This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer File: 3oPHbNtE9PeURxkgK-OvqIPTSU0.cer (raw, json) Hash identifier: 7Tdc8rWti+Gc73OkgczVAYaJdQH7yhF5dx0uE71VbzE= Subject key identifier: DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F11 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 18 Dec 2025 02:14:31 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 203.20.60.0/24 IP: 203.28.113.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163601 (0x27f11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 18 02:14:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A91EAE28, serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:46:89:b0:d2:71:ed:4f:08:7e:a8:70:db:79: 8e:88:05:88:dd:09:99:03:cd:2e:66:5d:6c:4f:51: 55:14:cc:32:d4:16:42:77:aa:86:f3:8b:6a:2b:30: 27:c3:a6:af:0d:cc:7c:10:41:3e:94:cf:d7:f5:51: 4f:70:0f:02:7f:ac:d4:52:85:5f:1f:83:07:49:3b: f3:d4:3c:8f:0c:c4:c1:c7:f7:b4:81:7b:b8:1c:0f: 51:c7:d0:2b:aa:76:5d:db:0b:08:ff:69:4a:25:78: b3:2e:44:90:8d:47:c3:7d:41:fc:64:8f:1a:f3:ee: 10:48:57:e1:dd:a6:76:d8:46:ba:11:41:75:12:86: f1:9e:e2:dd:82:2d:7d:37:13:a9:b8:26:e5:44:29: 1b:5c:3a:8f:03:54:c7:e2:b8:28:19:8f:b0:32:61: 72:ec:26:88:56:85:12:8d:f8:cd:10:dd:3e:75:d0: 59:bd:e9:da:fe:7f:05:00:d7:04:a5:7b:4b:52:06: ac:0a:1e:32:99:e6:f3:65:dc:01:90:2f:b2:c1:c1: 57:e1:49:1f:bf:50:f1:c3:54:5a:64:7a:6e:77:bc: ea:f8:e2:13:b7:bc:3b:52:ab:cf:f7:8e:87:b1:3f: b6:5a:7f:45:db:40:37:4e:b6:93:bc:f9:ac:9f:d6: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.60.0/24 203.28.113.0/24 Signature Algorithm: sha256WithRSAEncryption 50:dc:03:d7:a2:f1:9a:1f:80:dc:d5:a2:01:f7:ca:e5:23:49: b7:1b:96:3b:e9:82:78:b8:57:90:3d:91:e9:a5:b2:c9:68:88: cb:3e:45:b3:53:f5:41:04:f4:19:6c:58:a6:9e:50:5d:33:6a: 13:17:81:e0:b4:51:37:31:80:c7:50:21:4e:6b:03:fe:8a:e4: 99:81:a1:04:09:c6:5b:e9:78:1b:aa:b5:9a:e0:31:9a:77:6f: e0:1b:8b:36:87:54:48:80:34:5b:4a:17:66:4c:20:e8:ab:2b: 05:ad:d2:45:e0:be:94:54:67:64:2b:18:4e:74:18:08:a7:c4: 17:99:d0:f0:b4:57:73:5e:a2:25:e3:24:1e:db:76:d5:33:d1: b7:a4:4f:2b:79:da:12:fc:fc:6b:b9:28:02:8b:27:06:f1:73: e3:66:c8:4a:0e:49:d9:83:91:40:57:a7:18:18:e7:25:05:e0: 0a:a3:17:05:d5:5f:d9:22:dc:7e:07:96:89:7a:db:60:35:a1: 5e:29:f2:87:c7:b4:6c:a7:4b:27:53:e1:63:02:99:67:40:06: ae:b2:86:93:4c:6d:cd:02:35:d6:4f:94:4c:c0:cc:3b:1c:8b: da:0e:49:6e:c5:98:20:5c:c5:53:bc:bb:23:71:53:1c:33:c9: 2f:36:50:6d -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIDAn8RMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxODAyMTQzMVoXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRUFFMjgxMTAvBgNVBAUTKERFODNDNzZDREI0NEY0Rjc5NDQ3MTky MDJCRTNBRkE4ODNEMzQ5NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1Romw0nHtTwh+qHDbeY6IBYjdCZkDzS5mXWxPUVUUzDLUFkJ3qobzi2orMCfD pq8NzHwQQT6Uz9f1UU9wDwJ/rNRShV8fgwdJO/PUPI8MxMHH97SBe7gcD1HH0Cuq dl3bCwj/aUoleLMuRJCNR8N9Qfxkjxrz7hBIV+HdpnbYRroRQXUShvGe4t2CLX03 E6m4JuVEKRtcOo8DVMfiuCgZj7AyYXLsJohWhRKN+M0Q3T510Fm96dr+fwUA1wSl e0tSBqwKHjKZ5vNl3AGQL7LBwVfhSR+/UPHDVFpkem53vOr44hO3vDtSq8/3joex P7Zaf0XbQDdOtpO8+ayf1o4JAgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQU3oPHbNtE 9PeURxkgK+OvqIPTSU0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVBRTI4LzQ3NjA2RUI0REJCNzExRjBBMERGOTBGMDRENjQxOTUxLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFQUUyOC80NzYwNkVCNERCQjcxMUYwQTBERjkwRjA0RDY0MTk1MS8zb1BIYk50 RTlQZVVSeGtnSy1PdnFJUFRTVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU MBIEAgABMAwDBADLFDwDBADLHHEwDQYJKoZIhvcNAQELBQADggEBAFDcA9ei8Zof gNzVogH3yuUjSbcbljvpgni4V5A9kemlssloiMs+RbNT9UEE9BlsWKaeUF0zahMX geC0UTcxgMdQIU5rA/6K5JmBoQQJxlvpeBuqtZrgMZp3b+AbizaHVEiANFtKF2ZM IOirKwWt0kXgvpRUZ2QrGE50GAinxBeZ0PC0V3NeoiXjJB7bdtUz0bekTyt52hL8 /Gu5KAKLJwbxc+NmyEoOSdmDkUBXpxgY5yUF4AqjFwXVX9ki3H4Hlol622A1oV4p 8ofHtGynSydT4WMCmWdABq6yhpNMbc0CNdZPlEzAzDsci9oOSW7FmCBcxVO8uyNx UxwzyS82UG0= -----END CERTIFICATE-----Generated at Fri Dec 19 17:40:18 2025 by rpki-client