This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer File: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer (raw, json) Hash identifier: gFNHrNi+5eRwe1R7M5ereZbnGjmT+G8CQ3wf8O4GZEs= Subject key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F4E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 03:18:48 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 23856 AS: 137468 AS: 139883 IP: 61.13.192.0/18 IP: 61.16.48.0 -- 61.16.127.255 IP: 103.77.140.0/22 IP: 116.206.204.0/22 IP: 203.149.192.0 -- 203.149.239.255 IP: 2407:9880::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163662 (0x27f4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 19 03:18:48 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:68:46:17:7f:c2:af:c5:46:23:14:8e:02:63: 2c:d0:be:03:bc:6d:1d:29:03:3d:83:10:f8:75:00: a6:e5:b1:02:8f:38:b8:c2:fa:e9:91:88:eb:fb:f9: b6:1b:bd:e4:d3:37:22:03:c5:7b:dd:e4:91:af:fe: 58:ce:79:02:0f:00:44:5a:d5:69:4f:61:0b:93:b6: 99:e3:64:c2:c1:36:15:fe:6d:5a:14:e0:b5:ff:1c: 93:0c:89:47:07:a8:89:a2:e4:d3:e0:b7:e3:07:db: 63:a7:ac:86:bc:56:3a:02:09:bb:dc:4b:c8:18:90: 89:1e:9f:3f:49:f1:72:02:b8:6a:bc:fc:bd:8b:ae: 4b:8b:55:e1:08:16:ef:66:73:59:c6:f5:74:ea:2b: 9b:fc:02:46:eb:7d:f0:ef:bf:07:3e:2f:29:59:b4: 4f:dd:11:dc:b2:0c:ab:7c:2d:f6:7e:06:bb:1b:f5: 82:be:b1:ad:de:03:7a:19:10:f9:64:43:b2:78:26: 8a:4d:dd:9f:33:2b:7e:6b:0a:16:37:41:b7:b4:b4: 62:8f:d6:e0:20:59:fa:10:f2:6a:75:ac:52:82:22: ac:e7:4f:a3:70:81:ab:97:50:ca:96:5e:99:15:6e: d1:e7:05:78:cc:b0:e5:01:c5:16:eb:54:bb:76:1c: ff:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 23856 137468 139883 sbgp-ipAddrBlock: critical IPv4: 61.13.192.0/18 61.16.48.0-61.16.127.255 103.77.140.0/22 116.206.204.0/22 203.149.192.0-203.149.239.255 IPv6: 2407:9880::/32 Signature Algorithm: sha256WithRSAEncryption 9c:6c:b4:05:03:21:ca:37:d9:eb:17:4b:29:35:9d:4a:74:4e: d7:b5:e8:1a:d3:a4:9e:dc:5c:e0:b0:68:22:59:1d:fb:7e:c9: 3a:de:72:df:91:fa:6b:59:e4:a8:75:d4:4e:42:1e:ba:1e:4f: 54:ca:1e:2c:d1:4b:e2:cd:af:e3:57:bb:aa:fd:86:9f:a0:59: c2:e6:b1:42:a3:bd:03:67:4c:80:10:d1:3d:ec:d5:f7:d5:7e: ba:36:67:50:60:f1:5f:86:01:ff:94:e7:ea:52:3b:fc:a2:c1: 62:a0:c5:80:26:66:91:a6:75:a1:fa:33:dc:d0:02:be:16:83: 3b:c8:6c:c5:bf:a2:cf:bf:71:1a:25:93:1f:5f:22:dc:f7:6d: e3:f7:ad:be:1a:64:28:1d:eb:69:b7:a2:bb:21:eb:aa:18:8e: 9a:fc:80:c2:fe:37:c7:0e:5c:38:1c:b3:10:98:1c:6a:bb:1e: bc:31:77:d2:d1:ca:3c:e3:95:24:f7:59:e9:e0:23:30:6f:3b: 4e:04:b6:e4:15:6e:29:9f:fe:8a:25:2e:01:fa:c0:d9:50:fc: b8:c5:73:53:e1:5d:40:71:f0:e6:38:d0:64:43:c8:2d:ef:4f: 1e:92:bc:54:40:7f:ae:c5:35:07:c1:b8:d1:07:0b:b3:d8:c9: 49:24:27:fa -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIDAn9OMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxOTAzMTg0OFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMjc0QTQxMTAvBgNVBAUTKDU5NTY2NUZGODVFNEU0NzczNzFGNzU0 MUY3MjA5REMyNDRFNjBDQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvaEYXf8KvxUYjFI4CYyzQvgO8bR0pAz2DEPh1AKblsQKPOLjC+umRiOv7+bYb veTTNyIDxXvd5JGv/ljOeQIPAERa1WlPYQuTtpnjZMLBNhX+bVoU4LX/HJMMiUcH qImi5NPgt+MH22OnrIa8VjoCCbvcS8gYkIkenz9J8XICuGq8/L2LrkuLVeEIFu9m c1nG9XTqK5v8AkbrffDvvwc+LylZtE/dEdyyDKt8LfZ+Brsb9YK+sa3eA3oZEPlk Q7J4JopN3Z8zK35rChY3Qbe0tGKP1uAgWfoQ8mp1rFKCIqznT6NwgauXUMqWXpkV btHnBXjMsOUBxRbrVLt2HP/LAgMBAAGjggNPMIIDSzAdBgNVHQ4EFgQUWVZl/4Xk 5Hc3H3VB9yCdwkTmDKUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI3NEE0L0REQkU0MjBBMzBGMDExRUE5ODU5QUU1M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyNzRBNC9EREJFNDIwQTMwRjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRY azVIYzNIM1ZCOXlDZHdrVG1ES1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIwYIKwYBBQUHAQgBAf8EFDAS oBAwDgICXTACAwIY/AIDAiJrMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuAwQG PQ3AMAwDBAQ9EDADBAc9EAADBAJnTYwDBAJ0zswwDAMEBsuVwAMEBMuV4DANBAIA AjAHAwUAJAeYgDANBgkqhkiG9w0BAQsFAAOCAQEAnGy0BQMhyjfZ6xdLKTWdSnRO 17XoGtOkntxc4LBoIlkd+37JOt5y35H6a1nkqHXUTkIeuh5PVMoeLNFL4s2v41e7 qv2Gn6BZwuaxQqO9A2dMgBDRPezV99V+ujZnUGDxX4YB/5Tn6lI7/KLBYqDFgCZm kaZ1ofoz3NACvhaDO8hsxb+iz79xGiWTH18i3Pdt4/etvhpkKB3rabeiuyHrqhiO mvyAwv43xw5cOByzEJgcarsevDF30tHKPOOVJPdZ6eAjMG87TgS25BVuKZ/+iiUu AfrA2VD8uMVzU+FdQHHw5jjQZEPILe9PHpK8VEB/rsU1B8G40QcLs9jJSSQn+g== -----END CERTIFICATE-----Generated at Fri Dec 19 16:02:04 2025 by rpki-client