This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer File: mZujdBECimL7UV3PAozaLcmrydE.cer (raw, json) Hash identifier: GILZU/OVyjKdu0FBtoUlwo/4I13TTY4rxwOiVQTN1Sw= Subject key identifier: 99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027AE5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft caRepository: rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 18:13:47 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 38813 IP: 103.104.80.0/22 IP: 111.118.208.0/22 IP: 202.150.60.0/23 IP: 2400:f8e0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162533 (0x27ae5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 18:13:47 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9184359, serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:a1:b2:74:41:24:03:fa:26:a6:6a:5b:af: 21:4d:31:b5:ca:25:1a:7f:c5:b9:08:71:6c:5d:eb: a1:f0:92:87:a5:83:a5:4b:73:8a:0b:48:12:53:6c: d4:1a:97:77:db:1e:b8:e7:e0:53:40:a9:9d:c9:48: 5b:9b:ea:1d:aa:df:e0:94:17:b7:31:a1:97:c7:07: 9b:e9:20:35:59:b4:f3:5e:41:2d:ef:9a:14:45:92: 72:15:61:85:9f:13:a5:3f:22:fd:c4:db:dd:f6:d6: d1:94:9a:1b:65:d6:fe:6c:ef:39:29:ab:d2:3c:98: 91:c3:f1:71:45:04:38:fe:cd:35:13:1d:57:67:e0: 5a:50:a3:c8:9c:de:0c:65:11:6d:c9:4c:5f:79:c1: 5a:e2:2a:96:a3:18:15:b1:36:a4:62:e0:a1:46:f4: 3d:cd:67:63:95:1b:c0:54:8c:f8:6b:09:0b:e1:54: 8c:10:e7:11:4b:99:e3:da:08:e2:40:93:1e:16:c6: 62:79:06:40:ec:67:e5:b6:a1:ec:27:d2:80:9d:5f: 28:b7:cf:3e:e9:61:78:95:cc:c3:ca:aa:65:3e:a6: c3:ee:24:86:ce:cf:eb:dd:b7:d0:40:c4:ec:43:dd: d8:08:74:46:51:a2:cc:71:72:3c:1f:5c:14:03:2c: 18:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38813 sbgp-ipAddrBlock: critical IPv4: 103.104.80.0/22 111.118.208.0/22 202.150.60.0/23 IPv6: 2400:f8e0::/32 Signature Algorithm: sha256WithRSAEncryption 87:fb:f0:a4:78:ca:03:8d:c2:73:fa:a3:ab:6d:d5:e4:df:da: 41:0b:b7:c8:b3:fd:9c:b0:b9:2f:56:8f:07:3a:02:64:69:d0: 5d:8a:e6:e0:cf:c7:74:f9:0e:dd:19:09:3b:5a:9b:95:96:63: 09:1d:af:44:be:7a:31:cc:d0:e8:bf:52:1a:68:09:d5:4b:23: a4:4d:06:ae:7c:19:90:1b:05:9f:b3:89:6d:3f:dd:fc:e2:91: 70:60:78:72:17:61:a3:b4:ed:3b:3c:a8:a4:89:b2:aa:58:0a: 7a:30:9d:51:f3:84:3c:b3:2d:26:70:6d:c6:50:cd:8b:97:bb: 14:31:45:92:5d:ab:c7:8a:85:80:d6:ce:fa:01:e8:39:df:3c: a8:37:bc:fa:b2:8a:b9:7c:74:bd:ea:88:be:c8:09:2c:a6:28: f4:8f:12:61:b3:bb:fb:66:a4:33:29:5e:13:47:04:54:ed:f8: 91:fd:d6:ff:3d:6b:fc:15:2f:dd:e3:ab:d1:24:cb:6a:9a:1e: 21:db:94:01:7c:ef:ab:76:82:97:81:77:10:54:4c:b0:22:8a: 39:dd:f4:7d:39:c7:32:04:1b:52:7b:2b:80:e2:7b:db:c4:10: fd:71:54:4e:86:79:a2:cd:e9:ca:7e:83:42:9b:cd:0f:df:cd: 60:45:7d:2a -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIDAnrlMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjE4MTM0N1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxODQzNTkxMTAvBgNVBAUTKDk5OUJBMzc0MTEwMjhBNjJGQjUxNURD RjAyOENEQTJEQzlBQkM5RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIFaGydEEkA/ompmpbryFNMbXKJRp/xbkIcWxd66Hwkoelg6VLc4oLSBJTbNQa l3fbHrjn4FNAqZ3JSFub6h2q3+CUF7cxoZfHB5vpIDVZtPNeQS3vmhRFknIVYYWf E6U/Iv3E29321tGUmhtl1v5s7zkpq9I8mJHD8XFFBDj+zTUTHVdn4FpQo8ic3gxl EW3JTF95wVriKpajGBWxNqRi4KFG9D3NZ2OVG8BUjPhrCQvhVIwQ5xFLmePaCOJA kx4WxmJ5BkDsZ+W2oewn0oCdXyi3zz7pYXiVzMPKqmU+psPuJIbOz+vdt9BAxOxD 3dgIdEZRosxxcjwfXBQDLBgdAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQUmZujdBEC imL7UV3PAozaLcmrydEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg0MzU5LzMzNUU2NTYyRTRDODExRURCQUFCQzU1Q0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4NDM1OS8zMzVFNjU2MkU0QzgxMUVEQkFBQkM1NUNDNEY5QUUwMi9tWnVqZEJF Q2ltTDdVVjNQQW96YUxjbXJ5ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAJedMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCZ2hQAwQCb3bQ AwQBypY8MA0EAgACMAcDBQAkAPjgMA0GCSqGSIb3DQEBCwUAA4IBAQCH+/CkeMoD jcJz+qOrbdXk39pBC7fIs/2csLkvVo8HOgJkadBdiubgz8d0+Q7dGQk7WpuVlmMJ Ha9EvnoxzNDov1IaaAnVSyOkTQaufBmQGwWfs4ltP9384pFwYHhyF2GjtO07PKik ibKqWAp6MJ1R84Q8sy0mcG3GUM2Ll7sUMUWSXavHioWA1s76Aeg53zyoN7z6soq5 fHS96oi+yAkspij0jxJhs7v7ZqQzKV4TRwRU7fiR/db/PWv8FS/d46vRJMtqmh4h 25QBfO+rdoKXgXcQVEywIoo53fR9OccyBBtSeyuA4nvbxBD9cVROhnmizenKfoNC m80P381gRX0q -----END CERTIFICATE-----Generated at Wed Dec 24 12:21:19 2025 by rpki-client