This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer File: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer (raw, json) Hash identifier: Dgjf90fjwZUM7TTOuGlqO1i/fNIT96APGi9aWY3GMR0= Subject key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E8E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft caRepository: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 16 Dec 2025 12:35:40 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 153460 IP: 2401:db60::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163470 (0x27e8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 16 12:35:40 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:da:f9:fe:af:97:71:39:c9:d2:7e:4e:6f: 7f:88:93:9a:28:09:4c:66:d1:4f:f8:c5:c5:08:40: 9a:dd:e1:a6:59:b3:71:92:ad:49:76:57:25:1d:88: 52:96:83:a9:ef:08:41:37:d3:82:14:c0:36:fe:fe: e6:d3:5f:e2:c5:94:bc:ab:52:c8:93:ad:b2:ff:29: 4a:59:08:ad:81:d3:4d:8e:b5:53:9d:09:1b:1a:de: 7f:f3:ce:52:8e:00:b9:81:3d:11:aa:1d:c0:be:c8: 36:6f:2e:37:9c:64:50:e1:65:c5:90:e7:57:12:41: e5:f6:75:29:ef:9c:0e:c1:36:d7:77:0e:29:98:91: cb:4f:51:c5:08:91:8f:31:09:65:ef:9f:8b:44:2a: 66:47:69:db:ae:44:8c:0c:2d:fc:2a:00:05:c9:5a: e4:86:d3:0e:64:ff:69:84:0d:e2:fe:fe:6e:72:0f: 9c:12:1f:16:48:01:7c:93:9c:a9:1d:42:b5:3d:6e: 6d:88:65:35:34:9c:39:da:c3:e8:3a:f2:e9:b1:ea: b2:8a:a1:ed:94:e9:72:1d:2a:c0:fe:c7:68:65:f0: 3f:19:a8:2b:5c:ee:b6:33:94:6c:9c:98:03:bc:3a: 94:9a:97:27:0e:0f:21:9e:ac:cd:b7:7e:2b:3e:c1: ff:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153460 sbgp-ipAddrBlock: critical IPv6: 2401:db60::/32 Signature Algorithm: sha256WithRSAEncryption b8:16:03:ba:75:80:fe:0f:30:83:c6:f9:77:4d:19:92:c2:ce: bb:d1:63:76:0d:ca:9a:3c:11:85:87:8c:f2:49:6e:91:d0:e7: c7:e0:02:ac:0c:4d:d9:13:4f:7d:67:1a:d0:c1:5b:bc:c2:39: 91:34:a8:73:da:1b:4d:e1:7d:3e:2e:2d:33:ee:a2:42:a1:47: 6e:2f:23:e0:fb:79:aa:ca:ac:42:56:12:7b:9f:2e:b4:ce:02: b8:3f:36:fe:3f:7f:b8:6b:70:31:a6:0b:58:fa:13:f8:73:32: 38:52:12:a6:38:80:d9:4b:75:14:f9:8f:51:d2:65:86:97:12: eb:1b:78:07:24:f7:7c:e3:fa:4e:49:19:f7:e5:aa:03:8a:d0: 05:30:8d:06:18:5e:9e:83:82:e7:a9:9f:9b:26:b6:ea:a3:b8: a7:a0:d4:3b:1b:ec:00:16:8b:63:75:ac:4c:f5:f6:bf:32:7f: 72:c0:7c:0b:8f:ea:5a:a5:9b:91:08:92:8a:cd:a6:78:85:40: 35:7b:55:36:26:f6:69:c7:33:de:9a:f2:93:ae:16:f6:6e:69: d1:c2:0e:36:54:05:6a:cf:73:81:bb:9b:04:66:60:ec:8b:b4: 43:c9:75:e7:fb:38:73:61:42:eb:1c:2b:97:e9:b5:98:5b:7c: 38:70:4a:6d -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAn6OMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNjEyMzU0MFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxMkIxMkExMTAvBgNVBAUTKEVDRkYzMjQ0MEM0RUUxRDI3OTQzQ0RC NzJBN0Q0OTEwNjM0MDJERjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFN9r5/q+XcTnJ0n5Ob3+Ik5ooCUxm0U/4xcUIQJrd4aZZs3GSrUl2VyUdiFKW g6nvCEE304IUwDb+/ubTX+LFlLyrUsiTrbL/KUpZCK2B002OtVOdCRsa3n/zzlKO ALmBPRGqHcC+yDZvLjecZFDhZcWQ51cSQeX2dSnvnA7BNtd3DimYkctPUcUIkY8x CWXvn4tEKmZHaduuRIwMLfwqAAXJWuSG0w5k/2mEDeL+/m5yD5wSHxZIAXyTnKkd QrU9bm2IZTU0nDnaw+g68umx6rKKoe2U6XIdKsD+x2hl8D8ZqCtc7rYzlGycmAO8 OpSalycODyGerM23fis+wf+jAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQU7P8yRAxO 4dJ5Q823Kn1JEGNALfEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJCMTJBL0I5RDRDRjQyQUUzRDExRUY5NkI3NkM2QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyQjEyQS9COUQ0Q0Y0MkFFM0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4 TzRkSjVRODIzS24xSkVHTkFMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAld0MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHbYDANBgkq hkiG9w0BAQsFAAOCAQEAuBYDunWA/g8wg8b5d00ZksLOu9Fjdg3KmjwRhYeM8klu kdDnx+ACrAxN2RNPfWca0MFbvMI5kTSoc9obTeF9Pi4tM+6iQqFHbi8j4Pt5qsqs QlYSe58utM4CuD82/j9/uGtwMaYLWPoT+HMyOFISpjiA2Ut1FPmPUdJlhpcS6xt4 ByT3fOP6TkkZ9+WqA4rQBTCNBhhenoOC56mfmya26qO4p6DUOxvsABaLY3WsTPX2 vzJ/csB8C4/qWqWbkQiSis2meIVANXtVNib2accz3pryk64W9m5p0cIONlQFas9z gbubBGZg7Iu0Q8l15/s4c2FC6xwrl+m1mFt8OHBKbQ== -----END CERTIFICATE-----Generated at Fri Dec 19 16:06:04 2025 by rpki-client