This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer File: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer (raw, json) Hash identifier: 0uaynFJNS/5+5WcfE2o9+8B0HvfCwpZ3os9V5+L+k2Q= Subject key identifier: 06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027DBF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft caRepository: rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 12 Dec 2025 14:35:18 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 23967 IP: 202.90.176.0/20 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163263 (0x27dbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 12 14:35:18 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9178D35, serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:68:c8:a9:83:8e:6f:e4:5d:cf:da:07:14: 04:23:fc:f7:68:23:19:ad:0f:f7:00:bc:0c:7b:e7: 43:d8:92:8e:bf:69:df:0a:19:5f:82:ba:8c:81:01: 5e:90:7e:46:3a:27:af:da:41:af:49:68:9e:23:f1: 6a:b4:ac:cc:78:53:fd:5c:32:7e:17:c5:f2:fe:be: e4:68:db:3d:80:9b:cb:e0:ae:5f:71:83:4c:13:d4: c9:03:6b:be:95:82:ee:8a:5e:54:b7:2c:62:b9:31: b9:88:af:6a:27:de:62:4e:fb:11:fb:a2:38:c1:be: 94:fd:2f:06:40:88:83:ca:93:77:68:eb:a7:3a:f6: 07:fc:d7:24:cd:d9:77:0f:ec:45:d7:5c:8a:5e:d1: 7f:54:38:7c:bb:55:a9:0b:0a:96:a8:5a:d2:6c:7a: 19:fe:38:82:e8:72:e2:38:fb:67:fb:7a:36:42:dd: 38:15:6b:57:4a:37:c2:ce:e3:71:a9:77:0c:82:5d: ea:dc:d9:39:65:51:6b:f5:dc:93:ad:e7:e1:95:eb: 9f:b7:b3:96:e1:a7:7c:d8:3a:c9:db:48:28:ca:e4: 39:7d:1a:ed:4f:81:63:a8:35:45:7a:07:fc:26:0f: ae:26:48:3a:0a:49:fe:f0:8a:1e:21:b7:7b:cd:a1: d7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 23967 sbgp-ipAddrBlock: critical IPv4: 202.90.176.0/20 Signature Algorithm: sha256WithRSAEncryption ac:58:b4:5f:0a:e2:b6:ab:d3:b2:ba:53:b4:fa:80:77:98:4f: 2d:3a:5c:a9:88:e5:f2:81:8b:70:5b:31:92:a1:d6:cf:0e:f6: 55:86:f7:71:41:88:0b:aa:2c:47:67:0c:98:65:78:4d:bb:36: 62:f8:f3:ff:e0:e8:ce:5a:4e:04:29:24:78:d7:81:c0:34:6f: 30:b9:42:4f:f8:85:2a:5c:16:9d:8f:93:0b:31:7e:4f:11:df: c1:bf:76:42:07:8e:32:c6:f8:a2:87:46:02:8d:16:da:62:75: 91:e3:d7:c4:d5:fd:69:5d:cf:d5:56:76:43:6f:b4:b0:ee:1e: e1:9b:b2:90:47:f2:d8:0d:cd:3b:c8:31:84:28:c7:ae:c2:b8: e4:c6:db:8e:5f:f4:f3:3a:40:03:8b:e2:b7:19:38:c0:92:b8: 5a:a2:19:16:94:1c:63:37:9f:84:d2:d7:ce:33:95:82:bc:28: 73:73:8c:1e:7f:c3:95:d0:66:99:3a:62:7c:b5:44:ec:4c:36: 9e:5c:d5:f1:f2:4c:e0:5d:ed:ac:fb:71:3b:e6:96:3f:c6:20: f5:6d:a0:e6:40:4b:6e:a9:3c:c6:02:75:81:0b:47:a7:a5:d0: e5:5d:b2:4d:b9:5a:13:71:ea:24:88:af:9b:48:d8:29:a3:a4: 01:d7:bf:5a -----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgIDAn2/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMjE0MzUxOFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNzhEMzUxMTAvBgNVBAUTKDA2NTVFMjkxNUNBREU5MTY3N0FBQjQ4 QzIzQzFFMjI0QjQzREJBQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFIGjIqYOOb+Rdz9oHFAQj/PdoIxmtD/cAvAx750PYko6/ad8KGV+CuoyBAV6Q fkY6J6/aQa9JaJ4j8Wq0rMx4U/1cMn4XxfL+vuRo2z2Am8vgrl9xg0wT1MkDa76V gu6KXlS3LGK5MbmIr2on3mJO+xH7ojjBvpT9LwZAiIPKk3do66c69gf81yTN2XcP 7EXXXIpe0X9UOHy7VakLCpaoWtJsehn+OILocuI4+2f7ejZC3TgVa1dKN8LO43Gp dwyCXerc2TllUWv13JOt5+GV65+3s5bhp3zYOsnbSCjK5Dl9Gu1PgWOoNUV6B/wm D64mSDoKSf7wih4ht3vNoddHAgMBAAGjggMOMIIDCjAdBgNVHQ4EFgQUBlXikVyt 6RZ3qrSMI8HiJLQ9uqUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTc4RDM1L0Q2Rjg4NUE0MUQ4QzExRTI5RkE2MjNFQTA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3OEQzNS9ENkY4ODVBNDFEOEMxMUUyOUZBNjIzRUEwOEIwMkNEMi9CbFhpa1Z5 dDZSWjNxclNNSThIaUpMUTl1cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICXZ8wHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKWrAwDQYJKoZI hvcNAQELBQADggEBAKxYtF8K4rar07K6U7T6gHeYTy06XKmI5fKBi3BbMZKh1s8O 9lWG93FBiAuqLEdnDJhleE27NmL48//g6M5aTgQpJHjXgcA0bzC5Qk/4hSpcFp2P kwsxfk8R38G/dkIHjjLG+KKHRgKNFtpidZHj18TV/Wldz9VWdkNvtLDuHuGbspBH 8tgNzTvIMYQox67CuOTG245f9PM6QAOL4rcZOMCSuFqiGRaUHGM3n4TS184zlYK8 KHNzjB5/w5XQZpk6Yny1ROxMNp5c1fHyTOBd7az7cTvmlj/GIPVtoOZAS26pPMYC dYELR6el0OVdsk25WhNx6iSIr5tI2CmjpAHXv1o= -----END CERTIFICATE-----Generated at Fri Dec 19 17:37:57 2025 by rpki-client