This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer File: 8T313f28CQG_wEdBIIjaNJOg8kQ.cer (raw, json) Hash identifier: lfJRHfGlrAltYJzARBKVgfZrOtbANPAGsBOZybXj07w= Subject key identifier: F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D1B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 09 Dec 2025 16:51:12 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 133014 IP: 2001:df0:41f::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163099 (0x27d1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 9 16:51:12 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A916E1C6, serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c2:6f:3a:9e:3c:8d:78:a4:2f:5d:61:fc:9c: 22:75:01:df:37:1f:be:98:7d:4e:7d:68:96:fc:0c: 4a:e2:56:88:76:d0:df:a9:ff:f8:5f:f2:eb:f0:af: 18:9a:14:4c:93:ca:0c:9f:79:1e:b6:58:8e:0e:99: 90:ca:56:5f:51:06:9c:ac:87:20:1d:e1:e3:68:05: ce:cc:db:de:16:2a:2f:45:9f:9e:89:2e:9b:c2:20: 84:69:c5:b2:03:06:dd:63:87:76:66:a6:e7:2e:7c: eb:6c:1d:4d:1e:17:04:79:ef:41:0c:81:8c:ba:82: 10:b9:98:7a:9d:1e:44:69:03:38:c5:71:07:85:da: 4b:a4:34:d4:a8:21:24:59:05:78:53:87:cb:01:45: 6c:ba:c8:6a:10:33:3b:eb:0c:b6:c3:66:63:ad:7b: 31:08:98:77:72:00:a6:a6:bb:22:30:fa:f9:b5:72: 61:04:ad:64:21:ad:fe:ef:a2:c5:30:fd:39:d6:59: df:ac:e1:32:a5:f2:e5:09:a4:94:c8:0b:6e:4e:ca: 5d:5c:6a:d7:47:dc:9b:f8:8f:39:e4:c3:2a:ef:cb: 6f:5c:bc:42:1c:fd:d5:b6:1e:93:63:8d:e8:25:9e: 0e:89:cf:5c:f7:c4:d6:d1:27:c5:f9:4a:fb:e4:0e: c2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133014 sbgp-ipAddrBlock: critical IPv6: 2001:df0:41f::/48 Signature Algorithm: sha256WithRSAEncryption 79:47:1b:e8:9f:9f:14:c6:2d:04:3e:41:a2:12:8e:e8:48:17: 84:c4:4a:8d:fc:ec:ed:fc:2f:b1:86:f5:52:b2:d9:fb:ba:61: 2c:d1:1d:1c:90:dc:b2:26:04:c7:ce:9b:35:37:07:08:26:a1: ba:6c:50:e5:8c:1e:2a:08:f5:aa:e6:e7:c1:4a:10:a9:50:9c: b8:34:c0:f8:96:e3:58:33:94:78:5e:51:67:eb:74:a4:94:c9: 82:fc:45:75:f8:46:17:f0:6f:54:55:45:4e:a2:fb:96:ad:70: 12:19:fb:a1:12:b8:7d:ed:7b:3e:23:b0:50:62:bc:8b:d0:b7: 99:0b:3b:da:a7:e5:9e:c0:86:5b:f3:cc:59:80:12:42:aa:43: c4:10:e2:04:de:3b:27:e8:1c:9d:42:58:4a:19:bb:bb:61:8f: 85:93:51:e2:9f:41:73:a8:5a:59:97:94:3b:47:90:8d:0b:7d: b5:33:c6:b8:b6:84:04:3f:dd:c7:5d:bb:e3:24:02:2e:6f:33: 0c:2c:53:c3:21:d0:cc:bb:76:5d:ff:48:12:02:e8:7b:3f:b1: d2:b5:59:33:2d:9a:1a:7c:3f:a1:bf:4b:ee:70:09:e8:d6:a6: 07:34:73:6a:6f:d8:3f:55:c3:eb:59:f9:2d:8a:9b:02:d4:aa: e6:a2:73:f2 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAn0bMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwOTE2NTExMloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNkUxQzYxMTAvBgNVBAUTKEYxM0RGNURERkRCQzA5MDFCRkMwNDc0 MTIwODhEQTM0OTNBMEYyNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxwm86njyNeKQvXWH8nCJ1Ad83H76YfU59aJb8DEriVoh20N+p//hf8uvwrxia FEyTygyfeR62WI4OmZDKVl9RBpyshyAd4eNoBc7M294WKi9Fn56JLpvCIIRpxbID Bt1jh3ZmpucufOtsHU0eFwR570EMgYy6ghC5mHqdHkRpAzjFcQeF2kukNNSoISRZ BXhTh8sBRWy6yGoQMzvrDLbDZmOtezEImHdyAKamuyIw+vm1cmEErWQhrf7vosUw /TnWWd+s4TKl8uUJpJTIC25Oyl1catdH3Jv4jznkwyrvy29cvEIc/dW2HpNjjegl ng6Jz1z3xNbRJ8X5SvvkDsJJAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQU8T313f28 CQG/wEdBIIjaNJOg8kQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZFMUM2LzQyRTBCNkIyRDUxRjExRjA4NzkyQjU3REM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2RTFDNi80MkUwQjZCMkQ1MUYxMUYwODc5MkI1N0RDNEY5QUUwMi84VDMxM2Yy OENRR193RWRCSUlqYU5KT2c4a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgeWMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8AQfMA0G CSqGSIb3DQEBCwUAA4IBAQB5Rxvon58Uxi0EPkGiEo7oSBeExEqN/Ozt/C+xhvVS stn7umEs0R0ckNyyJgTHzps1NwcIJqG6bFDljB4qCPWq5ufBShCpUJy4NMD4luNY M5R4XlFn63SklMmC/EV1+EYX8G9UVUVOovuWrXASGfuhErh97Xs+I7BQYryL0LeZ Czvap+WewIZb88xZgBJCqkPEEOIE3jsn6BydQlhKGbu7YY+Fk1Hin0FzqFpZl5Q7 R5CNC321M8a4toQEP93HXbvjJAIubzMMLFPDIdDMu3Zd/0gSAuh7P7HStVkzLZoa fD+hv0vucAno1qYHNHNqb9g/VcPrWfktipsC1KrmonPy -----END CERTIFICATE-----Generated at Fri Dec 19 16:06:27 2025 by rpki-client