This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer (raw, json) Hash identifier: 6syr2bZPrPEaipHdJGd4Ca5zYP9aUab6i7fH2+UWCME= Subject key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027EB2 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 16 Dec 2025 18:13:08 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 38534 IP: 202.12.93.0/24 IP: 203.1.104.0/22 IP: 203.16.32.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163506 (0x27eb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 16 18:13:08 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2b:51:9b:39:74:53:38:e4:14:40:fc:90:af: 6f:0b:ce:a7:c1:f6:07:74:da:c2:8b:cd:92:5f:fd: a3:ea:e4:a7:2b:7d:e2:ca:73:fa:b2:36:86:21:d6: 94:91:85:a6:c7:9a:2c:8e:cc:75:5c:c8:4b:69:52: 89:1d:b5:35:0e:da:d0:5a:cb:b2:df:41:65:4c:35: 65:1e:4d:a4:bf:89:16:0e:f4:fe:a2:9c:30:4f:5a: 60:0c:62:26:9e:bb:c4:9f:73:51:9c:62:7d:5f:00: e7:f1:1d:c2:73:50:ab:b6:0a:a3:ca:a5:0d:f8:f5: cc:25:c2:94:6f:b9:f6:bc:95:a8:1b:60:f5:31:80: 45:25:fe:8e:8b:33:1d:39:a0:ff:20:b3:4a:1c:3f: de:07:e0:bc:83:13:d0:75:92:7e:fc:b0:03:13:8d: e9:97:b2:98:fe:c9:51:37:4c:b2:45:56:b9:11:b0: da:f7:3c:48:06:b5:28:45:08:1d:ca:52:14:06:40: 85:22:51:30:7f:8c:db:06:54:5d:86:6d:8c:91:3b: 5b:11:b7:5a:44:01:27:89:8a:92:cf:b5:26:3b:ff: f9:18:03:1a:64:91:41:71:11:54:8b:96:13:cd:0d: e9:b8:76:10:12:87:03:87:e4:88:90:39:db:40:28: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38534 sbgp-ipAddrBlock: critical IPv4: 202.12.93.0/24 203.1.104.0/22 203.16.32.0/23 Signature Algorithm: sha256WithRSAEncryption 35:ba:b4:a4:ce:49:bf:fa:af:af:5a:d1:89:23:bb:55:88:b7: 05:7f:90:d7:e7:06:be:e4:68:30:04:76:84:aa:9e:43:8b:2f: e1:e1:74:49:ce:df:d6:32:7c:b2:9c:45:51:9e:8f:91:39:05: e2:a4:19:ec:36:5d:0e:6d:19:86:ca:3e:96:c4:6a:c6:11:02: c0:d5:ff:99:96:d7:49:e2:6f:20:9f:7b:4d:4d:74:9a:ae:c0: c3:8e:87:0a:47:ca:55:63:f2:04:70:7d:aa:87:9d:cc:31:5f: c9:da:58:5a:98:bc:2f:eb:04:e6:ca:7a:8d:e8:c5:b6:a5:72: 2e:f0:eb:07:0e:64:c6:db:68:c8:8b:c4:df:85:e7:8b:5b:4c: 7a:5c:3b:4f:60:39:39:8f:7e:23:93:c1:db:f7:bf:d9:ae:76: 82:58:2c:58:76:d2:e9:3a:6c:24:09:02:9f:fb:cb:59:21:a9: 64:41:93:de:cc:b3:b5:ad:a9:da:81:20:07:8c:a4:4d:45:54: 21:67:28:98:3d:c6:7f:1e:17:e5:df:f7:9f:78:7e:e3:c6:ca: a9:72:12:42:4f:21:e3:a0:21:37:b6:14:7f:f5:a9:50:d9:b0: 22:9f:71:32:a4:14:1f:c7:1a:06:f5:75:be:a3:fd:f8:37:1a: 9f:bc:6f:df -----BEGIN CERTIFICATE----- MIIGJjCCBQ6gAwIBAgIDAn6yMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNjE4MTMwOFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQUE5NkExMTAvBgNVBAUTKDBDREQ1MDU4MzJFQThDOUE0RDIzQjEw NjM3MjAxRDc5NDI5NTY0QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrK1GbOXRTOOQUQPyQr28LzqfB9gd02sKLzZJf/aPq5KcrfeLKc/qyNoYh1pSR habHmiyOzHVcyEtpUokdtTUO2tBay7LfQWVMNWUeTaS/iRYO9P6inDBPWmAMYiae u8Sfc1GcYn1fAOfxHcJzUKu2CqPKpQ349cwlwpRvufa8lagbYPUxgEUl/o6LMx05 oP8gs0ocP94H4LyDE9B1kn78sAMTjemXspj+yVE3TLJFVrkRsNr3PEgGtShFCB3K UhQGQIUiUTB/jNsGVF2GbYyRO1sRt1pEASeJipLPtSY7//kYAxpkkUFxEVSLlhPN Dem4dhAShwOH5IiQOdtAKPBNAgMBAAGjggMbMIIDFzAdBgNVHQ4EFgQUDN1QWDLq jJpNI7EGNyAdeUKVZMAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFBOTZBL0Q0QzE2ODgyNkE2RTExRUY4NEY5OEUzNUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBQTk2QS9ENEMxNjg4MjZBNkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RM cWpKcE5JN0VHTnlBZGVVS1ZaTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAJaGMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAygxdAwQCywFo AwQByxAgMA0GCSqGSIb3DQEBCwUAA4IBAQA1urSkzkm/+q+vWtGJI7tViLcFf5DX 5wa+5GgwBHaEqp5Diy/h4XRJzt/WMnyynEVRno+ROQXipBnsNl0ObRmGyj6WxGrG EQLA1f+ZltdJ4m8gn3tNTXSarsDDjocKR8pVY/IEcH2qh53MMV/J2lhamLwv6wTm ynqN6MW2pXIu8OsHDmTG22jIi8TfheeLW0x6XDtPYDk5j34jk8Hb97/ZrnaCWCxY dtLpOmwkCQKf+8tZIalkQZPezLO1ranagSAHjKRNRVQhZyiYPcZ/Hhfl3/efeH7j xsqpchJCTyHjoCE3thR/9alQ2bAin3EypBQfxxoG9XW+o/34NxqfvG/f -----END CERTIFICATE-----Generated at Fri Dec 19 16:02:55 2025 by rpki-client