This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer File: idd5xQ8U7RH8WtuEA3iSsmC5leY.cer (raw, json) Hash identifier: tvgrG9jW5gvuLNsbh3ASRryhqkRu7sHXo8dFdu0na30= Subject key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0282D0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft caRepository: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:59:26 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 153362 IP: 2001:df4:6640::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Jan 2026 04:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164560 (0x282d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 1 04:59:26 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:99:5a:2b:34:ea:f6:07:78:50:4b:e7:bc:a1: 38:68:32:37:58:63:1f:67:a6:7f:45:ad:85:25:aa: 8b:a1:33:97:29:2d:09:fd:f0:74:f0:59:58:57:9a: d2:d1:2e:af:7d:d5:6c:2b:e6:db:e8:7c:f9:fa:33: 6d:62:22:cb:c0:68:dc:c4:a4:9e:4e:8e:e2:d3:51: 45:e4:d5:3f:c0:20:40:dd:87:a4:f2:a4:e9:aa:8f: 2e:2d:0d:74:df:84:6e:8a:7c:f1:fd:3d:61:24:c9: 87:f9:72:6f:64:c1:98:ba:7e:45:94:4c:89:0d:f3: 13:d3:5d:00:36:b5:fe:87:06:b3:2a:96:c9:b3:65: 15:24:ce:17:ef:9c:d1:6c:55:68:e4:9e:b1:5a:e7: 09:88:6d:5a:53:31:74:47:2b:56:2c:2d:74:7d:3e: 77:51:2a:77:35:9c:c7:ca:38:92:16:69:38:a2:34: e7:ea:9e:d7:ec:29:66:b1:64:f9:36:b0:b1:6d:d9: 3f:28:d4:f0:d7:80:4a:28:61:86:b6:93:2a:f8:92: 32:a1:c7:73:16:af:0e:99:f7:78:a5:c9:01:ec:c7: 38:33:4c:21:50:4d:08:16:f1:39:0a:4b:f2:44:bc: cd:df:a8:4e:5b:9c:83:cd:19:8d:04:94:2b:fd:0a: f4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153362 sbgp-ipAddrBlock: critical IPv6: 2001:df4:6640::/48 Signature Algorithm: sha256WithRSAEncryption b2:a0:1c:2a:0c:79:85:f8:0a:0f:3a:5e:2e:a0:5b:29:64:6a: 10:6e:9b:e7:cc:74:04:51:c7:f4:3e:a0:99:fb:df:b2:3f:7f: 15:4b:6a:b5:cb:65:c7:a9:a9:da:49:6f:10:f6:8e:e4:47:c4: 24:74:3d:5d:a4:96:b3:b5:90:ff:b9:8d:c1:8f:c2:fc:bf:ec: 60:b8:89:c2:c5:b1:57:d6:b2:38:d7:db:51:fb:a9:c1:e8:35: 74:ae:14:4f:52:01:c8:fa:fa:15:a6:1d:dc:fe:e3:9d:02:3e: 6d:3f:74:b0:ad:08:b3:41:58:0b:f8:09:b7:6a:69:c0:77:f6: d2:fc:17:74:41:0f:1a:8a:42:e3:c4:49:3b:fd:6f:01:e2:f6: cf:0f:8b:29:45:49:d4:42:9a:29:7c:55:56:85:90:1d:a4:f4: ab:89:8b:7d:2d:77:a2:c3:2e:54:e7:21:23:9b:cf:18:47:d8: 66:a8:8f:7c:fd:4e:4d:a7:8c:20:09:7f:80:88:ae:00:b5:e8: 0a:64:97:f8:37:81:fc:de:c7:b6:2a:ff:40:3a:24:46:fd:34: aa:2c:74:7a:1d:fd:6b:6a:a7:cc:40:35:4e:6b:46:b9:eb:d4: 20:2f:90:a4:fa:3a:c4:49:99:63:60:dc:85:af:46:9a:9e:3f: 6f:11:51:42 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAoLQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMTA0NTkyNloXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMzEyMEExMTAvBgNVBAUTKDg5RDc3OUM1MEYxNEVEMTFGQzVBREI4 NDAzNzg5MkIyNjBCOTk1RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDemVorNOr2B3hQS+e8oThoMjdYYx9npn9FrYUlqouhM5cpLQn98HTwWVhXmtLR Lq991Wwr5tvofPn6M21iIsvAaNzEpJ5OjuLTUUXk1T/AIEDdh6TypOmqjy4tDXTf hG6KfPH9PWEkyYf5cm9kwZi6fkWUTIkN8xPTXQA2tf6HBrMqlsmzZRUkzhfvnNFs VWjknrFa5wmIbVpTMXRHK1YsLXR9PndRKnc1nMfKOJIWaTiiNOfqntfsKWaxZPk2 sLFt2T8o1PDXgEooYYa2kyr4kjKhx3MWrw6Z93ilyQHsxzgzTCFQTQgW8TkKS/JE vM3fqE5bnIPNGY0ElCv9CvQRAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUidd5xQ8U 7RH8WtuEA3iSsmC5leYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTMxMjBBLzgyOUE3NEE4ODZGMzExRUZCRTAyNTM2QkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzMTIwQS84MjlBNzRBODg2RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4 VTdSSDhXdHVFQTNpU3NtQzVsZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlcSMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9GZAMA0G CSqGSIb3DQEBCwUAA4IBAQCyoBwqDHmF+AoPOl4uoFspZGoQbpvnzHQEUcf0PqCZ +9+yP38VS2q1y2XHqanaSW8Q9o7kR8QkdD1dpJaztZD/uY3Bj8L8v+xguInCxbFX 1rI419tR+6nB6DV0rhRPUgHI+voVph3c/uOdAj5tP3SwrQizQVgL+Am3amnAd/bS /Bd0QQ8aikLjxEk7/W8B4vbPD4spRUnUQpopfFVWhZAdpPSriYt9LXeiwy5U5yEj m88YR9hmqI98/U5Np4wgCX+AiK4AtegKZJf4N4H83se2Kv9AOiRG/TSqLHR6Hf1r aqfMQDVOa0a569QgL5Ck+jrESZljYNyFr0aanj9vEVFC -----END CERTIFICATE-----Generated at Fri Jan 2 08:15:19 2026 by rpki-client