This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer File: RNKGOHOg4Xndk_snhK0EhGYj5-4.cer (raw, json) Hash identifier: Ff+FzxNOdy5/PGfsRggU7EyGxdjyYTVf3V6FNlJAgvU= Subject key identifier: 44:D2:86:38:73:A0:E1:79:DD:93:FB:27:84:AD:04:84:66:23:E7:EE Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027ED4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft caRepository: rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 17 Dec 2025 03:41:44 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154421 IP: 2001:df6:71c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163540 (0x27ed4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 17 03:41:44 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A914E4E2, serialNumber=44D2863873A0E179DD93FB2784AD04846623E7EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:21:34:80:55:04:a0:50:de:90:92:72:90: 3f:e2:92:86:cb:77:30:6c:58:7c:ef:0d:3c:65:36: 3d:3d:17:ef:e8:04:00:16:b7:c9:1f:3c:bb:b4:6a: e2:f1:a6:65:a6:dc:27:8e:b7:07:97:ad:7b:5a:c5: 1d:48:02:c1:d9:91:90:82:6a:e3:79:f5:1f:e6:ce: 70:f3:fd:6b:65:c4:b9:91:95:ae:76:31:f3:dd:a7: cf:ac:9f:0b:d9:f8:8f:ff:67:b7:99:d0:78:2a:41: 74:ec:67:64:a8:3c:67:30:f5:51:f7:4d:7f:4b:62: e1:aa:b9:a9:eb:1a:2f:77:42:c7:8b:f8:b4:8d:a9: 89:4d:18:b1:b1:6f:82:89:3d:f1:1c:89:7e:2c:03: 33:ce:71:58:3d:f6:fd:dc:fa:d6:81:14:f0:53:be: 38:dd:e7:43:8d:be:5d:d3:45:fc:d7:95:39:ea:49: 8c:98:35:02:c8:32:c7:ba:63:b9:6b:de:b1:12:e7: 69:89:0e:98:2f:95:e2:4f:24:89:16:36:d9:14:66: 21:2c:88:08:01:e9:97:fe:9c:b0:31:07:f4:1d:74: 32:a5:e0:28:7b:68:e3:81:26:d4:e9:81:b7:b6:28: e1:b2:3b:ca:17:99:fc:50:05:27:82:3c:ac:b7:d0: 4c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D2:86:38:73:A0:E1:79:DD:93:FB:27:84:AD:04:84:66:23:E7:EE X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154421 sbgp-ipAddrBlock: critical IPv6: 2001:df6:71c0::/48 Signature Algorithm: sha256WithRSAEncryption 80:6f:a4:0c:53:0b:1e:11:50:f2:d0:6d:92:ab:95:8e:b7:e6: cd:a2:af:47:7b:39:f1:d4:6a:1a:79:dc:d8:47:b1:05:e0:11: 27:c5:65:4a:e4:3d:87:ea:70:fb:b3:8d:94:66:5b:d8:94:e9: 65:ae:50:0f:44:ea:12:b6:ac:9d:74:e9:cc:d3:c5:e3:fd:4d: 14:ef:f8:ae:2e:2a:e9:b8:48:93:ac:10:d4:be:c1:03:c6:9e: 9d:57:93:d3:44:05:31:e6:33:24:2c:25:2c:94:86:f5:24:44: 9e:9f:5b:15:5a:32:40:85:e9:95:9b:3c:96:d7:80:03:7e:78: 02:c4:02:8d:22:ad:0e:7c:d6:7f:92:bc:86:b1:da:25:c2:43: 81:f7:50:34:d2:d1:00:07:fb:19:bf:6e:35:a1:ad:87:7f:ba: cc:93:f7:23:05:a1:79:31:a5:12:3a:a6:9b:6e:94:bd:bc:6b: 2d:d4:a1:5a:d5:1f:53:7f:83:af:81:af:d5:4c:b7:7e:e6:b9: c4:68:d9:85:11:33:c9:f6:b3:90:60:3b:26:5e:93:31:4b:fb: 6a:92:fe:5f:37:53:81:c8:08:ed:09:c4:bc:6b:db:94:f1:2b: 6a:ff:dd:be:e1:e2:07:d4:53:64:d7:53:f5:3b:cf:08:e9:54: ce:ce:0d:56 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAn7UMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNzAzNDE0NFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNEU0RTIxMTAvBgNVBAUTKDQ0RDI4NjM4NzNBMEUxNzlERDkzRkIy Nzg0QUQwNDg0NjYyM0U3RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3TCE0gFUEoFDekJJykD/ikobLdzBsWHzvDTxlNj09F+/oBAAWt8kfPLu0auLx pmWm3CeOtweXrXtaxR1IAsHZkZCCauN59R/mznDz/WtlxLmRla52MfPdp8+snwvZ +I//Z7eZ0HgqQXTsZ2SoPGcw9VH3TX9LYuGquanrGi93QseL+LSNqYlNGLGxb4KJ PfEciX4sAzPOcVg99v3c+taBFPBTvjjd50ONvl3TRfzXlTnqSYyYNQLIMse6Y7lr 3rES52mJDpgvleJPJIkWNtkUZiEsiAgB6Zf+nLAxB/QddDKl4Ch7aOOBJtTpgbe2 KOGyO8oXmfxQBSeCPKy30Ey1AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQURNKGOHOg 4Xndk/snhK0EhGYj5+4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRFNEUyLzRCREVGNUQ2REFGQTExRjA5QUY2MTYyMDdDRDM2NDFELzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0RTRFMi80QkRFRjVENkRBRkExMUYwOUFGNjE2MjA3Q0QzNjQxRC9STktHT0hP ZzRYbmRrX3NuaEswRWhHWWo1LTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAls1MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9nHAMA0G CSqGSIb3DQEBCwUAA4IBAQCAb6QMUwseEVDy0G2Sq5WOt+bNoq9Heznx1GoaedzY R7EF4BEnxWVK5D2H6nD7s42UZlvYlOllrlAPROoStqyddOnM08Xj/U0U7/iuLirp uEiTrBDUvsEDxp6dV5PTRAUx5jMkLCUslIb1JESen1sVWjJAhemVmzyW14ADfngC xAKNIq0OfNZ/kryGsdolwkOB91A00tEAB/sZv241oa2Hf7rMk/cjBaF5MaUSOqab bpS9vGst1KFa1R9Tf4Ovga/VTLd+5rnEaNmFETPJ9rOQYDsmXpMxS/tqkv5fN1OB yAjtCcS8a9uU8Stq/92+4eIH1FNk11P1O88I6VTOzg1W -----END CERTIFICATE-----Generated at Fri Dec 19 16:06:36 2025 by rpki-client