This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer File: -gRcYwK4c-iDZfqaAhSZtPPFhog.cer (raw, json) Hash identifier: xTB3oGBK/aWVbmcOPKOf0JgnO6Ke3LxQu/Mxed8HZVQ= Subject key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F2E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft caRepository: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 18 Dec 2025 22:35:48 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 2697 IP: 202.41.64.0/18 IP: 202.141.128.0/19 IP: 2001:e30::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163630 (0x27f2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 18 22:35:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:ef:d9:56:43:84:60:56:e9:23:2f:01:a0: 33:2e:28:a5:9c:68:28:de:3b:44:3a:a0:98:06:01: c1:ef:35:e5:81:a7:a5:29:85:7e:af:f2:fd:fe:33: 5a:77:20:27:3c:20:f9:ef:6a:50:5e:78:84:be:1a: 66:47:61:77:7c:15:c9:dd:a7:cb:46:67:99:50:16: 8b:ee:0e:d0:11:a6:0d:8b:83:2f:ed:90:e1:6f:b2: 4f:88:98:c0:4d:3d:c1:4f:af:bc:e3:6b:5a:4f:6a: 6a:a7:3d:ba:7b:dc:31:8c:d9:a9:e0:c6:5b:ee:c5: 1d:65:c7:a7:a4:67:e5:35:c5:e0:e4:5f:52:0c:9b: b0:9e:7e:e3:85:29:44:1c:bf:87:4d:13:8b:b2:85: 06:d1:99:21:37:32:a3:d1:9c:99:79:b4:37:d8:36: b2:2d:22:b3:da:e2:94:0f:6d:1c:78:cb:5c:c5:a9: 1d:f2:40:b8:d7:18:54:2d:44:6c:a7:ff:3a:e4:41: c0:f6:b9:fa:a5:e6:5e:13:29:b6:91:09:7e:4e:a6: 91:a3:b2:d1:13:59:25:36:56:0c:6c:4a:4b:2f:61: 9c:0b:19:d0:ea:9f:e9:df:b8:fb:4d:4c:50:ae:fb: bd:35:55:58:4b:3d:20:e2:0a:e2:1a:75:a8:73:41: 27:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 2697 sbgp-ipAddrBlock: critical IPv4: 202.41.64.0/18 202.141.128.0/19 IPv6: 2001:e30::/32 Signature Algorithm: sha256WithRSAEncryption 32:0b:db:50:27:32:a8:da:ac:42:3f:54:f1:4e:14:05:1f:bc: 97:c4:0e:fd:9b:bb:fb:a5:e5:ca:7f:94:e0:8e:c2:68:a4:62: 5e:43:2c:de:35:8a:88:f5:fe:5a:19:92:5e:e3:6e:c4:74:24: 53:c2:7a:2f:57:99:f7:f5:8e:bd:d2:af:1e:3c:0c:75:70:e9: 79:07:3f:df:4d:4c:04:d5:d4:10:e0:15:f8:c0:5a:74:99:df: 77:c6:3d:94:f8:12:92:f3:de:f0:e3:af:f9:59:94:31:60:0b: 4f:68:9f:ed:32:d8:69:cf:78:6a:a7:1b:ad:5b:6e:f2:1a:c6: f4:0b:b6:03:2b:6e:9d:83:54:0d:44:45:94:4d:04:da:41:8e: c6:08:40:fb:db:04:ac:39:0d:81:7f:61:4e:0d:d7:5c:da:c5: 0e:f7:bf:8e:9d:d4:50:44:00:cb:3e:e1:46:5a:5e:eb:16:1c: a4:fc:c9:97:27:5c:a5:18:d9:e0:ed:da:50:a0:7e:3e:92:df: cc:42:73:1d:a8:47:bc:8a:6d:18:de:c6:d8:af:a6:7f:06:c1: 34:b3:28:a8:b5:4f:4b:0f:aa:2d:90:d6:ce:fd:47:d8:d1:c4: ec:4c:c7:0c:a0:ad:33:be:88:3a:97:cd:b6:6b:59:6d:0a:c2: 41:ab:25:f1 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIDAn8uMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxODIyMzU0OFoXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5 QTAyMTQ5OUI0RjNDNTg2ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsPO/ZVkOEYFbpIy8BoDMuKKWcaCjeO0Q6oJgGAcHvNeWBp6UphX6v8v3+M1p3 ICc8IPnvalBeeIS+GmZHYXd8Fcndp8tGZ5lQFovuDtARpg2Lgy/tkOFvsk+ImMBN PcFPr7zja1pPamqnPbp73DGM2angxlvuxR1lx6ekZ+U1xeDkX1IMm7CefuOFKUQc v4dNE4uyhQbRmSE3MqPRnJl5tDfYNrItIrPa4pQPbRx4y1zFqR3yQLjXGFQtRGyn /zrkQcD2ufql5l4TKbaRCX5OppGjstETWSU2VgxsSksvYZwLGdDqn+nfuPtNTFCu +701VVhLPSDiCuIadahzQSftAgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQU+gRcYwK4 c+iDZfqaAhSZtPPFhogwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg1M0QzLzZFQzBFMzY4MDAwQTExRUM4QzI4NzI1MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4NTNEMy82RUMwRTM2ODAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdL NGMtaURaZnFhQWhTWnRQUEZob2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICCokwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAbKKUADBAXKjYAw DQQCAAIwBwMFACABDjAwDQYJKoZIhvcNAQELBQADggEBADIL21AnMqjarEI/VPFO FAUfvJfEDv2bu/ul5cp/lOCOwmikYl5DLN41ioj1/loZkl7jbsR0JFPCei9Xmff1 jr3Srx48DHVw6XkHP99NTATV1BDgFfjAWnSZ33fGPZT4EpLz3vDjr/lZlDFgC09o n+0y2GnPeGqnG61bbvIaxvQLtgMrbp2DVA1ERZRNBNpBjsYIQPvbBKw5DYF/YU4N 11zaxQ73v46d1FBEAMs+4UZaXusWHKT8yZcnXKUY2eDt2lCgfj6S38xCcx2oR7yK bRjextivpn8GwTSzKKi1T0sPqi2Q1s79R9jRxOxMxwygrTO+iDqXzbZrWW0KwkGr JfE= -----END CERTIFICATE-----Generated at Sat Dec 20 17:03:23 2025 by rpki-client