This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer (raw, json) Hash identifier: FGgK1SJ7/LhXzmj/gi0NzaXkFEXNIsI30YaZfIRQ/c8= Subject key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B59 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft caRepository: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 16:08:25 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 55819 AS: 133873 AS: 134124 IP: 27.126.144.0/21 IP: 103.28.40.0/22 IP: 180.189.136.0/22 IP: 203.55.21.0/24 IP: 203.55.138.0/24 IP: 2001:df0:3c00::/48 IP: 2404:de00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162649 (0x27b59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 16:08:25 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:18:98:20:8d:48:07:bc:12:72:3e:7e:67:fa: 14:6c:ed:99:e3:df:76:d5:a2:87:32:d4:4e:d0:f4: 21:50:b9:57:23:75:4c:a5:ec:9c:5d:42:a2:25:05: ee:e3:dd:87:7f:02:82:05:05:61:80:da:fc:e7:6f: 10:ae:1e:bd:3f:dd:56:39:84:c4:76:b9:9d:fd:a0: f4:b1:09:e7:80:3c:fc:86:ab:29:3d:f8:ab:27:8f: d0:89:03:68:34:1e:40:e2:9c:cd:91:1b:38:34:6f: 9e:cd:0d:20:e2:d7:44:ca:74:58:87:a3:5b:da:16: 84:df:f3:89:5e:37:83:e8:80:58:85:5f:c3:a6:ff: da:f4:ea:a4:a8:c8:24:7f:68:93:54:73:8e:81:a1: 95:a6:52:cd:07:c4:2d:36:37:16:42:25:e6:77:09: c2:34:15:49:36:64:ca:56:56:4b:86:75:36:7f:e6: b0:6e:07:89:d2:a4:68:02:13:24:2b:f4:e8:ec:c9: aa:6c:da:71:75:15:a4:e6:e3:5b:b8:4d:09:99:75: 6f:1b:72:da:d4:de:aa:46:9b:2c:78:59:60:ca:29: f0:2f:3d:11:01:fa:4d:51:a3:5b:fa:21:c7:87:a4: d9:e2:e1:2b:34:dc:45:0f:7c:62:0d:12:27:ed:87: 20:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 55819 133873 134124 sbgp-ipAddrBlock: critical IPv4: 27.126.144.0/21 103.28.40.0/22 180.189.136.0/22 203.55.21.0/24 203.55.138.0/24 IPv6: 2001:df0:3c00::/48 2404:de00::/32 Signature Algorithm: sha256WithRSAEncryption c7:75:32:be:44:30:7a:35:44:9c:44:78:85:73:58:66:e3:74: e3:fc:70:5c:91:23:77:1e:6d:2a:93:9c:bb:cd:3b:1c:79:64: 47:f1:49:8e:c9:a4:5c:9e:13:c0:99:35:1c:2f:42:d3:43:2e: 75:19:07:70:eb:b9:14:c0:20:19:74:e2:9d:86:d6:c7:a5:64: 8f:fd:9c:cd:77:36:03:49:52:80:0f:22:af:4e:c0:c3:43:9d: 84:c8:53:03:c1:e7:c9:f2:31:d2:53:d3:c6:aa:4a:04:e3:db: b0:9e:1a:a4:5e:dd:74:23:6c:15:7c:60:55:a9:43:bb:00:9d: b8:26:45:6f:ec:5c:17:40:68:b1:99:b2:03:77:b5:b8:8e:a0: d2:f9:7a:25:0f:2e:c4:fc:75:cb:15:bf:1e:15:ec:9b:2a:d3: af:7a:61:ff:16:18:0c:bb:52:e4:ed:dd:b0:d5:50:c4:f4:de: 00:38:01:1c:2f:ee:79:ef:f5:6f:d1:3c:e2:cc:f4:2d:93:fe: 19:c4:92:9b:a1:e8:0c:2f:29:12:5f:a3:c2:bb:f3:4c:33:58: 5f:b2:e3:a4:7d:23:2b:ca:e9:dd:2d:e8:4a:68:b1:47:84:0e: 2b:2e:07:b8:ea:c7:ab:50:68:c9:94:cb:40:3f:fb:d8:5d:e3: 5b:66:94:28 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIDAntZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzE2MDgyNVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTEyNTgxMTAvBgNVBAUTKEVDNEUwNzkzNTRCNjRFMDU0N0VCOUY0 MDU1NTI0QjQ0MkZCM0Q0M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsGJggjUgHvBJyPn5n+hRs7Znj33bVoocy1E7Q9CFQuVcjdUyl7JxdQqIlBe7j 3Yd/AoIFBWGA2vznbxCuHr0/3VY5hMR2uZ39oPSxCeeAPPyGqyk9+Ksnj9CJA2g0 HkDinM2RGzg0b57NDSDi10TKdFiHo1vaFoTf84leN4PogFiFX8Om/9r06qSoyCR/ aJNUc46BoZWmUs0HxC02NxZCJeZ3CcI0FUk2ZMpWVkuGdTZ/5rBuB4nSpGgCEyQr 9Ojsyaps2nF1FaTm41u4TQmZdW8bctrU3qpGmyx4WWDKKfAvPREB+k1Ro1v6IceH pNni4Ss03EUPfGINEifthyC9AgMBAAGjggNJMIIDRTAdBgNVHQ4EFgQU7E4Hk1S2 TgVH659AVVJLRC+z1DswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTUxMjU4L0M4NDhDRTY0MURBNjExRTI4NkQ5MUQ5RTA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1MTI1OC9DODQ4Q0U2NDFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFT MlRnVkg2NTlBVlZKTFJDLXoxRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDANoLAgMCCvECAwIL7DBPBggrBgEFBQcBBwEB/wRAMD4wJAQCAAEwHgME Axt+kAMEAmccKAMEArS9iAMEAMs3FQMEAMs3ijAWBAIAAjAQAwcAIAEN8DwAAwUA JATeADANBgkqhkiG9w0BAQsFAAOCAQEAx3UyvkQwejVEnER4hXNYZuN04/xwXJEj dx5tKpOcu807HHlkR/FJjsmkXJ4TwJk1HC9C00MudRkHcOu5FMAgGXTinYbWx6Vk j/2czXc2A0lSgA8ir07Aw0OdhMhTA8HnyfIx0lPTxqpKBOPbsJ4apF7ddCNsFXxg ValDuwCduCZFb+xcF0BosZmyA3e1uI6g0vl6JQ8uxPx1yxW/HhXsmyrTr3ph/xYY DLtS5O3dsNVQxPTeADgBHC/uee/1b9E84sz0LZP+GcSSm6HoDC8pEl+jwrvzTDNY X7LjpH0jK8rp3S3oSmixR4QOKy4HuOrHq1BoyZTLQD/72F3jW2aUKA== -----END CERTIFICATE-----Generated at Fri Dec 19 17:25:12 2025 by rpki-client