This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer (raw, json) Hash identifier: yeWyYqhz8SXzOOSFZBL2KQ8T1RQB5cKKyDcB8q6cAY8= Subject key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02801F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 22 Dec 2025 14:07:30 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 149011 IP: 103.176.88.0/23 IP: 2001:df0:c40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163871 (0x2801f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 22 14:07:30 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:45:52:69:7a:9e:1d:ec:08:e2:b2:da:75:a4: 37:18:32:5f:a8:5d:b8:bd:06:53:86:dd:7d:57:fd: 86:e6:54:b1:eb:e6:cc:ef:28:c2:ae:cf:d4:11:d8: 0b:46:d3:2d:20:de:fe:c2:e4:27:d0:97:3c:46:e4: bc:7a:e6:7b:08:d5:bb:0f:90:58:b2:5b:ce:44:4f: c3:04:4a:e3:1e:82:f7:b0:52:72:6f:39:d1:2b:b4: fe:ae:79:8f:64:7c:2e:39:96:11:6b:23:9f:a1:64: de:77:b9:76:0b:b9:2b:f7:aa:99:9e:03:7a:47:e0: 8b:48:86:f0:c5:17:c3:61:70:c1:c7:b3:ce:cf:59: b8:df:c6:c0:d8:eb:9c:87:10:49:16:2b:31:13:8d: 34:df:cb:4e:5a:79:40:da:5b:25:9a:65:9a:f3:fe: 9b:13:8c:90:dd:d9:ad:53:7b:9d:9e:09:59:6d:90: e5:46:ad:2f:05:5f:03:77:88:22:ab:a0:47:b8:43: b6:f6:f3:23:ca:7b:87:af:b8:f9:b3:16:9e:1f:27: ad:4c:28:83:2b:7c:58:80:f5:cb:8d:70:3d:1f:5c: 5c:a8:d1:a4:37:f4:d1:1b:3f:9d:5d:35:15:1b:b3: 3a:e4:e9:6c:2f:4b:73:d3:97:5d:8a:8d:e5:00:83: bb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 149011 sbgp-ipAddrBlock: critical IPv4: 103.176.88.0/23 IPv6: 2001:df0:c40::/48 Signature Algorithm: sha256WithRSAEncryption 06:ec:dc:62:37:ab:43:97:dc:3d:67:aa:64:9c:24:9b:7d:36: 87:6e:94:a5:25:ce:c6:5b:d6:ba:a9:4b:d1:da:0d:88:32:25: 69:fd:e6:1c:73:e9:18:8b:5e:05:43:14:e5:7a:66:b9:dc:83: 6b:2c:ba:f5:22:d0:6b:32:ab:d6:ef:38:77:d2:f4:c6:57:bb: 7f:44:aa:52:4e:77:c1:ab:b6:2a:7e:28:40:2b:77:c8:72:c7: a3:63:41:82:3b:96:bb:aa:96:3b:d9:0d:9e:6e:2a:00:2a:a2: 21:f7:1b:88:2b:15:f1:f2:4a:3c:98:99:b1:99:1a:49:d0:3e: ee:95:ad:b9:b1:06:37:73:6b:c3:c3:13:e1:8b:be:93:a4:ea: 21:bb:74:f1:4c:6e:28:0a:cc:4f:8b:eb:e1:31:c0:ca:7e:b7: 17:f0:56:b9:2f:9f:8a:7c:ff:64:0f:4e:32:13:a8:dd:59:12: cd:75:f8:16:d6:b2:0f:0a:35:b7:23:15:2e:38:69:40:62:af: 1d:72:25:32:a9:a7:01:a9:c9:e8:1b:37:58:c3:a2:30:1b:7b: 43:8c:73:66:40:76:aa:90:5a:9a:a8:09:70:c9:5c:07:1f:6c: 30:a4:5d:1e:eb:c5:a0:72:0b:41:07:cb:de:06:41:2f:5a:08: 60:11:6c:c8 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoAfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMjE0MDczMFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxRDA2RkMxMTAvBgNVBAUTKDNFNUIzQ0FCOUYxNDFBMDZFQjgzMkU2 M0Y1ODZDQjBFNjY3NjA0MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjRVJpep4d7Ajistp1pDcYMl+oXbi9BlOG3X1X/YbmVLHr5szvKMKuz9QR2AtG 0y0g3v7C5CfQlzxG5Lx65nsI1bsPkFiyW85ET8MESuMegvewUnJvOdErtP6ueY9k fC45lhFrI5+hZN53uXYLuSv3qpmeA3pH4ItIhvDFF8NhcMHHs87PWbjfxsDY65yH EEkWKzETjTTfy05aeUDaWyWaZZrz/psTjJDd2a1Te52eCVltkOVGrS8FXwN3iCKr oEe4Q7b28yPKe4evuPmzFp4fJ61MKIMrfFiA9cuNcD0fXFyo0aQ39NEbP51dNRUb szrk6WwvS3PTl12KjeUAg7uLAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUPls8q58U Ggbrgy5j9YbLDmZ2BAIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQwNkZDL0FFRjIzMEUyOUVFQjExRUM4MDQ5QTI3RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEMDZGQy9BRUYyMzBFMjlFRUIxMUVDODA0OUEyN0ZDNEY5QUUwMi9QbHM4cTU4 VUdnYnJneTVqOVliTERtWjJCQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkYTMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ7BYMA8EAgAC MAkDBwAgAQ3wDEAwDQYJKoZIhvcNAQELBQADggEBAAbs3GI3q0OX3D1nqmScJJt9 NodulKUlzsZb1rqpS9HaDYgyJWn95hxz6RiLXgVDFOV6Zrncg2ssuvUi0Gsyq9bv OHfS9MZXu39EqlJOd8Grtip+KEArd8hyx6NjQYI7lruqljvZDZ5uKgAqoiH3G4gr FfHySjyYmbGZGknQPu6VrbmxBjdza8PDE+GLvpOk6iG7dPFMbigKzE+L6+ExwMp+ txfwVrkvn4p8/2QPTjITqN1ZEs11+BbWsg8KNbcjFS44aUBirx1yJTKppwGpyegb N1jDojAbe0OMc2ZAdqqQWpqoCXDJXAcfbDCkXR7rxaByC0EHy94GQS9aCGARbMg= -----END CERTIFICATE-----Generated at Wed Dec 24 12:20:08 2025 by rpki-client