This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer File: NCaEGmQGa3hlW77KDAH9CfZXBTY.cer (raw, json) Hash identifier: ze/wQadHIH7aj5KkspqUjStBRWDgnihQGgjBMKZ3kDw= Subject key identifier: 34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4EE4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft caRepository: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 13:05:21 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 51356 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 02:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20196 (0x4ee4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Dec 19 13:05:21 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9157DAE, serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b4:1c:72:c3:5e:7e:d9:d2:ce:d3:2c:e6:81: dd:cc:89:3d:2c:e4:f9:a1:f0:98:af:f1:de:e9:42: 83:22:25:07:90:11:7f:fa:b8:96:7e:13:6b:72:ad: fb:e6:ec:5b:93:02:da:76:10:76:ec:c1:67:d3:de: 9e:d5:d7:db:83:e7:63:63:b8:c5:64:ce:8d:25:8e: cc:35:d5:1d:5b:01:2d:d7:80:f4:da:02:98:dc:db: 54:18:29:ae:a3:05:1c:d0:ed:72:3c:48:c3:0b:c8: 02:d0:34:8c:dc:01:0a:77:7d:7c:e0:d4:de:25:64: 52:55:d1:80:03:9c:35:d8:c4:0b:81:b0:22:f9:9e: f4:f4:2b:dc:61:d3:5a:c1:80:97:3b:98:a3:73:96: 0f:49:e2:47:c2:91:bd:6d:f3:1b:20:8b:0a:90:a4: f2:62:f8:5b:cd:a8:24:4d:9c:e9:f5:be:71:db:c0: df:d9:7e:49:83:9c:fd:02:85:6d:14:73:b7:1b:6d: 34:05:03:87:3c:5a:78:f8:e3:f4:78:5b:ed:e4:24: 38:ef:4a:82:48:00:34:fe:c0:1a:94:5e:c3:88:6a: 1c:66:1c:cf:35:c8:e2:1d:c0:90:3f:71:b4:b2:06: 67:03:02:d6:31:56:06:bf:9d:59:db:f6:d6:95:2f: 8e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 51356 Signature Algorithm: sha256WithRSAEncryption 03:cf:7f:36:4b:3d:46:45:b0:4b:35:6a:12:a7:8c:44:e9:c5: bf:46:9f:bb:89:1c:a5:af:cd:88:2a:08:fa:fe:7d:aa:e1:38: 16:96:25:da:d1:1c:ba:50:c1:fc:09:59:31:27:87:6d:62:3f: 01:48:28:67:86:9d:bd:40:cb:1b:18:89:60:22:4f:4a:19:00: 29:db:6d:6e:e5:54:ef:43:66:6b:0a:6c:2b:68:26:65:01:85: 70:fb:d9:31:dc:f5:ed:05:36:79:12:ef:94:c3:6d:9e:4f:5d: 30:6a:74:45:10:d6:6d:67:20:4e:fa:ac:78:1b:bc:da:50:a0: 61:76:ad:7c:e9:e7:69:46:d9:60:4d:fe:ba:0d:13:f7:e0:ce: d2:0e:bb:f2:2b:a2:ca:b8:e4:6b:ab:b1:65:fc:5b:51:12:91: a3:a0:16:36:ea:c4:a4:af:f1:97:f0:4c:b5:d1:2f:39:b5:07: dc:1b:02:f4:d4:70:7b:aa:7c:29:05:e2:12:90:73:76:fa:d7: e1:b7:11:fd:b6:50:7b:85:30:b2:09:61:2d:b2:76:61:a6:53: ae:12:e6:73:a6:35:bb:b6:7b:ba:05:20:d9:de:4c:57:04:9f: 89:68:4b:c9:ef:22:f9:6e:3c:ad:c5:0e:c8:ea:94:7e:63:42: 75:eb:5c:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgICTuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjUxMjE5MTMwNTIxWhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE1N0RBRTExMC8GA1UEBRMoMzQyNjg0MUE2NDA2NkI3ODY1NUJCRUNB MEMwMUZEMDlGNjU3MDUzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKW0HHLDXn7Z0s7TLOaB3cyJPSzk+aHwmK/x3ulCgyIlB5ARf/q4ln4Ta3Kt++bs W5MC2nYQduzBZ9PentXX24PnY2O4xWTOjSWOzDXVHVsBLdeA9NoCmNzbVBgprqMF HNDtcjxIwwvIAtA0jNwBCnd9fODU3iVkUlXRgAOcNdjEC4GwIvme9PQr3GHTWsGA lzuYo3OWD0niR8KRvW3zGyCLCpCk8mL4W82oJE2c6fW+cdvA39l+SYOc/QKFbRRz txttNAUDhzxaePjj9Hhb7eQkOO9KgkgANP7AGpRew4hqHGYczzXI4h3AkD9xtLIG ZwMC1jFWBr+dWdv21pUvjr8CAwEAAaOCAu4wggLqMB0GA1UdDgQWBBQ0JoQaZAZr eGVbvsoMAf0J9lcFNjAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvMTA0QTdFMUVERkFEMTFFRDk1MTUzRDMxQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU3REFFLzEwNEE3RTFFREZBRDExRUQ5NTE1M0QzMUM0RjlBRTAyL05DYUVHbVFH YTNobFc3N0tEQUg5Q2ZaWEJUWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMAyJwwDQYJKoZIhvcNAQELBQADggEBAAPPfzZLPUZFsEs1ahKnjETpxb9G n7uJHKWvzYgqCPr+farhOBaWJdrRHLpQwfwJWTEnh21iPwFIKGeGnb1AyxsYiWAi T0oZACnbbW7lVO9DZmsKbCtoJmUBhXD72THc9e0FNnkS75TDbZ5PXTBqdEUQ1m1n IE76rHgbvNpQoGF2rXzp52lG2WBN/roNE/fgztIOu/Irosq45GursWX8W1ESkaOg FjbqxKSv8ZfwTLXRLzm1B9wbAvTUcHuqfCkF4hKQc3b61+G3Ef22UHuFMLIJYS2y dmGmU64S5nOmNbu2e7oFINneTFcEn4loS8nvIvluPK3FDsjqlH5jQnXrXHY= -----END CERTIFICATE-----Generated at Wed Dec 31 05:03:54 2025 by rpki-client