This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer File: HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer (raw, json) Hash identifier: Hy9X8l66QOpSSmxhHlv2sG/5dxrBzUwMJfXL48y0vts= Subject key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B30 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 06:21:09 +0000 Certificate not after: Mon 31 Aug 2026 00:00:00 +0000 Subordinate resources: AS: 132304 IP: 103.99.23.0/24 IP: 103.108.2.0/23 IP: 103.108.8.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 18:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162608 (0x27b30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 06:21:09 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2b:58:83:73:5c:66:e4:56:b9:b8:d2:74:6f: 54:49:13:7d:af:17:1d:3e:f7:a4:30:0d:f5:77:da: 45:45:79:07:ae:db:4b:32:eb:01:f2:0c:b1:cf:15: a5:4f:d4:00:e9:03:05:57:9e:b5:05:ba:c7:05:ce: f0:55:bb:34:d0:8d:f5:69:c6:9a:e3:e2:aa:ca:b5: cc:c9:6a:2e:d9:28:17:55:20:e8:10:2c:7a:0c:93: ca:c6:37:6d:0a:73:cc:86:f3:d6:f2:6d:a6:31:e5: f9:34:26:7a:22:4a:dc:81:81:e1:5f:26:ca:5b:f1: d3:b2:20:ca:99:43:ee:63:a4:2c:cb:6c:47:8a:3b: e9:a7:60:99:73:de:73:ca:b7:48:cf:1e:5f:1a:a5: a3:57:4f:e5:7b:7c:cf:6c:c3:d6:e0:9a:ba:bf:1c: 65:ba:ce:ed:27:40:53:a4:17:b2:9e:55:c1:5b:c8: 12:85:6f:6a:0a:82:9d:9c:91:52:85:ff:f4:22:7c: 34:f2:49:af:4f:57:9c:bc:12:81:14:8a:a7:03:90: 8e:86:c6:46:f7:fc:28:c7:4a:21:6e:31:20:ee:87: 37:94:4f:f3:5d:37:dc:27:2c:c3:7b:6b:98:bf:a8: b7:e9:36:b1:0a:4d:14:69:75:75:35:74:b0:2c:a1: 67:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 132304 sbgp-ipAddrBlock: critical IPv4: 103.99.23.0/24 103.108.2.0/23 103.108.8.0/24 Signature Algorithm: sha256WithRSAEncryption b1:58:f3:f6:53:e9:06:03:00:98:fc:a9:fc:87:3f:e0:28:9a: 3c:94:9b:cf:b5:06:45:27:ae:e6:8c:70:fd:f4:d9:3c:f4:2d: cb:c2:1c:7e:52:ae:5f:da:f9:c2:d7:da:0a:0b:b7:6f:d2:05: 79:7a:52:34:bc:4c:4d:f8:cd:e7:a1:85:14:ec:25:79:69:20: 0b:6e:97:cc:2f:c4:81:86:32:02:de:ab:a1:37:ee:41:29:2a: d6:69:01:73:d8:f3:f7:83:58:ea:a4:63:00:23:d5:2f:fb:d2: 15:4a:82:7a:8f:24:2d:a4:83:b4:04:44:09:7d:df:de:05:18: d6:76:92:d8:46:56:a1:71:0e:cf:a0:f1:6b:15:e6:b0:bd:09: f6:ab:f6:90:6b:95:5e:15:3d:c6:4a:6a:15:50:84:7c:2d:27: 01:4a:3b:4c:6e:62:8d:dc:49:c3:ba:b1:d2:13:db:d3:3f:89: 5b:f9:c5:ea:bf:1b:ed:9f:2a:71:f9:1b:ae:12:bb:a1:34:44: 15:ea:bd:6d:26:a7:50:92:48:b1:8a:b0:21:10:61:00:f6:f9: 7d:73:87:0b:22:c9:38:37:00:f8:5d:9e:46:8a:ac:a9:14:53: 37:15:d9:6b:1f:66:6f:a6:40:19:16:e6:53:2a:3f:8b:99:27: e1:98:66:a7 -----BEGIN CERTIFICATE----- MIIGJjCCBQ6gAwIBAgIDAnswMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzA2MjEwOVoXDTI2MDgzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjM4MDUxMTAvBgNVBAUTKDFFNTMwRkE5RjY2MEE4REMxNzM4QzdB QTBDOEFGQzc3RjRGMEJCQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgK1iDc1xm5Fa5uNJ0b1RJE32vFx0+96QwDfV32kVFeQeu20sy6wHyDLHPFaVP 1ADpAwVXnrUFuscFzvBVuzTQjfVpxprj4qrKtczJai7ZKBdVIOgQLHoMk8rGN20K c8yG89bybaYx5fk0JnoiStyBgeFfJspb8dOyIMqZQ+5jpCzLbEeKO+mnYJlz3nPK t0jPHl8apaNXT+V7fM9sw9bgmrq/HGW6zu0nQFOkF7KeVcFbyBKFb2oKgp2ckVKF //QifDTySa9PV5y8EoEUiqcDkI6Gxkb3/CjHSiFuMSDuhzeUT/NdN9wnLMN7a5i/ qLfpNrEKTRRpdXU1dLAsoWf1AgMBAAGjggMbMIIDFzAdBgNVHQ4EFgQUHlMPqfZg qNwXOMeqDIr8d/Twu7MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYzODA1LzQwMEM1REVDRDAxMDExRjA5RjBERDgxQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGMzgwNS80MDBDNURFQ0QwMTAxMUYwOUYwREQ4MUNDNEY5QUUwMi9IbE1QcWZa Z3FOd1hPTWVxRElyOGRfVHd1N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgTQMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAZ2MXAwQBZ2wC AwQAZ2wIMA0GCSqGSIb3DQEBCwUAA4IBAQCxWPP2U+kGAwCY/Kn8hz/gKJo8lJvP tQZFJ67mjHD99Nk89C3Lwhx+Uq5f2vnC19oKC7dv0gV5elI0vExN+M3noYUU7CV5 aSALbpfML8SBhjIC3quhN+5BKSrWaQFz2PP3g1jqpGMAI9Uv+9IVSoJ6jyQtpIO0 BEQJfd/eBRjWdpLYRlahcQ7PoPFrFeawvQn2q/aQa5VeFT3GSmoVUIR8LScBSjtM bmKN3EnDurHSE9vTP4lb+cXqvxvtnypx+RuuEruhNEQV6r1tJqdQkkixirAhEGEA 9vl9c4cLIsk4NwD4XZ5GiqypFFM3FdlrH2ZvpkAZFuZTKj+LmSfhmGan -----END CERTIFICATE-----Generated at Fri Dec 5 20:11:33 2025 by rpki-client