This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer File: A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.cer (raw, json) Hash identifier: fdGh73BKYw1YyYL4RQ9b6dJpDHbqBRdVrX3z9di1csc= Subject key identifier: 03:92:84:27:D2:F5:3C:8F:BA:97:FC:FE:3F:C6:53:A5:0F:16:59:FE Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E80 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 16 Dec 2025 04:22:42 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154432 IP: 2402:3f60::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163456 (0x27e80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 16 04:22:42 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91B40B2, serialNumber=03928427D2F53C8FBA97FCFE3FC653A50F1659FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ae:8a:2e:0a:46:07:50:b0:17:98:7a:32:28: 7d:30:45:3f:43:3f:f3:1b:03:f3:74:82:9e:b0:6a: 42:a2:85:18:26:87:6c:80:d3:cc:bf:40:6e:9a:0c: 13:1a:08:8a:35:5f:42:12:5f:61:88:c9:52:40:87: 73:22:fc:3e:6b:01:a9:83:15:bd:3a:60:2a:77:df: 6c:40:1f:f8:50:6d:75:3a:d6:ce:0c:8b:35:35:2b: 83:93:a1:6c:de:4c:9a:c8:07:9f:7a:3f:14:4c:5c: e1:88:99:d7:22:e7:5d:33:a9:ff:c9:66:eb:fc:5d: cc:ad:f2:dc:31:67:d9:6b:49:37:10:42:cc:3c:35: 9c:d2:57:81:9a:52:45:8c:99:cf:65:d6:de:2f:98: 76:a9:36:10:85:9c:48:71:99:8c:41:61:78:07:3c: 54:49:6c:40:e7:fa:7c:2e:9a:62:80:1a:73:89:ec: 4a:51:d2:c5:11:10:d2:c8:11:0c:d0:54:9b:2e:10: 07:08:28:93:f2:a3:b8:ea:eb:a9:d0:45:b0:2d:6d: 1f:d1:cc:34:04:60:e2:63:cb:33:3b:ae:00:c6:55: 9d:41:71:f1:7d:6e:37:00:11:95:e5:39:52:47:9c: 82:21:19:5e:55:6f:a5:83:55:66:41:a9:eb:71:e9: 75:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:92:84:27:D2:F5:3C:8F:BA:97:FC:FE:3F:C6:53:A5:0F:16:59:FE X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/DAD01D34DA3611F0A933D24C8CD3641D/A5KEJ9L1PI-6l_z-P8ZTpQ8WWf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154432 sbgp-ipAddrBlock: critical IPv6: 2402:3f60::/32 Signature Algorithm: sha256WithRSAEncryption 97:17:2b:08:6e:3b:4d:9b:70:48:ab:18:51:aa:78:6a:b9:fd: c2:a4:e3:28:bc:6a:d7:1c:11:ac:14:b2:46:eb:20:81:6c:e8: 0f:d4:b2:f1:f3:1e:4a:d4:c6:b2:46:b8:02:a7:00:4c:1c:e1: 48:27:52:07:d9:b4:ea:57:99:ba:3c:29:a7:8a:35:12:5b:47: c2:64:15:b4:30:48:01:29:31:96:9d:a3:ad:74:01:fb:ba:98: 13:4f:09:d9:af:01:aa:40:c9:2b:b7:6a:05:0e:5d:4e:7b:20: d7:b6:8e:87:95:98:9d:a0:16:cb:41:cf:17:86:f3:b9:59:90: df:3a:78:7a:14:63:13:7b:99:ae:b7:6c:5d:51:8c:cc:60:61: 98:92:93:c0:86:3e:b5:7d:dc:b8:1f:12:fe:12:99:3c:a1:e1: f2:1b:8e:4d:1e:b0:c5:d5:e0:37:56:3d:9f:a0:e9:bb:77:70: cc:72:02:a6:29:46:3b:10:09:20:01:bb:97:15:d4:1a:60:fa: 2b:e0:66:61:9b:2a:16:08:1a:a4:bf:bc:4f:2a:f3:97:c9:b8: 74:9d:0a:c2:cb:3d:52:03:26:dd:77:43:01:8e:43:40:57:51: 0a:e8:f8:8e:bb:21:ab:94:9d:2c:68:d7:0f:f3:0b:c3:29:1c: 0a:ea:e9:7c -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAn6AMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNjA0MjI0MloXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjQwQjIxMTAvBgNVBAUTKDAzOTI4NDI3RDJGNTNDOEZCQTk3RkNG RTNGQzY1M0E1MEYxNjU5RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiroouCkYHULAXmHoyKH0wRT9DP/MbA/N0gp6wakKihRgmh2yA08y/QG6aDBMa CIo1X0ISX2GIyVJAh3Mi/D5rAamDFb06YCp332xAH/hQbXU61s4MizU1K4OToWze TJrIB596PxRMXOGImdci510zqf/JZuv8Xcyt8twxZ9lrSTcQQsw8NZzSV4GaUkWM mc9l1t4vmHapNhCFnEhxmYxBYXgHPFRJbEDn+nwummKAGnOJ7EpR0sURENLIEQzQ VJsuEAcIKJPyo7jq66nQRbAtbR/RzDQEYOJjyzM7rgDGVZ1BcfF9bjcAEZXlOVJH nIIhGV5Vb6WDVWZBqetx6XXdAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUA5KEJ9L1 PI+6l/z+P8ZTpQ8WWf4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI0MEIyL0RBRDAxRDM0REEzNjExRjBBOTMzRDI0QzhDRDM2NDFELzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNDBCMi9EQUQwMUQzNERBMzYxMUYwQTkzM0QyNEM4Q0QzNjQxRC9BNUtFSjlM MVBJLTZsX3otUDhaVHBROFdXZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAltAMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAI/YDANBgkq hkiG9w0BAQsFAAOCAQEAlxcrCG47TZtwSKsYUap4arn9wqTjKLxq1xwRrBSyRusg gWzoD9Sy8fMeStTGska4AqcATBzhSCdSB9m06leZujwpp4o1EltHwmQVtDBIASkx lp2jrXQB+7qYE08J2a8BqkDJK7dqBQ5dTnsg17aOh5WYnaAWy0HPF4bzuVmQ3zp4 ehRjE3uZrrdsXVGMzGBhmJKTwIY+tX3cuB8S/hKZPKHh8huOTR6wxdXgN1Y9n6Dp u3dwzHICpilGOxAJIAG7lxXUGmD6K+BmYZsqFggapL+8Tyrzl8m4dJ0Kwss9UgMm 3XdDAY5DQFdRCuj4jrshq5SdLGjXD/MLwykcCurpfA== -----END CERTIFICATE-----Generated at Fri Dec 19 16:06:26 2025 by rpki-client