This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer File: bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer (raw, json) Hash identifier: TXb/wRs6/aJWNOAtAHF8yxtYZG2jXaOLlP3hA+ImAy0= Subject key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027CB8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 14:34:52 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 202.27.240.0/22 IP: 202.36.85.0 -- 202.36.86.255 IP: 202.50.199.0/24 IP: 202.50.205.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163000 (0x27cb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 8 14:34:52 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:50:19:65:71:65:0e:18:34:4d:9d:2f:b8: b9:3e:5a:47:bc:3f:4b:ba:57:7a:ae:bd:a8:ac:bb: e2:29:44:ee:6c:76:90:28:fd:11:64:ea:30:07:51: df:ed:fc:19:bd:80:02:16:51:72:e9:84:a8:87:09: 81:90:b9:e8:d5:d2:3a:b8:48:4c:f5:07:c4:6d:f2: 45:c0:fe:9e:16:f4:1e:a3:15:33:6c:1e:07:f2:8b: 3f:8a:ab:af:e7:5c:91:fb:b2:e8:6f:45:53:78:bb: 33:a2:bd:14:71:f6:b6:e1:7b:27:9f:49:e1:78:f2: d6:d9:a2:02:7e:54:a3:9a:2c:d1:5e:a9:70:2b:cd: 24:af:f9:ba:b4:24:54:05:be:1f:44:75:c1:e8:02: 2f:73:4a:18:b2:f1:6d:ee:06:14:7d:04:4f:bb:c4: 08:63:af:a8:49:c8:54:7e:e9:b8:ea:92:5c:a3:17: d8:7a:1f:e8:0c:d0:77:ba:dc:b4:96:67:b5:9e:2c: 5d:1d:38:f4:e4:84:80:2e:65:83:cd:8f:87:c5:f5: 42:e5:a5:38:5f:ba:46:67:14:47:bc:af:d0:0a:64: 4a:b8:ee:19:28:5f:5c:d3:35:45:fe:2c:82:ff:42: 77:b1:99:9d:9a:29:35:06:4b:3d:85:e3:9a:d2:68: 09:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.27.240.0/22 202.36.85.0-202.36.86.255 202.50.199.0/24 202.50.205.0/24 Signature Algorithm: sha256WithRSAEncryption 99:d6:74:32:fa:0b:13:e0:bf:a7:e2:b9:37:9e:f1:81:ba:21: 68:c8:88:46:28:da:1c:72:d5:54:4e:36:9e:c6:00:26:73:83: 72:24:80:8e:6b:64:04:7f:19:30:bd:89:76:1e:35:89:12:34: a5:98:56:d5:8f:38:3d:e0:17:a0:5f:a3:6a:35:0e:53:5d:b7: be:c7:3c:10:26:97:58:58:9e:1e:74:61:62:13:5a:e1:59:8c: 88:8b:b5:29:b6:b8:d6:8d:38:3f:a3:df:05:9f:5f:7b:63:66: 75:84:9d:bf:df:e6:b7:f0:c8:65:ce:26:f8:f2:8d:53:b9:5b: 06:00:6e:c1:d6:db:0e:a6:7b:11:5f:d3:91:ea:37:40:b6:b6: 01:ca:21:cf:e3:b0:12:ae:dd:ea:16:37:5f:41:94:36:23:e4: 01:0e:d5:19:fd:af:7c:17:12:17:cc:de:c4:23:11:be:3a:ff: 7f:0b:22:b8:bc:c1:16:95:0b:25:38:05:22:87:86:52:10:25: bf:0b:6c:37:6c:83:40:14:2d:04:04:37:04:2e:61:ce:f8:7c: 2f:18:32:eb:b6:c5:6d:c9:cb:77:7f:8b:4e:16:93:9c:5b:21: db:d2:4a:6a:6a:12:45:ad:66:30:3d:34:33:91:68:ec:d1:0f: 6c:d8:10:bb -----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgIDAny4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwODE0MzQ1MloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNjI2RDIxMTAvBgNVBAUTKDZDM0I3RjFDMTMzREE5QzUxRDQ0NERB ODVFNjAyQTk2ODQ1MUZFNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDStFAZZXFlDhg0TZ0vuLk+Wke8P0u6V3quvaisu+IpRO5sdpAo/RFk6jAHUd/t /Bm9gAIWUXLphKiHCYGQuejV0jq4SEz1B8Rt8kXA/p4W9B6jFTNsHgfyiz+Kq6/n XJH7suhvRVN4uzOivRRx9rbheyefSeF48tbZogJ+VKOaLNFeqXArzSSv+bq0JFQF vh9EdcHoAi9zShiy8W3uBhR9BE+7xAhjr6hJyFR+6bjqklyjF9h6H+gM0He63LSW Z7WeLF0dOPTkhIAuZYPNj4fF9ULlpThfukZnFEe8r9AKZEq47hkoX1zTNUX+LIL/ QnexmZ2aKTUGSz2F45rSaAmNAgMBAAGjggMNMIIDCTAdBgNVHQ4EFgQUbDt/HBM9 qcUdRE2oXmAqloRR/lQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTYyNkQyL0FGMjA4MzRFMTNGNTExRUZBMDlEMzIxQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2MjZEMi9BRjIwODM0RTEzRjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJN OXFjVWRSRTJvWG1BcWxvUlJfbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8EKjAo MCYEAgABMCADBALKG/AwDAMEAMokVQMEAMokVgMEAMoyxwMEAMoyzTANBgkqhkiG 9w0BAQsFAAOCAQEAmdZ0MvoLE+C/p+K5N57xgbohaMiIRijaHHLVVE42nsYAJnOD ciSAjmtkBH8ZML2Jdh41iRI0pZhW1Y84PeAXoF+jajUOU123vsc8ECaXWFieHnRh YhNa4VmMiIu1Kba41o04P6PfBZ9fe2NmdYSdv9/mt/DIZc4m+PKNU7lbBgBuwdbb DqZ7EV/Tkeo3QLa2Acohz+OwEq7d6hY3X0GUNiPkAQ7VGf2vfBcSF8zexCMRvjr/ fwsiuLzBFpULJTgFIoeGUhAlvwtsN2yDQBQtBAQ3BC5hzvh8Lxgy67bFbcnLd3+L ThaTnFsh29JKamoSRa1mMD00M5Fo7NEPbNgQuw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:05:39 2025 by rpki-client