This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer File: 1FgFH22pUil0dbSEvd0Pu-NJDnA.cer (raw, json) Hash identifier: tlLy6Ln+X33kHVrA0G8M/Agzb8/hcbdmfEy9H+Ux3ZI= Subject key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02800F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft caRepository: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 22 Dec 2025 13:09:13 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 141448 IP: 103.159.170.0/23 IP: 2406:d5c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163855 (0x2800f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 22 13:09:13 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c5:1d:5e:9a:91:49:e3:7d:79:ab:a9:b2:b1: a2:19:28:b3:9a:4d:a9:d1:5b:ac:7b:84:4c:43:c9: fd:63:9b:6e:bb:4a:9c:77:85:6e:f8:d1:90:1d:81: 40:d5:c0:56:bc:df:ee:8b:91:2c:8a:fd:5c:97:36: 60:22:e5:06:81:ee:bc:33:15:ac:49:41:ec:b6:76: 89:8d:dd:0c:74:0b:a4:c9:38:38:97:5c:01:2c:67: f9:6e:a4:e5:23:2d:03:72:7c:87:41:0e:35:33:6c: 0d:01:ad:00:eb:08:64:1c:d4:21:50:cf:c5:61:db: 6f:7c:8e:f5:4f:2e:9c:07:12:e2:d6:f6:54:83:81: 1e:96:83:c5:86:95:79:06:1f:82:19:de:33:00:d0: 83:7f:5e:f4:d2:d2:54:2c:10:ab:6a:39:09:83:5b: 79:a9:76:8e:1b:ca:45:b7:91:68:3f:55:e4:97:b8: 8b:b1:20:df:86:4f:56:eb:72:e8:93:cd:99:08:88: 32:4e:0d:67:13:a4:27:0c:a8:31:1d:3f:38:af:9e: fd:87:29:d2:66:f7:94:2c:1d:99:20:60:55:01:ec: 6b:b8:41:d6:6e:ac:3b:c0:60:0a:be:36:6d:f2:64: 53:22:11:e6:ea:8e:e2:74:4e:03:c2:e4:f3:10:73: a9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141448 sbgp-ipAddrBlock: critical IPv4: 103.159.170.0/23 IPv6: 2406:d5c0::/32 Signature Algorithm: sha256WithRSAEncryption 22:20:2b:23:86:e9:e4:f5:2a:dd:c2:eb:77:71:de:44:97:26: 4e:e5:8c:42:0c:15:12:7f:4b:3b:d4:6e:58:dd:ec:2e:6e:cd: e3:be:bc:a8:fb:17:3c:d3:7f:fa:98:24:12:86:f1:f9:26:8b: 8e:9d:50:4c:f6:5b:87:71:03:55:33:4b:57:48:f8:7f:e9:c0: 3a:6f:f1:96:4d:ae:3c:37:8f:c0:cb:56:98:84:a5:1e:ad:d5: d9:04:b1:28:09:47:99:5f:0b:18:8c:7c:7c:7d:a2:2a:11:03: ff:1c:71:74:ec:6d:56:f9:f5:6f:db:35:9c:d0:27:79:fd:cd: d5:c3:97:a4:a8:f8:c2:ab:6d:ef:45:73:ca:f0:35:be:a2:22: dd:f7:e0:f1:d4:ed:03:22:bc:a8:66:31:7e:1b:59:a7:7e:9f: cc:d1:73:7b:76:ea:55:cd:0a:87:9c:49:06:bf:d8:40:89:13: 01:49:2a:88:07:34:9a:d6:80:f7:e2:af:9e:8d:c0:2b:77:a7: 0f:b7:2b:83:9d:da:14:c8:99:41:06:d1:60:51:6c:b8:29:4e: 19:76:41:d6:e3:cf:53:8a:6a:38:2e:27:f3:0d:bb:4a:a6:2b: 7e:c7:41:dc:b5:d6:f2:57:6c:0b:59:40:b5:36:ea:23:50:f6: cc:4d:32:f0 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoAPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMjEzMDkxM1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNUQ4NUUxMTAvBgNVBAUTKEQ0NTgwNTFGNkRBOTUyMjk3NDc1QjQ4 NEJEREQwRkJCRTM0OTBFNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSxR1empFJ4315q6mysaIZKLOaTanRW6x7hExDyf1jm267Spx3hW740ZAdgUDV wFa83+6LkSyK/VyXNmAi5QaB7rwzFaxJQey2domN3Qx0C6TJODiXXAEsZ/lupOUj LQNyfIdBDjUzbA0BrQDrCGQc1CFQz8Vh2298jvVPLpwHEuLW9lSDgR6Wg8WGlXkG H4IZ3jMA0IN/XvTS0lQsEKtqOQmDW3mpdo4bykW3kWg/VeSXuIuxIN+GT1brcuiT zZkIiDJODWcTpCcMqDEdPzivnv2HKdJm95QsHZkgYFUB7Gu4QdZurDvAYAq+Nm3y ZFMiEebqjuJ0TgPC5PMQc6nlAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU1FgFH22p Uil0dbSEvd0Pu+NJDnAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVEODVFLzczRUY5MDlDM0JCNTExRUJCNEQxMzc3REM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1RDg1RS83M0VGOTA5QzNCQjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIy cFVpbDBkYlNFdmQwUHUtTkpEbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiiIMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ5+qMA0EAgAC MAcDBQAkBtXAMA0GCSqGSIb3DQEBCwUAA4IBAQAiICsjhunk9Srdwut3cd5ElyZO 5YxCDBUSf0s71G5Y3ewubs3jvryo+xc803/6mCQShvH5JouOnVBM9luHcQNVM0tX SPh/6cA6b/GWTa48N4/Ay1aYhKUerdXZBLEoCUeZXwsYjHx8faIqEQP/HHF07G1W +fVv2zWc0Cd5/c3Vw5ekqPjCq23vRXPK8DW+oiLd9+Dx1O0DIryoZjF+G1mnfp/M 0XN7dupVzQqHnEkGv9hAiRMBSSqIBzSa1oD34q+ejcArd6cPtyuDndoUyJlBBtFg UWy4KU4ZdkHW489Timo4LifzDbtKpit+x0HctdbyV2wLWUC1NuojUPbMTTLw -----END CERTIFICATE-----Generated at Mon Dec 22 22:16:21 2025 by rpki-client