This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer File: Nocz_cVgxeuJ5FJA331AOcsvYQg.cer (raw, json) Hash identifier: 58+W7IrdNOC2r8W+faEYHl85lzNFllJQLgXxHzQ+l3c= Subject key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027CE2 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 19:08:40 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 45481 IP: 103.242.32.0/22 IP: 113.52.0.0/20 IP: 2400:eb00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163042 (0x27ce2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 8 19:08:40 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:8f:9a:75:47:ad:e3:46:93:6f:c8:36:df: bc:2a:40:62:e5:40:f0:88:c8:60:85:fb:75:59:f1: 18:cf:08:b3:ed:1c:ad:aa:53:5a:7a:9d:ae:e0:5e: 96:47:ae:d6:ce:73:b4:7d:60:22:f7:5a:81:a8:24: 74:df:c3:86:cb:b6:9d:72:b8:34:11:a6:09:ad:79: d5:f7:8f:09:14:01:5d:97:8b:ee:dd:78:bd:b5:d6: bc:e5:3e:5d:61:95:03:14:25:29:a0:62:40:25:b7: 4f:27:96:c8:00:05:55:fe:b9:2b:13:f7:e9:e8:05: 63:e3:a4:f7:69:08:fc:58:2b:42:e1:d6:ce:50:ec: 2b:2e:c0:11:d7:e1:77:da:2c:20:72:ad:b0:7e:28: f0:81:96:9c:9c:06:80:c1:93:1d:e7:b1:db:b1:92: b4:a2:74:fb:cb:3b:57:9b:f0:f0:ab:3f:71:5d:38: 83:d4:08:9c:b4:42:da:92:c8:bc:f5:24:0d:3f:7e: e0:ed:e3:d9:46:27:11:ea:52:42:d2:11:5e:ad:53: 4b:c3:23:d3:d8:15:87:ba:94:a3:56:ff:9d:5e:c3: 9c:88:fe:59:08:bb:a4:19:7c:4d:5f:b7:aa:11:8e: 2d:ca:33:b8:15:b6:d8:c0:84:88:9a:44:de:23:f9: 67:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45481 sbgp-ipAddrBlock: critical IPv4: 103.242.32.0/22 113.52.0.0/20 IPv6: 2400:eb00::/32 Signature Algorithm: sha256WithRSAEncryption 08:6b:f0:cc:91:b6:60:10:7f:49:4e:69:1f:82:be:30:31:70: a4:51:32:6e:5b:7c:d7:a4:fa:48:e1:c2:c4:46:5c:5e:0d:dd: f6:10:30:a2:0b:5e:e7:e3:d9:4d:28:a9:b1:42:5c:60:57:02: fc:4d:43:3a:10:9c:15:1e:07:ee:3a:68:19:e6:9f:ec:b0:73: f1:5e:bc:d7:02:f6:ea:22:cf:c4:78:d3:27:67:28:d1:f5:97: c0:bf:75:5f:be:1d:a1:27:41:2b:10:58:da:fe:f6:46:d6:f8: 79:f5:5b:23:cf:ab:f2:f7:87:42:dd:62:ea:a7:e2:b6:1b:99: 5b:c9:e0:6a:df:f7:2a:8b:38:11:a2:3d:33:3e:b1:35:4a:ff: 71:c4:a6:33:de:a7:f0:b1:94:19:b8:06:3b:e1:24:7f:ce:87: 04:90:4e:d3:25:1b:c5:18:59:0d:1c:4f:ee:97:eb:ea:20:96: 74:b0:64:28:5d:a5:3b:dd:0d:ca:0a:33:5b:35:e3:92:95:ce: ff:5d:0e:42:75:f9:47:08:68:9b:f0:5a:be:3f:e0:4c:69:ba: 14:f1:12:ce:7b:aa:dc:1f:87:0b:24:56:3d:65:27:43:bc:46: db:62:13:40:40:72:0e:32:47:f7:31:f9:21:7e:8e:49:47:64: 11:80:c9:a5 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIDAnziMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwODE5MDg0MFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0 MERGN0Q0MDM5Q0IyRjYxMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH34+adUet40aTb8g237wqQGLlQPCIyGCF+3VZ8RjPCLPtHK2qU1p6na7gXpZH rtbOc7R9YCL3WoGoJHTfw4bLtp1yuDQRpgmtedX3jwkUAV2Xi+7deL211rzlPl1h lQMUJSmgYkAlt08nlsgABVX+uSsT9+noBWPjpPdpCPxYK0Lh1s5Q7CsuwBHX4Xfa LCByrbB+KPCBlpycBoDBkx3nsduxkrSidPvLO1eb8PCrP3FdOIPUCJy0QtqSyLz1 JA0/fuDt49lGJxHqUkLSEV6tU0vDI9PYFYe6lKNW/51ew5yI/lkIu6QZfE1ft6oR ji3KM7gVttjAhIiaRN4j+WdtAgMBAAGjggMkMIIDIDAdBgNVHQ4EFgQUNocz/cVg xeuJ5FJA331AOcsvYQgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM5N0Y1LzkxNzBDNDJBMjc0NDExRUQ4QzEzOUI1MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDOTdGNS85MTcwQzQyQTI3NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NW Z3hldUo1RkpBMzMxQU9jc3ZZUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALGpMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCZ/IgAwQEcTQA MA0EAgACMAcDBQAkAOsAMA0GCSqGSIb3DQEBCwUAA4IBAQAIa/DMkbZgEH9JTmkf gr4wMXCkUTJuW3zXpPpI4cLERlxeDd32EDCiC17n49lNKKmxQlxgVwL8TUM6EJwV HgfuOmgZ5p/ssHPxXrzXAvbqIs/EeNMnZyjR9ZfAv3Vfvh2hJ0ErEFja/vZG1vh5 9Vsjz6vy94dC3WLqp+K2G5lbyeBq3/cqizgRoj0zPrE1Sv9xxKYz3qfwsZQZuAY7 4SR/zocEkE7TJRvFGFkNHE/ul+vqIJZ0sGQoXaU73Q3KCjNbNeOSlc7/XQ5CdflH CGib8Fq+P+BMaboU8RLOe6rcH4cLJFY9ZSdDvEbbYhNAQHIOMkf3Mfkhfo5JR2QR gMml -----END CERTIFICATE-----Generated at Fri Dec 19 16:01:38 2025 by rpki-client