This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer File: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer (raw, json) Hash identifier: 0bmffltLRCMqUERbOxfZAFYl4CUBppJyaAyGOxF3WJI= Subject key identifier: 4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027FE5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft caRepository: rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 21 Dec 2025 13:14:04 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 149028 IP: 103.176.248.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163813 (0x27fe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 21 13:14:04 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A916C4BC, serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6f:aa:c3:0a:bf:c5:ac:d1:33:87:7b:d5:25: b7:9e:52:71:ad:67:59:31:61:2e:40:5b:db:9c:cd: 33:4e:80:45:f8:36:15:67:5a:e5:85:38:d9:1e:60: f8:f4:80:70:26:ed:4a:6f:92:e4:8d:93:9d:45:94: ae:9d:2a:9d:7b:c8:e1:68:e7:ae:a1:fe:68:20:8b: 11:c9:7d:9e:ee:da:fe:f5:43:b8:84:d0:2c:7f:13: e5:71:27:92:c4:75:e1:d2:8c:b8:85:6b:53:11:d3: e5:5e:66:2a:6a:5b:fa:d3:f1:ec:d5:13:cb:0a:dc: 1b:1c:28:aa:c8:88:a0:1e:5a:63:53:c3:bf:eb:24: 65:4c:66:5c:ac:78:7e:f7:7a:c2:41:d7:2c:05:db: 10:7d:fc:9e:8c:08:4d:d2:fc:19:64:83:c1:56:29: 40:36:a0:31:cf:22:98:28:da:a2:02:3b:a6:13:e2: 3e:92:c5:88:f1:66:e5:9f:db:37:42:38:e9:d4:54: 1a:f7:a5:d2:1e:c1:58:c9:5f:39:47:59:9e:61:1b: bc:cb:a0:13:3f:15:52:8d:15:e0:c1:3b:d4:75:a9: 2a:0d:0b:ff:65:1d:dc:c1:ec:ca:1a:23:15:11:66: 72:9a:7c:f7:d5:c3:12:1b:7f:30:bd:e3:ad:77:56: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 149028 sbgp-ipAddrBlock: critical IPv4: 103.176.248.0/23 Signature Algorithm: sha256WithRSAEncryption 35:27:b7:ab:d3:02:25:5b:5c:8c:d3:44:83:51:c9:c3:45:e6: f4:39:eb:73:f2:74:8a:d4:df:77:7d:1f:05:aa:18:da:cb:b7: 69:0c:ec:fa:27:d1:c5:c9:98:4f:06:b9:a9:ad:d0:1f:a7:e2: df:0b:9d:f6:2c:7f:b6:48:3c:ec:8f:cf:02:6c:72:d1:5c:36: 64:24:90:f6:db:86:b6:a4:14:85:af:d1:98:f3:38:81:56:b2: bc:2f:3a:ce:3b:5b:ad:3a:07:af:e9:27:de:c0:03:de:f0:5a: ae:f7:71:bc:64:ea:e0:39:fd:6c:77:4e:03:93:be:49:28:12: be:c6:62:d6:8e:c7:ff:4d:72:ff:e7:d8:ae:99:47:44:3b:23: 67:28:e9:1e:a9:ef:28:fd:e0:03:ae:06:c3:6f:cd:ca:aa:f8: 1d:86:79:63:9b:9f:32:14:9b:74:42:f5:8f:ed:6e:67:06:a7: fa:99:28:52:06:0c:67:54:6c:49:5c:ec:ea:99:b2:ee:5b:c5: 04:6a:3e:c9:c9:50:14:d9:bc:a1:a2:47:2b:ac:21:87:2b:2a: 4e:6b:44:db:ff:d3:e4:f6:aa:5e:78:f1:fb:e7:16:19:a7:bf: d0:3c:89:e1:66:41:4a:87:e2:c6:6e:44:a4:89:ed:19:d6:fb: 53:9f:87:ad -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAn/lMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMTEzMTQwNFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNkM0QkMxMTAvBgNVBAUTKDRERkVDMzQzN0M5MEJGNDE0RDA1MTg4 QjQ4MkM3ODQ4RTZGMzE2MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjb6rDCr/FrNEzh3vVJbeeUnGtZ1kxYS5AW9uczTNOgEX4NhVnWuWFONkeYPj0 gHAm7UpvkuSNk51FlK6dKp17yOFo566h/mggixHJfZ7u2v71Q7iE0Cx/E+VxJ5LE deHSjLiFa1MR0+VeZipqW/rT8ezVE8sK3BscKKrIiKAeWmNTw7/rJGVMZlyseH73 esJB1ywF2xB9/J6MCE3S/Blkg8FWKUA2oDHPIpgo2qICO6YT4j6SxYjxZuWf2zdC OOnUVBr3pdIewVjJXzlHWZ5hG7zLoBM/FVKNFeDBO9R1qSoNC/9lHdzB7MoaIxUR ZnKafPfVwxIbfzC94613VqdJAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUTf7DQ3yQ v0FNBRiLSCx4SObzFhswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZDNEJDL0E5NzBCMkVDNTFBQzExRUM5RUQ5MDQxQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2QzRCQy9BOTcwQjJFQzUxQUMxMUVDOUVEOTA0MUJDNEY5QUUwMi9UZjdEUTN5 UXYwRk5CUmlMU0N4NFNPYnpGaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkYkMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7D4MA0GCSqG SIb3DQEBCwUAA4IBAQA1J7er0wIlW1yM00SDUcnDReb0Oetz8nSK1N93fR8Fqhja y7dpDOz6J9HFyZhPBrmprdAfp+LfC532LH+2SDzsj88CbHLRXDZkJJD224a2pBSF r9GY8ziBVrK8LzrOO1utOgev6SfewAPe8Fqu93G8ZOrgOf1sd04Dk75JKBK+xmLW jsf/TXL/59iumUdEOyNnKOkeqe8o/eADrgbDb83Kqvgdhnljm58yFJt0QvWP7W5n Bqf6mShSBgxnVGxJXOzqmbLuW8UEaj7JyVAU2byhokcrrCGHKypOa0Tb/9Pk9qpe ePH75xYZp7/QPInhZkFKh+LGbkSkie0Z1vtTn4et -----END CERTIFICATE-----Generated at Wed Dec 24 12:19:21 2025 by rpki-client