This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer File: -L4s6ssxJNZg8w-KJzgGZIr0PIc.cer (raw, json) Hash identifier: /ytfZhFcHOF4Nq73tueeyNX6Astj/Nod5gSAwITHNfs= Subject key identifier: F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027CF8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 09 Dec 2025 04:50:42 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 136769 IP: 2001:df4:a1c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163064 (0x27cf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 9 04:50:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91AFAAC, serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:19:3b:e6:77:0c:33:a8:ca:01:2e:27:6d: 8b:bf:44:db:8c:7f:0a:24:75:83:da:55:49:e6:ba: ad:5d:e2:a3:32:87:12:ef:f9:77:96:af:b3:72:16: 24:e3:7c:c1:5a:2a:a2:bf:32:8c:1e:75:e0:a4:75: d4:44:18:42:6e:a5:4b:ad:90:23:09:2a:39:7d:18: 8f:2a:b4:45:6b:07:20:c8:f5:6d:50:e2:0a:01:11: 66:0b:fe:e1:b1:47:93:d8:91:06:4c:59:b4:84:9a: 2e:e4:99:ef:d8:79:07:c3:cf:06:fe:d7:2b:58:d9: 55:9a:56:86:69:0b:d5:79:24:40:77:9b:04:8a:34: 89:be:8b:c1:b8:fc:5e:d2:cd:30:d5:24:6d:70:3d: fb:db:63:ef:81:a9:2b:f3:b0:7e:5c:cf:32:71:53: b2:f3:d9:90:53:96:c9:98:d2:1c:10:96:70:06:c7: 22:54:61:ec:f7:ba:d2:23:ca:4c:53:15:37:51:6a: d1:e5:15:d1:07:65:2e:71:d8:19:03:b8:7d:9a:31: dc:cd:aa:a2:d8:52:f8:c3:b9:2e:2a:65:ae:f2:3f: 54:10:9e:de:a6:7a:6d:84:0f:e2:48:c4:f5:14:b5: 21:78:9b:de:bc:6b:0d:50:f4:2d:c6:05:a8:48:bf: dd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136769 sbgp-ipAddrBlock: critical IPv6: 2001:df4:a1c0::/48 Signature Algorithm: sha256WithRSAEncryption 8d:32:66:dc:0a:c8:32:c3:cf:e2:0c:3d:16:f6:20:48:e5:6c: a7:fc:fc:d6:dd:be:23:e3:74:33:7e:cc:2f:33:75:1f:eb:7b: 37:d2:f0:8e:2e:af:f6:68:b7:0f:43:5e:23:bf:a1:bd:b1:70: 5e:b9:ff:a2:b7:28:75:eb:25:eb:be:98:3c:0b:9c:7b:f0:a6: f7:71:db:66:9a:fc:80:7f:bd:7c:d3:29:63:26:ae:67:43:e7: d2:ca:c4:6c:18:e0:20:28:14:05:00:92:02:51:7c:63:80:6d: 5a:9d:19:f7:f0:16:5f:fb:3a:c3:7d:e8:3e:c8:06:a2:fe:82: 94:f9:6f:e5:91:51:d0:d2:39:b0:49:2c:59:9b:43:1c:81:0c: 55:1a:3b:0d:eb:31:fc:a9:2d:90:2b:53:c3:19:d3:6a:ea:1d: 05:fc:b1:ec:a9:2e:11:26:a1:11:37:3a:3e:6b:ac:5e:6b:85: ec:4b:9b:57:6a:f7:51:ff:5a:8f:42:87:15:02:d1:84:3e:82: 6b:3d:5c:4e:81:bf:b4:4d:93:87:d4:d8:88:81:55:d9:06:85: ad:8f:a8:2e:f8:51:52:07:3e:8a:73:e8:a2:0d:e4:6c:59:4c: 91:82:b5:ce:7d:bd:58:90:1e:19:90:de:33:66:36:98:d1:97: 02:76:6e:32 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAnz4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwOTA0NTA0MloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQUZBQUMxMTAvBgNVBAUTKEY4QkUyQ0VBQ0IzMTI0RDY2MEYzMEY4 QTI3MzgwNjY0OEFGNDNDODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGxBk75ncMM6jKAS4nbYu/RNuMfwokdYPaVUnmuq1d4qMyhxLv+XeWr7NyFiTj fMFaKqK/MowedeCkddREGEJupUutkCMJKjl9GI8qtEVrByDI9W1Q4goBEWYL/uGx R5PYkQZMWbSEmi7kme/YeQfDzwb+1ytY2VWaVoZpC9V5JEB3mwSKNIm+i8G4/F7S zTDVJG1wPfvbY++BqSvzsH5czzJxU7Lz2ZBTlsmY0hwQlnAGxyJUYez3utIjykxT FTdRatHlFdEHZS5x2BkDuH2aMdzNqqLYUvjDuS4qZa7yP1QQnt6mem2ED+JIxPUU tSF4m968aw1Q9C3GBahIv90tAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQU+L4s6ssx JNZg8w+KJzgGZIr0PIcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFGQUFDLzUzRDU1Q0Q2MzU0QTExRjBCQTc2NkU0Q0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBRkFBQy81M0Q1NUNENjM1NEExMUYwQkE3NjZFNENDNEY5QUUwMi8tTDRzNnNz eEpOWmc4dy1LSnpnR1pJcjBQSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhZBMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9KHAMA0G CSqGSIb3DQEBCwUAA4IBAQCNMmbcCsgyw8/iDD0W9iBI5Wyn/PzW3b4j43Qzfswv M3Uf63s30vCOLq/2aLcPQ14jv6G9sXBeuf+ityh16yXrvpg8C5x78Kb3cdtmmvyA f7180yljJq5nQ+fSysRsGOAgKBQFAJICUXxjgG1anRn38BZf+zrDfeg+yAai/oKU +W/lkVHQ0jmwSSxZm0McgQxVGjsN6zH8qS2QK1PDGdNq6h0F/LHsqS4RJqERNzo+ a6xea4XsS5tXavdR/1qPQocVAtGEPoJrPVxOgb+0TZOH1NiIgVXZBoWtj6gu+FFS Bz6Kc+iiDeRsWUyRgrXOfb1YkB4ZkN4zZjaY0ZcCdm4y -----END CERTIFICATE-----Generated at Fri Dec 19 16:04:39 2025 by rpki-client