This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer File: uf67oJzxCyh-7SzlZyKzyaDvEv8.cer (raw, json) Hash identifier: Mb1vxAVVhLftIwCjLuJxl7iAIvRi/FwaSwUDzZTx+/w= Subject key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027CD9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft caRepository: rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 17:21:01 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 139919 IP: 103.147.24.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163033 (0x27cd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 8 17:21:01 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:7a:c9:be:54:93:d8:79:81:4a:1b:c5:c0: dd:49:9b:c4:14:db:bc:0c:b8:44:07:11:00:4e:58: 50:bb:e4:65:8e:9c:8d:9d:70:8f:8c:80:5e:6a:5f: 61:66:06:46:20:5d:d5:a2:4e:45:45:d9:ba:09:97: c3:ab:5e:49:2a:ee:86:b2:85:77:f6:d8:d1:18:a9: c3:e8:c0:46:2e:36:12:0d:1f:f8:2e:52:5b:0e:22: af:83:ef:96:fb:ba:19:15:de:77:51:1e:e4:6c:26: 2f:8c:dd:7c:76:13:ec:57:6a:81:7f:e4:11:94:44: 0d:9d:e3:cf:7c:1f:18:7a:32:66:9b:93:c2:0d:24: 62:87:30:47:b0:28:c7:a8:f0:c7:73:5a:ec:69:79: b0:a9:bc:8a:38:15:38:ea:8a:6f:8e:ed:ec:b0:d8: ab:63:b3:ed:a9:11:7a:c1:19:d0:cc:b8:40:68:fb: 2c:ee:c3:e6:39:80:f2:6b:57:5f:89:cd:a8:98:0d: c4:4f:52:0d:a2:12:fa:dd:37:3a:7b:1b:b9:59:97: 7b:21:a5:63:e6:ba:c6:39:5f:1f:1c:77:92:63:22: ec:f6:7f:8a:85:77:d4:6f:0a:1e:a5:9a:93:80:e2: 57:fd:7a:0c:bd:7e:c0:22:da:93:28:7d:3f:3a:12: 8e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139919 sbgp-ipAddrBlock: critical IPv4: 103.147.24.0/23 Signature Algorithm: sha256WithRSAEncryption cf:a7:bc:88:b4:4f:f6:d4:02:0a:1b:ee:62:ab:ca:c0:0f:52: a8:27:5d:90:72:77:c5:8a:b6:7f:f0:70:d3:3a:6e:d0:ef:79: b4:a4:5b:2d:81:17:02:47:3a:3c:09:a9:c0:a4:9f:02:b8:fc: 41:04:fe:6f:e9:d4:40:d0:71:6a:a4:92:80:22:f4:ff:d6:a9: fe:8d:b0:dc:03:ef:4d:fd:89:54:97:aa:0c:7a:cd:a0:f5:7f: 12:52:17:23:c7:18:1e:ee:dc:9f:75:d7:88:51:46:bd:31:a7: 1d:ea:83:3b:bf:e6:aa:f5:9a:42:a5:3b:59:e0:ba:c3:50:64: f3:28:52:dd:12:16:91:61:c5:86:cc:14:ae:f7:51:b2:91:43: 31:b5:4c:5c:c8:18:a1:47:a6:34:f1:c8:c3:31:51:d5:a8:b5: ac:63:1d:d7:aa:48:7a:a1:58:bd:3d:c9:a7:6f:bc:7c:27:38: ee:0f:48:b4:dc:99:52:31:db:ed:0f:e8:a5:15:45:72:70:24: 60:43:81:ee:40:87:ec:95:4f:b3:56:ea:fa:f6:ef:9d:e0:57: 5e:7e:9e:f0:52:a1:5b:1e:ee:94:24:e6:b2:61:90:64:79:01: 9e:15:7e:69:e8:ed:cb:39:cc:34:5d:24:91:b6:3c:52:d9:8a: f6:34:ec:12 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnzZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwODE3MjEwMVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxOEJCN0ExMTAvBgNVBAUTKEI5RkVCQkEwOUNGMTBCMjg3RUVEMkNF NTY3MjJCM0M5QTBFRjEyRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIyXrJvlST2HmBShvFwN1Jm8QU27wMuEQHEQBOWFC75GWOnI2dcI+MgF5qX2Fm BkYgXdWiTkVF2boJl8OrXkkq7oayhXf22NEYqcPowEYuNhINH/guUlsOIq+D75b7 uhkV3ndRHuRsJi+M3Xx2E+xXaoF/5BGURA2d4898Hxh6Mmabk8INJGKHMEewKMeo 8MdzWuxpebCpvIo4FTjqim+O7eyw2Ktjs+2pEXrBGdDMuEBo+yzuw+Y5gPJrV1+J zaiYDcRPUg2iEvrdNzp7G7lZl3shpWPmusY5Xx8cd5JjIuz2f4qFd9RvCh6lmpOA 4lf9egy9fsAi2pMofT86Eo4/AgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUuf67oJzx Cyh+7SzlZyKzyaDvEv8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThCQjdBLzVEMjExODRDOEVCMTExRUFCMDJBNTUwRUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4QkI3QS81RDIxMTg0QzhFQjExMUVBQjAyQTU1MEVDNEY5QUUwMi91ZjY3b0p6 eEN5aC03U3psWnlLenlhRHZFdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiKPMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5MYMA0GCSqG SIb3DQEBCwUAA4IBAQDPp7yItE/21AIKG+5iq8rAD1KoJ12QcnfFirZ/8HDTOm7Q 73m0pFstgRcCRzo8CanApJ8CuPxBBP5v6dRA0HFqpJKAIvT/1qn+jbDcA+9N/YlU l6oMes2g9X8SUhcjxxge7tyfddeIUUa9Macd6oM7v+aq9ZpCpTtZ4LrDUGTzKFLd EhaRYcWGzBSu91GykUMxtUxcyBihR6Y08cjDMVHVqLWsYx3Xqkh6oVi9Pcmnb7x8 JzjuD0i03JlSMdvtD+ilFUVycCRgQ4HuQIfslU+zVur69u+d4Fdefp7wUqFbHu6U JOayYZBkeQGeFX5p6O3LOcw0XSSRtjxS2Yr2NOwS -----END CERTIFICATE-----Generated at Fri Dec 19 19:13:58 2025 by rpki-client