This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer File: SyWxRyDwREuz1mj5Y1hDVPf6whM.cer (raw, json) Hash identifier: oUZBwGslyf9SJVqS8/i7sW1yGXIzwI3q8HIQ7mqnWUY= Subject key identifier: 4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028043 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft caRepository: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 23 Dec 2025 03:12:23 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 149018 IP: 103.88.89.0/24 IP: 103.176.118.0/24 IP: 2001:df0:d40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163907 (0x28043) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 23 03:12:23 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91650EA, serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:ea:7a:01:11:95:8b:da:92:5b:40:a8:4e: c4:12:40:7e:bf:2e:06:47:40:0b:8a:0f:5f:a3:63: f9:23:27:fb:46:4e:20:91:b9:94:ff:c9:01:c5:d0: ba:1d:79:1a:04:26:f9:72:21:a8:76:a4:34:69:af: 04:74:bc:e2:8a:bf:4b:c9:12:fc:a9:92:3c:1e:87: 5f:a6:d5:fb:f6:45:07:f1:c1:0d:27:30:7c:5b:c8: 84:af:50:e8:96:17:74:80:96:ed:c5:46:30:dc:1e: 71:bb:37:f6:ae:fe:90:bc:e3:5f:7f:b7:e5:35:bb: 77:c7:43:8f:74:91:1f:6e:0c:a5:ce:5c:37:6f:e0: a6:af:24:52:f5:94:15:b3:5f:5f:23:55:c9:29:96: 8f:cb:a5:a5:12:1a:84:d3:53:a7:32:7e:6a:97:ce: b4:52:2b:ce:77:33:86:7f:c2:28:f6:99:a4:bf:b8: e6:a9:9d:56:aa:00:73:5f:76:79:44:86:cd:81:3b: 48:bd:25:8d:73:e9:82:e4:7e:44:31:38:d0:b5:82: 55:eb:ac:f8:ed:79:61:33:97:fc:49:00:6f:bf:12: b2:9d:7a:1d:7b:3a:35:91:64:65:50:13:86:02:c6: 11:5f:64:c2:e3:3b:86:da:3d:57:ed:8b:15:be:e5: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 149018 sbgp-ipAddrBlock: critical IPv4: 103.88.89.0/24 103.176.118.0/24 IPv6: 2001:df0:d40::/48 Signature Algorithm: sha256WithRSAEncryption 6f:8a:4c:0c:5e:c8:73:ca:cb:62:22:4b:39:dc:bc:27:4c:08: dc:de:48:55:43:f6:37:28:87:0e:de:48:5b:fd:4a:a2:21:9e: ce:44:fa:ac:59:74:f7:79:d6:be:94:9b:6c:da:e1:c8:ce:c9: a6:b6:51:da:9a:0e:0e:be:a6:21:2d:5f:e1:f2:f0:61:48:bc: 06:92:50:8e:a7:df:9f:ea:ad:7b:87:7f:82:97:88:dd:84:dd: 0e:79:d6:9a:28:22:0a:c7:6f:bb:02:f4:86:2b:10:fe:63:a3: 0a:f6:a3:f0:88:24:d5:8f:fa:85:aa:b1:76:a8:cf:1d:52:1e: 50:fa:d7:10:b1:48:b7:2c:6e:05:bc:2d:94:e3:f2:e4:a6:28: 54:99:41:b3:eb:f3:25:77:90:34:f7:2c:d4:41:fe:92:a8:f3: 2f:5b:5d:23:5c:22:cf:27:2d:75:5f:90:58:90:c2:a4:a4:3c: 96:1e:3e:4f:6b:81:4d:77:0c:1a:30:36:d3:85:d4:0f:ac:20: 38:fc:4c:11:e2:58:ab:7a:ff:32:13:4d:93:ec:8e:88:b0:24: 48:26:59:39:39:a0:57:a3:19:2a:62:7b:63:7b:8d:3b:a6:e7: cb:fd:c0:89:14:54:9e:5b:3d:7f:76:8f:fe:15:cf:33:60:c9: 24:ad:0b:d8 -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIDAoBDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMzAzMTIyM1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNjUwRUExMTAvBgNVBAUTKDRCMjVCMTQ3MjBGMDQ0NEJCM0Q2NjhG OTYzNTg0MzU0RjdGQUMyMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFIup6ARGVi9qSW0CoTsQSQH6/LgZHQAuKD1+jY/kjJ/tGTiCRuZT/yQHF0Lod eRoEJvlyIah2pDRprwR0vOKKv0vJEvypkjweh1+m1fv2RQfxwQ0nMHxbyISvUOiW F3SAlu3FRjDcHnG7N/au/pC8419/t+U1u3fHQ490kR9uDKXOXDdv4KavJFL1lBWz X18jVckplo/LpaUSGoTTU6cyfmqXzrRSK853M4Z/wij2maS/uOapnVaqAHNfdnlE hs2BO0i9JY1z6YLkfkQxONC1glXrrPjteWEzl/xJAG+/ErKdeh17OjWRZGVQE4YC xhFfZMLjO4baPVftixW+5TDRAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQUSyWxRyDw REuz1mj5Y1hDVPf6whMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY1MEVBLzUyMUQxQUQ4RDc2NzExRUVBRjIyQzA2NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2NTBFQS81MjFEMUFEOEQ3NjcxMUVFQUYyMkMwNjZDNEY5QUUwMi9TeVd4UnlE d1JFdXoxbWo1WTFoRFZQZjZ3aE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkYaMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAZ1hZAwQAZ7B2 MA8EAgACMAkDBwAgAQ3wDUAwDQYJKoZIhvcNAQELBQADggEBAG+KTAxeyHPKy2Ii SzncvCdMCNzeSFVD9jcohw7eSFv9SqIhns5E+qxZdPd51r6Um2za4cjOyaa2Udqa Dg6+piEtX+Hy8GFIvAaSUI6n35/qrXuHf4KXiN2E3Q551pooIgrHb7sC9IYrEP5j owr2o/CIJNWP+oWqsXaozx1SHlD61xCxSLcsbgW8LZTj8uSmKFSZQbPr8yV3kDT3 LNRB/pKo8y9bXSNcIs8nLXVfkFiQwqSkPJYePk9rgU13DBowNtOF1A+sIDj8TBHi WKt6/zITTZPsjoiwJEgmWTk5oFejGSpie2N7jTum58v9wIkUVJ5bPX92j/4VzzNg ySStC9g= -----END CERTIFICATE-----Generated at Wed Dec 24 12:24:27 2025 by rpki-client