This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer File: l0ZNOjIvAGf4rOO3dak6_rn8iew.cer (raw, json) Hash identifier: IP48nQKqNG9rJQCs2lPBT4ubV8q8oBzYwDueljIBJxE= Subject key identifier: 97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D71 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 11 Dec 2025 12:07:28 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154417 IP: 2001:df6:6e40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163185 (0x27d71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 11 12:07:28 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91A9E58, serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ac:3a:33:d4:e5:30:06:2e:71:58:0d:30:2b: 56:e6:53:6b:00:c5:60:e2:2e:fe:41:f8:5e:61:48: af:99:fc:df:e1:ea:e8:db:03:3e:46:fa:a0:43:09: ef:58:c1:b8:9a:f4:ec:80:ad:99:1c:22:61:a8:b8: e5:fa:a5:89:12:9d:02:72:e6:ef:9e:eb:32:47:53: 7f:95:d8:71:3b:52:14:66:41:35:39:62:f4:d2:b7: 23:ba:a9:2c:dd:8c:eb:18:ae:f1:2e:06:7e:12:9c: 33:43:d2:89:75:39:10:99:b9:62:cc:4b:1e:2c:b8: d8:b8:ad:ff:48:29:56:d3:9b:5d:17:8a:15:79:19: 8b:c1:50:e2:33:18:33:bd:99:bc:49:42:7e:01:49: 68:94:ef:7e:22:03:a6:d4:fb:81:8c:39:b4:27:cd: 6b:4a:eb:2c:51:97:7f:0f:d5:1a:63:8e:7d:44:c0: 06:60:6d:0d:45:3b:a5:16:3e:f0:2a:4e:e2:46:62: 32:ca:d6:53:07:5c:a6:fe:3e:a6:7e:0b:e9:8c:9b: 58:a9:e6:da:ed:5d:7f:d1:72:92:20:52:95:92:de: ff:63:8b:35:79:96:69:0e:b9:32:8e:94:f8:52:21: 3c:5d:08:26:02:6d:91:fc:12:1c:df:4e:65:fa:e0: a8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154417 sbgp-ipAddrBlock: critical IPv6: 2001:df6:6e40::/48 Signature Algorithm: sha256WithRSAEncryption a3:0c:43:52:7a:72:ad:1c:d1:9e:bf:c5:d3:b2:31:0d:30:38: 1c:74:7d:50:71:a5:33:4a:7a:d3:48:45:63:3d:ca:d3:ad:c0: 81:e0:88:6e:3b:96:a8:bb:c4:66:76:92:a3:1e:c7:3f:91:ca: f7:1b:25:16:5f:f9:05:3a:82:ea:ba:f0:e6:48:53:98:63:38: 56:62:bf:73:2a:18:67:62:9b:2e:4b:87:21:80:34:22:de:56: ac:c3:4e:70:32:95:91:2f:65:ba:e1:35:4a:39:cf:24:a4:64: f2:9b:ac:8c:bc:30:88:19:36:cb:6c:55:a7:2b:1e:cd:f4:ba: 51:b2:6a:92:d6:0d:53:37:40:86:ab:b6:66:f1:8b:69:8b:ae: b0:61:2e:84:b0:df:c3:e1:fd:bc:ea:ae:65:a9:3c:05:64:a2: f3:d2:de:94:27:18:cc:11:fd:0e:e9:62:7e:7f:6b:05:17:6c: 2e:95:6a:98:56:7a:62:cd:aa:01:f6:df:9a:2a:67:9e:b1:37: 43:77:6b:76:21:34:de:60:6e:4b:3f:f9:14:0e:a5:f7:23:c4: 85:c0:61:e9:d7:5f:7e:1c:42:d1:dd:c1:7c:e4:e4:d1:84:99: b4:f8:67:c2:09:64:45:03:37:48:a7:45:64:14:c9:48:08:50: a3:7f:06:03 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAn1xMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMTEyMDcyOFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQTlFNTgxMTAvBgNVBAUTKDk3NDY0RDNBMzIyRjAwNjdGOEFDRTNC Nzc1QTkzQUZFQjlGQzg5RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDarDoz1OUwBi5xWA0wK1bmU2sAxWDiLv5B+F5hSK+Z/N/h6ujbAz5G+qBDCe9Y wbia9OyArZkcImGouOX6pYkSnQJy5u+e6zJHU3+V2HE7UhRmQTU5YvTStyO6qSzd jOsYrvEuBn4SnDND0ol1ORCZuWLMSx4suNi4rf9IKVbTm10XihV5GYvBUOIzGDO9 mbxJQn4BSWiU734iA6bU+4GMObQnzWtK6yxRl38P1Rpjjn1EwAZgbQ1FO6UWPvAq TuJGYjLK1lMHXKb+PqZ+C+mMm1ip5trtXX/RcpIgUpWS3v9jizV5lmkOuTKOlPhS ITxdCCYCbZH8EhzfTmX64KhHAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUl0ZNOjIv AGf4rOO3dak6/rn8iewwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE5RTU4L0Y0NDhDOTc0RDY4OTExRjBCOUE4MzcwMzZDRDM2NDFELzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBOUU1OC9GNDQ4Qzk3NEQ2ODkxMUYwQjlBODM3MDM2Q0QzNjQxRC9sMFpOT2pJ dkFHZjRyT08zZGFrNl9ybjhpZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlsxMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9m5AMA0G CSqGSIb3DQEBCwUAA4IBAQCjDENSenKtHNGev8XTsjENMDgcdH1QcaUzSnrTSEVj PcrTrcCB4IhuO5aou8RmdpKjHsc/kcr3GyUWX/kFOoLquvDmSFOYYzhWYr9zKhhn YpsuS4chgDQi3lasw05wMpWRL2W64TVKOc8kpGTym6yMvDCIGTbLbFWnKx7N9LpR smqS1g1TN0CGq7Zm8Ytpi66wYS6EsN/D4f286q5lqTwFZKLz0t6UJxjMEf0O6WJ+ f2sFF2wulWqYVnpizaoB9t+aKmeesTdDd2t2ITTeYG5LP/kUDqX3I8SFwGHp119+ HELR3cF85OTRhJm0+GfCCWRFAzdIp0VkFMlICFCjfwYD -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:08 2025 by rpki-client