This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer File: oTW4FOHrHifJWX7tLoIoVJMNP88.cer (raw, json) Hash identifier: bTTfPfKCiXnYETsR4XRSqTUtbaAUDEmUu4oCvxdpsz8= Subject key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02806A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft caRepository: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 23 Dec 2025 13:43:53 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 133883 AS: 153318 IP: 45.115.119.0/24 IP: 103.44.221.0/24 IP: 103.57.17.0 -- 103.57.19.255 IP: 202.6.80.0/24 IP: 203.153.208.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163946 (0x2806a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 23 13:43:53 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9197390, serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2b:fa:1f:a4:82:db:56:55:e2:e7:7b:21:f7: 5f:11:31:57:a0:1a:85:5b:b6:98:b0:18:2b:0d:29: 65:f5:72:1e:c2:32:56:f3:04:65:0e:7e:e8:8f:1a: f5:d5:55:04:0c:73:f2:7c:4a:24:bf:40:c5:d0:cf: c3:b5:02:58:81:95:31:85:90:73:95:e0:3e:c7:c1: 69:21:e3:24:5f:f5:7d:ec:3b:0a:5b:26:43:ef:02: a6:3c:e8:92:5b:e5:94:a8:2a:46:4b:00:ac:47:b7: 39:0c:e7:7c:9a:10:5a:57:1f:ec:af:d9:ac:3e:04: cb:93:a7:4c:40:e1:c5:c9:57:2f:af:90:dd:63:75: 76:92:2f:92:b5:38:42:13:1b:f3:54:29:81:10:f1: 4b:5f:42:fb:f9:aa:90:97:b2:8e:5a:f5:55:6d:ff: c1:be:7a:ba:20:0e:40:aa:e9:b4:84:5f:7a:5c:d0: d4:1e:49:d4:52:02:08:40:64:57:47:f2:52:49:af: 66:f5:c5:63:fa:80:a2:ec:cf:00:b6:da:e7:92:d0: 56:e4:b5:5f:de:83:f1:ef:17:b6:2c:cc:96:64:79: 86:ed:49:56:96:32:9f:01:cd:b5:6e:b8:68:c3:12: ec:1d:4f:bb:08:ce:2f:09:0d:ce:cf:da:9f:e4:2c: cf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133883 153318 sbgp-ipAddrBlock: critical IPv4: 45.115.119.0/24 103.44.221.0/24 103.57.17.0-103.57.19.255 202.6.80.0/24 203.153.208.0/23 Signature Algorithm: sha256WithRSAEncryption c7:85:4c:d7:f5:f9:aa:d2:fd:44:e5:1e:95:ad:b2:d4:48:d7: 60:43:e0:6a:29:78:f7:83:ce:95:f0:3a:0a:8c:5a:ca:6a:b0: dc:84:da:ef:dd:cb:92:6c:f8:38:b5:96:e4:5e:b0:79:8c:e6: 97:d8:2b:4b:f8:8b:8a:59:c2:f3:33:b7:c5:1e:0a:10:8a:c1: 14:5f:76:3f:e6:da:c4:2c:ae:53:c8:89:8a:59:60:2b:0a:b3: b2:f2:24:49:83:34:a9:9b:76:05:b8:06:2b:a5:a3:b6:fd:b2: 65:75:15:3a:ce:63:ff:e2:01:5d:64:e4:b6:84:59:1d:23:b6: 3e:0b:76:60:d8:b3:80:2b:8e:1a:f7:f2:94:2b:ed:1a:45:18: 3b:dc:ed:e8:a8:68:23:d5:36:f3:bd:64:94:57:dd:9a:d8:10: 05:de:a3:83:7a:2b:22:04:0b:10:21:58:a9:4d:72:fd:3b:b0: 65:24:3c:b0:27:d5:10:e5:10:00:d5:fd:06:d3:09:22:51:cf: 30:27:28:5a:7c:e8:3b:7a:82:cf:51:5f:2d:3f:25:ea:85:62: e9:83:61:6d:4f:8f:ce:a8:5c:d0:e9:a2:80:86:f8:70:15:d6: 34:ff:63:b3:8d:ad:2c:74:7a:40:fb:89:81:fc:37:27:ff:3c: a0:17:de:8a -----BEGIN CERTIFICATE----- MIIGPzCCBSegAwIBAgIDAoBqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMzEzNDM1M1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxOTczOTAxMTAvBgNVBAUTKEExMzVCODE0RTFFQjFFMjdDOTU5N0VF RDJFODIyODU0OTMwRDNGQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLK/ofpILbVlXi53sh918RMVegGoVbtpiwGCsNKWX1ch7CMlbzBGUOfuiPGvXV VQQMc/J8SiS/QMXQz8O1AliBlTGFkHOV4D7HwWkh4yRf9X3sOwpbJkPvAqY86JJb 5ZSoKkZLAKxHtzkM53yaEFpXH+yv2aw+BMuTp0xA4cXJVy+vkN1jdXaSL5K1OEIT G/NUKYEQ8UtfQvv5qpCXso5a9VVt/8G+erogDkCq6bSEX3pc0NQeSdRSAghAZFdH 8lJJr2b1xWP6gKLszwC22ueS0FbktV/eg/HvF7YszJZkeYbtSVaWMp8BzbVuuGjD EuwdT7sIzi8JDc7P2p/kLM/pAgMBAAGjggM0MIIDMDAdBgNVHQ4EFgQUoTW4FOHr HifJWX7tLoIoVJMNP88wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk3MzkwL0QyQzdFNzE2M0U3QTExRUVBOTc3RDYyMEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5NzM5MC9EMkM3RTcxNjNFN0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9I ckhpZkpXWDd0TG9Jb1ZKTU5QODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAgr7AgMCVuYwPwYIKwYBBQUHAQcBAf8EMDAuMCwEAgABMCYDBAAtc3cD BABnLN0wDAMEAGc5EQMEAmc5EAMEAMoGUAMEAcuZ0DANBgkqhkiG9w0BAQsFAAOC AQEAx4VM1/X5qtL9ROUela2y1EjXYEPgail494POlfA6Coxaymqw3ITa793Lkmz4 OLWW5F6weYzml9grS/iLilnC8zO3xR4KEIrBFF92P+baxCyuU8iJillgKwqzsvIk SYM0qZt2BbgGK6Wjtv2yZXUVOs5j/+IBXWTktoRZHSO2Pgt2YNizgCuOGvfylCvt GkUYO9zt6KhoI9U2871klFfdmtgQBd6jg3orIgQLECFYqU1y/TuwZSQ8sCfVEOUQ ANX9BtMJIlHPMCcoWnzoO3qCz1FfLT8l6oVi6YNhbU+Pzqhc0OmigIb4cBXWNP9j s42tLHR6QPuJgfw3J/88oBfeig== -----END CERTIFICATE-----Generated at Wed Dec 24 12:24:35 2025 by rpki-client