD/Q= -----END CERTIFICATE-----Generated at Fri Dec 19 16:04:52 2025 by rpki-client