This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer (raw, json) Hash identifier: XKpgia5EPrSLupWps6dAmq7jCproQI+/HjbBkLkLIOw= Subject key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028036 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 23 Dec 2025 01:18:20 +0000 Certificate not after: Thu 28 May 2026 00:00:00 +0000 Subordinate resources: AS: 138619 IP: 103.134.202.0/23 IP: 2001:df6:7bc0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 20:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163894 (0x28036) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 23 01:18:20 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:70:24:de:33:0c:9c:8b:12:e1:87:59:12: cf:e7:55:23:f6:e3:45:0a:22:7a:14:e5:0b:ac:9d: 07:18:4e:98:e2:04:dd:7b:80:36:60:33:2f:84:23: ff:07:97:99:a8:86:7f:d1:de:a6:80:9d:b1:2c:1f: 46:17:af:6c:91:ce:1f:d0:05:95:8a:0e:a6:c3:3f: f7:fd:2a:4d:8b:99:b9:a7:7f:6b:7f:2f:d2:14:fe: 05:91:01:07:69:c2:3e:4e:a2:0c:75:b7:b6:18:09: 90:6f:ea:d4:87:91:3d:cf:e0:53:c6:9d:80:d3:6e: e1:ea:57:4f:7c:b9:c0:22:4d:b7:f3:84:cd:d5:66: 54:31:63:91:29:f3:27:80:50:97:47:7e:76:d5:96: df:8d:75:0a:41:e4:e2:2c:b1:e4:94:13:68:53:3a: ef:4d:e5:23:75:28:8a:e9:f8:0c:ae:43:93:9b:b2: 57:ce:fa:b4:44:62:da:ca:68:e9:a8:b1:0a:9e:c3: 21:e0:fc:cd:c5:e2:e9:d2:c8:cd:9d:02:57:28:57: 41:16:33:d3:db:fc:17:96:b3:28:5b:7f:cb:d5:cd: e0:a3:c3:79:92:c5:34:1d:e2:b9:03:6c:46:f4:1d: 50:79:92:24:76:3f:13:49:69:04:3d:db:6c:de:8a: 61:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138619 sbgp-ipAddrBlock: critical IPv4: 103.134.202.0/23 IPv6: 2001:df6:7bc0::/48 Signature Algorithm: sha256WithRSAEncryption 2b:58:b1:4d:3e:d0:c9:65:0d:c5:57:43:21:c2:a6:6f:c7:b8: 32:a7:ec:70:f0:ba:e9:34:b7:15:6f:d5:ff:0c:5b:37:54:93: a6:d3:1a:ea:a5:b3:76:34:2e:7e:d5:28:f9:8b:5e:b5:f3:96: 52:e2:8f:1e:91:7d:2b:82:8e:94:2a:c7:dc:81:82:0f:e3:05: 69:ff:9f:b5:48:2e:70:4f:df:2a:2a:0c:05:e8:d5:4d:81:61: 32:43:d7:73:f1:9d:49:d9:94:4c:16:a8:f3:8c:d5:06:e5:10: ba:9a:1e:30:fb:aa:1f:1d:8c:b6:cd:63:8a:71:d9:32:31:96: 81:11:fc:42:cd:c5:96:ad:ca:3d:7a:1f:6e:8d:dc:03:79:e6: 2f:c5:74:1b:ef:86:83:be:e7:86:68:c0:bc:b2:58:37:08:fc: 30:28:14:9c:2e:b8:f5:95:d1:22:31:7b:d0:a2:cb:5a:1c:de: 8d:0c:05:2b:97:33:8b:3d:97:62:94:0c:af:24:8f:aa:be:33: 5a:f7:6d:31:a2:09:05:92:c2:7f:fb:2a:84:fa:8d:ee:ce:cb: bd:c0:8d:02:4e:c5:1e:af:f7:49:74:22:9d:5b:54:4b:cd:6e: 77:2e:77:81:d9:81:7a:28:2a:02:fb:08:f1:a9:95:0c:4a:0e: 72:03:0b:14 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoA2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMzAxMTgyMFoXDTI2MDUyODAwMDAwMFowRjERMA8G A1UEAwwIQTkxQjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1 QjQwNkQ1OEFGRjc5RDFFMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw0nAk3jMMnIsS4YdZEs/nVSP240UKInoU5QusnQcYTpjiBN17gDZgMy+EI/8H l5mohn/R3qaAnbEsH0YXr2yRzh/QBZWKDqbDP/f9Kk2Lmbmnf2t/L9IU/gWRAQdp wj5Oogx1t7YYCZBv6tSHkT3P4FPGnYDTbuHqV098ucAiTbfzhM3VZlQxY5Ep8yeA UJdHfnbVlt+NdQpB5OIsseSUE2hTOu9N5SN1KIrp+AyuQ5ObslfO+rREYtrKaOmo sQqewyHg/M3F4unSyM2dAlcoV0EWM9Pb/BeWsyhbf8vVzeCjw3mSxTQd4rkDbEb0 HVB5kiR2PxNJaQQ922zeimExAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUF4F8uCiS MbRwfp1bQG1Yr/edHgEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI1MDczLzQzRjE2MjY0MzM5NTExRTlCRkIxQzIxQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNp U01iUndmcDFiUUcxWXJfZWRIZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAh17MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ4bKMA8EAgAC MAkDBwAgAQ32e8AwDQYJKoZIhvcNAQELBQADggEBACtYsU0+0MllDcVXQyHCpm/H uDKn7HDwuuk0txVv1f8MWzdUk6bTGuqls3Y0Ln7VKPmLXrXzllLijx6RfSuCjpQq x9yBgg/jBWn/n7VILnBP3yoqDAXo1U2BYTJD13PxnUnZlEwWqPOM1QblELqaHjD7 qh8djLbNY4px2TIxloER/ELNxZatyj16H26N3AN55i/FdBvvhoO+54ZowLyyWDcI /DAoFJwuuPWV0SIxe9Ciy1oc3o0MBSuXM4s9l2KUDK8kj6q+M1r3bTGiCQWSwn/7 KoT6je7Oy73AjQJOxR6v90l0Ip1bVEvNbncud4HZgXooKgL7CPGplQxKDnIDCxQ= -----END CERTIFICATE-----Generated at Wed Dec 24 00:15:16 2025 by rpki-client