This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer File: 4USmzKVqqTEokShNJidwYk784uw.cer (raw, json) Hash identifier: 0tQjN5F0yNRlEOL/IOtUHfCCBDe2d5fpqKP95cWCjDo= Subject key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0275C1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 17 Nov 2025 18:49:00 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 147304 IP: 103.48.252.0/22 IP: 103.174.170.0/23 IP: 2001:df7:cd80::/47 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 15:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161217 (0x275c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 17 18:49:00 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:41:39:3e:76:e6:46:0a:e4:80:f6:e6:0a: 45:c5:02:ea:e0:69:50:fe:c0:e1:ac:e3:0c:ce:a5: 48:61:db:f4:21:aa:6f:29:6c:22:1e:a8:e1:1c:14: e5:60:80:f6:b3:b5:00:4a:a8:32:19:0f:08:17:d2: 44:a8:cd:02:6a:80:7b:08:11:e9:78:47:bf:f2:24: 7c:62:a1:d8:7e:00:10:98:72:c6:bc:03:af:b8:a2: 35:f0:dc:26:0a:54:ab:60:ee:b3:33:a4:6c:4e:a6: 99:6d:43:ea:80:a8:2b:7b:c6:46:27:d7:cc:9d:a2: b3:4b:89:45:c6:f0:76:79:2b:86:35:ab:b7:87:b4: 70:39:22:68:4d:c7:a8:ff:e7:d1:32:ca:91:f7:2c: ae:e0:70:67:aa:87:22:91:79:ca:d2:6d:41:cb:0a: 57:e1:df:76:73:ef:25:1a:69:94:e4:ae:34:ba:d5: 90:4b:f5:ce:a1:4f:d4:03:52:af:b5:cf:6e:ec:5d: ec:8f:f9:09:29:f8:e9:58:25:a8:cf:d8:9c:f2:2f: 60:b0:90:b4:2f:53:f1:38:53:da:3c:28:da:19:39: 4b:24:f7:eb:08:2b:d6:4f:10:69:76:a2:35:c5:81: dd:ab:d4:e9:c6:c9:58:ab:9c:37:67:f5:35:58:58: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 147304 sbgp-ipAddrBlock: critical IPv4: 103.48.252.0/22 103.174.170.0/23 IPv6: 2001:df7:cd80::/47 Signature Algorithm: sha256WithRSAEncryption 87:30:49:4b:78:49:ab:86:07:ee:32:5a:59:8e:6b:53:fd:6c: a2:b2:00:e1:9d:32:cb:97:eb:e2:d9:65:90:22:8a:6f:60:8d: 3a:4e:58:71:38:86:2c:48:a0:1c:3e:55:ef:da:1d:97:7e:b8: ce:d1:fe:ed:d8:e5:7b:22:a7:77:2b:05:2e:ba:bd:1d:5f:1a: 53:c7:46:3b:13:84:6d:5d:6a:b2:6b:12:70:5a:cb:17:c8:76: 10:7a:30:f3:19:2d:b7:8d:6f:11:6b:72:10:0f:7e:5e:ce:2e: 9f:9b:ae:47:04:eb:2b:cf:0e:30:44:36:97:85:65:4d:a7:af: b8:de:33:4e:51:fa:2b:45:19:99:0b:1e:b7:cf:e3:dc:96:16: 08:06:03:1c:34:bc:0c:3e:b4:1c:10:51:c0:62:b7:69:d3:5c: de:55:92:e7:6b:a3:92:f2:5f:22:fb:54:56:e1:b8:20:b9:e3: 40:d8:48:bb:50:12:96:1f:c4:88:ba:2d:d5:cf:80:26:ac:c9: 5d:23:d0:d5:82:e2:92:a4:b2:7b:69:3a:9d:66:43:ac:18:35: cc:e5:23:22:14:23:12:3b:11:8e:86:27:55:5d:5f:3c:82:38: 85:58:05:31:24:68:ef:d9:5b:cb:3b:c8:bb:da:ce:9a:bc:c3: fd:54:81:2b -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIDAnXBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNzE4NDkwMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTM0OTMxMTAvBgNVBAUTKEUxNDRBNkNDQTU2QUE5MzEyODkxMjg0 RDI2Mjc3MDYyNEVGQ0UyRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+w0E5PnbmRgrkgPbmCkXFAurgaVD+wOGs4wzOpUhh2/Qhqm8pbCIeqOEcFOVg gPaztQBKqDIZDwgX0kSozQJqgHsIEel4R7/yJHxiodh+ABCYcsa8A6+4ojXw3CYK VKtg7rMzpGxOppltQ+qAqCt7xkYn18ydorNLiUXG8HZ5K4Y1q7eHtHA5ImhNx6j/ 59EyypH3LK7gcGeqhyKRecrSbUHLClfh33Zz7yUaaZTkrjS61ZBL9c6hT9QDUq+1 z27sXeyP+Qkp+OlYJajP2JzyL2CwkLQvU/E4U9o8KNoZOUsk9+sIK9ZPEGl2ojXF gd2r1OnGyVirnDdn9TVYWCCpAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQU4USmzKVq qTEokShNJidwYk784uwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUzNDkzLzQ5QTJFRTZDMzY4NTExRUM4MEY1MjAzNUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMzQ5My80OUEyRUU2QzM2ODUxMUVDODBGNTIwMzVDNEY5QUUwMi80VVNtektW cXFURW9rU2hOSmlkd1lrNzg0dXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAj9oMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCZzD8AwQBZ66q MA8EAgACMAkDBwEgAQ33zYAwDQYJKoZIhvcNAQELBQADggEBAIcwSUt4SauGB+4y WlmOa1P9bKKyAOGdMsuX6+LZZZAiim9gjTpOWHE4hixIoBw+Ve/aHZd+uM7R/u3Y 5Xsip3crBS66vR1fGlPHRjsThG1darJrEnBayxfIdhB6MPMZLbeNbxFrchAPfl7O Lp+brkcE6yvPDjBENpeFZU2nr7jeM05R+itFGZkLHrfP49yWFggGAxw0vAw+tBwQ UcBit2nTXN5Vkudro5LyXyL7VFbhuCC540DYSLtQEpYfxIi6LdXPgCasyV0j0NWC 4pKksntpOp1mQ6wYNczlIyIUIxI7EY6GJ1VdXzyCOIVYBTEkaO/ZW8s7yLvazpq8 w/1UgSs= -----END CERTIFICATE-----Generated at Wed Dec 3 17:16:34 2025 by rpki-client