This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer File: 9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer (raw, json) Hash identifier: mlVCO41TSk86+XjOGdj21vmNWPkL/16uU1ktKRou4NA= Subject key identifier: F5:03:B9:65:59:5C:A9:DA:41:88:E4:D9:FD:72:C0:3F:E1:D6:F6:8C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D6F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft caRepository: rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 11 Dec 2025 10:57:47 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154409 IP: 2001:df6:6ac0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163183 (0x27d6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 11 10:57:47 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9136067, serialNumber=F503B965595CA9DA4188E4D9FD72C03FE1D6F68C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a4:ab:78:6f:f2:0e:24:67:4a:e3:c5:43:eb: f7:b6:9f:02:78:ee:5e:82:a0:0f:77:2d:c5:16:e4: ff:5b:e7:fa:77:6a:27:ae:14:61:cb:2d:e1:16:61: e7:49:64:05:5c:0d:b4:8f:b3:81:2d:83:4f:95:f8: 4d:a6:de:a2:49:81:50:7d:bb:a6:3a:39:5e:35:85: 34:fa:ac:85:de:89:02:25:bb:5c:44:75:b0:d7:d4: 0a:24:ae:62:87:bf:f8:20:02:62:17:d5:6b:a5:5d: 48:2f:35:0b:a5:49:da:ff:2b:b9:8d:59:bd:12:5e: f1:80:bd:7f:31:d6:cf:c1:07:76:ce:8e:87:78:4f: bf:00:ed:1b:3c:19:64:b1:67:d4:ec:af:30:10:48: 60:e6:a4:c7:d6:ab:ad:57:dd:a4:9f:bc:e3:25:a4: 10:4b:d9:cc:ac:37:c1:d1:6b:ae:8b:69:a7:b4:c1: 60:9d:c2:50:5e:66:34:c2:56:a2:cd:cd:59:17:6b: 1c:86:95:a0:9b:7d:25:bf:37:b9:03:4f:2f:d5:ce: 30:8d:10:bb:55:bd:38:ff:f0:8e:3a:65:49:84:01: 86:31:51:c2:eb:df:86:f0:8f:26:b9:0f:7f:9b:05: c2:67:2f:0c:04:1f:ec:fc:39:13:cc:33:d2:01:c5: b7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:03:B9:65:59:5C:A9:DA:41:88:E4:D9:FD:72:C0:3F:E1:D6:F6:8C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154409 sbgp-ipAddrBlock: critical IPv6: 2001:df6:6ac0::/48 Signature Algorithm: sha256WithRSAEncryption 28:fd:0d:4e:fd:05:c0:ad:b7:cd:db:b5:89:80:1e:6c:29:b9: 0f:d2:83:6d:c4:18:92:a7:85:2b:12:23:a5:ea:3d:98:12:62: c8:fb:1a:f4:1e:68:ba:55:48:71:b6:11:2e:2f:60:7a:22:55: cc:74:9a:a7:af:99:89:dd:50:f6:2c:b3:64:0d:8a:93:ca:90: 51:35:0b:d9:ea:d7:0b:c9:c8:9d:54:a5:c2:03:bb:10:68:ef: 0a:81:da:0d:d6:74:54:c1:bc:e7:e7:58:54:1d:57:42:0b:8d: bd:08:e2:dc:91:fc:4a:d7:3b:e9:37:48:bc:18:ca:03:b5:99: e4:60:20:6d:7f:a6:31:c9:53:18:8a:0c:c0:f9:f5:ce:5d:8c: 46:f7:8f:f7:81:a3:c2:76:65:f4:79:03:75:83:18:a2:4e:d1: 80:d8:8e:d4:15:a8:97:9a:cc:65:9f:4e:f9:f2:03:dc:06:0a: 5c:41:54:95:9f:2c:ef:e9:58:ad:ca:1a:8f:b2:0d:43:b7:19: 0a:8c:0b:c7:1e:25:a7:3a:d8:8b:9a:a8:1f:33:1d:6a:81:03: 6c:1a:20:dc:fb:5f:a2:8b:30:f1:d5:08:bc:b4:fc:1c:95:cc: 1a:e3:e0:ab:49:ea:ce:cd:24:93:70:fa:d0:23:31:f7:2b:e4: a2:3d:99:df -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAn1vMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMTEwNTc0N1oXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzYwNjcxMTAvBgNVBAUTKEY1MDNCOTY1NTk1Q0E5REE0MTg4RTRE OUZENzJDMDNGRTFENkY2OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxpKt4b/IOJGdK48VD6/e2nwJ47l6CoA93LcUW5P9b5/p3aieuFGHLLeEWYedJ ZAVcDbSPs4Etg0+V+E2m3qJJgVB9u6Y6OV41hTT6rIXeiQIlu1xEdbDX1AokrmKH v/ggAmIX1WulXUgvNQulSdr/K7mNWb0SXvGAvX8x1s/BB3bOjod4T78A7Rs8GWSx Z9TsrzAQSGDmpMfWq61X3aSfvOMlpBBL2cysN8HRa66Laae0wWCdwlBeZjTCVqLN zVkXaxyGlaCbfSW/N7kDTy/VzjCNELtVvTj/8I46ZUmEAYYxUcLr34bwjya5D3+b BcJnLwwEH+z8ORPMM9IBxbcFAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQU9QO5ZVlc qdpBiOTZ/XLAP+HW9owwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM2MDY3LzM4N0VENzhDRDY4MDExRjBCMUI0QzdBMDY3RDM2NDFELzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzNjA2Ny8zODdFRDc4Q0Q2ODAxMUYwQjFCNEM3QTA2N0QzNjQxRC85UU81WlZs Y3FkcEJpT1RaX1hMQVAtSFc5b3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlspMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9mrAMA0G CSqGSIb3DQEBCwUAA4IBAQAo/Q1O/QXArbfN27WJgB5sKbkP0oNtxBiSp4UrEiOl 6j2YEmLI+xr0Hmi6VUhxthEuL2B6IlXMdJqnr5mJ3VD2LLNkDYqTypBRNQvZ6tcL ycidVKXCA7sQaO8KgdoN1nRUwbzn51hUHVdCC429COLckfxK1zvpN0i8GMoDtZnk YCBtf6YxyVMYigzA+fXOXYxG94/3gaPCdmX0eQN1gxiiTtGA2I7UFaiXmsxln075 8gPcBgpcQVSVnyzv6VityhqPsg1DtxkKjAvHHiWnOtiLmqgfMx1qgQNsGiDc+1+i izDx1Qi8tPwclcwa4+CrSerOzSSTcPrQIzH3K+SiPZnf -----END CERTIFICATE-----Generated at Fri Dec 19 16:06:41 2025 by rpki-client