This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer File: TmFCvWGz61iXzgHo1FcR2lDc9WU.cer (raw, json) Hash identifier: omtw6xPOcbPjdpK0u/5eo9CH1b+ru4kPAZLomwKD4KI= Subject key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028277 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft caRepository: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 31 Dec 2025 17:17:22 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 134995 IP: 2402:6640::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 20:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164471 (0x28277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 31 17:17:22 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:8d:c8:eb:ea:a8:a6:7d:2a:f7:02:5c:37: ed:0d:1a:95:fa:47:67:cd:c3:59:cb:84:96:14:2e: 30:bb:69:29:6d:ad:b4:48:46:dd:05:09:8a:d9:61: 39:ca:74:3c:bc:dc:4a:36:14:55:3e:3b:bf:55:b6: df:04:3c:d1:fb:51:34:d1:de:c7:8e:dd:ae:ac:fd: b9:4b:b3:21:bf:de:67:a4:59:61:95:6c:86:7e:34: 82:19:9e:2b:8b:7e:a6:e4:7c:10:f5:69:87:e6:62: 33:8d:d0:22:d6:95:75:f1:0b:3f:82:ae:a3:f2:ad: 51:10:da:8b:c4:1a:8b:f6:08:fa:e1:f3:c3:c3:07: 65:21:2a:0d:f1:49:f8:61:37:14:f1:88:83:ff:83: 1e:10:f6:55:e5:82:a5:00:37:63:6a:09:3c:17:64: 89:55:d4:cd:70:7e:5a:8e:8a:f6:df:d5:8b:2a:0d: 2f:4c:91:0d:7d:93:2d:6b:41:33:96:77:5e:77:d3: e6:0a:f5:f5:66:a7:62:b7:ec:1b:02:18:6c:e4:01: 7d:2a:27:c7:f6:51:1f:7a:25:37:be:08:31:e8:23: fd:9b:b6:e1:57:40:44:08:84:fa:c9:e8:9a:b1:9e: c1:6e:40:45:9c:64:2a:8c:74:cb:58:79:cd:0b:f6: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134995 sbgp-ipAddrBlock: critical IPv6: 2402:6640::/32 Signature Algorithm: sha256WithRSAEncryption 52:7e:a0:1d:12:e8:ab:2f:2d:8b:6e:d3:b9:01:9a:ba:12:09: ce:fc:0a:37:32:d9:10:23:f2:91:1c:fa:7f:ad:18:45:a7:d4: b6:60:48:58:dd:d7:7c:32:95:db:72:be:ce:0b:ad:0b:83:5a: 83:7c:72:7a:e3:bd:ce:c6:a7:90:d0:53:b3:11:b6:a4:13:f3: 04:1b:76:fc:d6:45:f2:78:4d:a1:0e:03:aa:b5:29:3e:98:a5: e4:7d:b7:26:bd:24:69:1a:c6:54:9d:b9:57:6c:46:0c:35:04: 65:32:10:de:e9:10:4c:06:f6:87:5d:d8:80:fb:97:dc:b0:00: a9:88:6a:a6:04:4e:86:c9:ab:3c:99:13:a3:60:f7:dc:ab:a7: 7e:97:cf:07:13:3c:93:35:75:59:cf:7e:7d:07:de:f0:4c:6b: 42:a3:b3:47:d0:cc:0c:5b:82:42:7c:9c:d4:27:9c:22:b2:61: e7:c4:77:1f:65:10:b7:bd:3f:c8:a9:44:a7:a2:b0:df:09:98: e7:dc:66:2b:f8:ad:6e:30:4a:b1:91:3a:d0:81:87:fa:5c:1c: 62:c6:ee:00:0d:a4:78:68:4c:34:19:e8:06:e7:63:89:dc:da: f8:45:70:2d:49:2d:de:37:6c:77:46:2b:7a:55:81:98:95:ad: c8:0b:4b:ee -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAoJ3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMTE3MTcyMloXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxNjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFF OEQ0NTcxMURBNTBEQ0Y1NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs4o3I6+qopn0q9wJcN+0NGpX6R2fNw1nLhJYULjC7aSltrbRIRt0FCYrZYTnK dDy83Eo2FFU+O79Vtt8EPNH7UTTR3seO3a6s/blLsyG/3mekWWGVbIZ+NIIZniuL fqbkfBD1aYfmYjON0CLWlXXxCz+CrqPyrVEQ2ovEGov2CPrh88PDB2UhKg3xSfhh NxTxiIP/gx4Q9lXlgqUAN2NqCTwXZIlV1M1wflqOivbf1YsqDS9MkQ19ky1rQTOW d1530+YK9fVmp2K37BsCGGzkAX0qJ8f2UR96JTe+CDHoI/2btuFXQEQIhPrJ6Jqx nsFuQEWcZCqMdMtYec0L9htdAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUTmFCvWGz 61iXzgHo1FcR2lDc9WUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY3RjBDLzBBNThBMTlBNzBBQjExRTk4MzE3QTU3QkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2N0YwQy8wQTU4QTE5QTcwQUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldH ejYxaVh6Z0hvMUZjUjJsRGM5V1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg9TMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAJmQDANBgkq hkiG9w0BAQsFAAOCAQEAUn6gHRLoqy8ti27TuQGauhIJzvwKNzLZECPykRz6f60Y RafUtmBIWN3XfDKV23K+zgutC4Nag3xyeuO9zsankNBTsxG2pBPzBBt2/NZF8nhN oQ4DqrUpPpil5H23Jr0kaRrGVJ25V2xGDDUEZTIQ3ukQTAb2h13YgPuX3LAAqYhq pgROhsmrPJkTo2D33KunfpfPBxM8kzV1Wc9+fQfe8ExrQqOzR9DMDFuCQnyc1Cec IrJh58R3H2UQt70/yKlEp6Kw3wmY59xmK/itbjBKsZE60IGH+lwcYsbuAA2keGhM NBnoBudjidza+EVwLUkt3jdsd0YrelWBmJWtyAtL7g== -----END CERTIFICATE-----Generated at Wed Dec 31 21:46:18 2025 by rpki-client