This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer File: oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer (raw, json) Hash identifier: y/dkTw7525Ih1gOFgjd1PeP7OKQ2TacGp/U4xocy+a8= Subject key identifier: A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027DF1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sat 13 Dec 2025 14:46:13 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 153391 IP: 2401:d320::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163313 (0x27df1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 13 14:46:13 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91EE5E5, serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:a3:1f:19:d9:d7:ae:26:06:19:f4:6d:ed: 9e:f1:a2:e0:fc:2b:93:b5:b6:e4:b6:0d:bf:7a:75: c1:9b:e9:86:62:ab:b3:e6:48:0e:1a:d0:45:d2:3f: 31:37:4f:5f:27:29:47:30:6f:a8:df:4a:53:8a:56: 4c:aa:6f:40:34:9a:d9:20:b7:5f:c5:3d:48:71:b5: 94:4f:73:0f:67:db:bd:c7:15:27:3b:f7:1a:f2:80: ff:ec:56:0c:6d:75:8a:90:20:b2:16:bf:b2:82:c4: 3d:15:38:aa:e4:3b:a4:a4:30:71:4c:6d:a0:37:b4: d5:f8:a9:f8:a8:c6:34:92:b9:44:8c:19:d7:c2:ed: a2:7d:2f:3a:92:72:8a:e9:a5:a7:52:d9:45:51:a6: 05:c3:55:89:93:0a:02:1d:19:e0:b7:90:3a:08:11: 8f:e9:79:85:5d:0c:ab:68:5c:fe:8e:e2:8c:95:2e: 24:7c:4b:9c:7a:e2:33:f1:f4:d6:16:5a:fd:38:fe: b3:46:d3:b0:f4:81:a8:8e:fd:61:a6:90:ca:6c:28: 73:8f:27:f7:e1:ff:11:26:72:e7:68:dc:be:f0:eb: 4c:b1:f2:d3:56:b9:f0:da:a4:14:a4:ea:4c:b0:e9: da:f0:6f:79:de:60:e2:d1:5e:eb:22:46:e7:c3:15: b4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153391 sbgp-ipAddrBlock: critical IPv6: 2401:d320::/32 Signature Algorithm: sha256WithRSAEncryption 02:e8:0b:55:9d:04:69:87:46:a4:9f:a4:87:f5:52:f6:0b:33: 6f:44:9a:ea:ce:24:9f:af:de:64:03:99:4a:92:ba:d2:5c:b7: 50:ba:da:14:ad:00:43:1e:d7:20:53:9f:b1:40:78:45:ff:95: fc:f4:dc:0f:fb:6b:f3:02:3f:ce:6a:2e:bd:8f:c3:06:5a:f3: a3:21:9d:4b:7e:b4:2a:a4:dc:0a:dd:f1:82:81:48:37:7d:ca: 0c:0a:ba:fd:0e:30:7d:27:d1:6e:8e:dc:a2:2f:18:92:39:20: a8:a5:b6:0e:50:1d:ce:a5:a3:9c:a1:db:a7:91:41:5c:1f:6d: 20:fa:46:17:90:35:10:3f:30:38:5f:0d:7e:55:a9:58:03:15: 3e:af:5c:d0:1e:75:51:06:6b:54:af:ae:5f:f5:ca:af:49:47: 89:5b:89:fd:1e:c9:38:63:2d:b4:44:05:b3:9f:ec:7c:b1:e5: 11:e1:aa:bf:e2:b3:c5:72:c6:3f:be:fa:5f:6c:95:eb:be:fe: 0e:d0:3e:d2:54:4e:17:d0:f3:78:be:62:d0:3e:fe:53:89:b2: 39:ee:71:32:12:31:60:cf:27:71:e9:1a:12:d0:96:2c:3d:6f: 0f:37:f6:19:f4:9e:84:ff:f2:85:10:74:f1:af:71:b1:98:f2: 08:9a:a2:59 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAn3xMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMzE0NDYxM1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRUU1RTUxMTAvBgNVBAUTKEEwMEUwMkRDNzgzRjkwODQwMjFERjk0 Rjc1ODYyNjRFQzQ3RDM0MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAHqMfGdnXriYGGfRt7Z7xouD8K5O1tuS2Db96dcGb6YZiq7PmSA4a0EXSPzE3 T18nKUcwb6jfSlOKVkyqb0A0mtkgt1/FPUhxtZRPcw9n273HFSc79xrygP/sVgxt dYqQILIWv7KCxD0VOKrkO6SkMHFMbaA3tNX4qfioxjSSuUSMGdfC7aJ9LzqScorp padS2UVRpgXDVYmTCgIdGeC3kDoIEY/peYVdDKtoXP6O4oyVLiR8S5x64jPx9NYW Wv04/rNG07D0gaiO/WGmkMpsKHOPJ/fh/xEmcudo3L7w60yx8tNWufDapBSk6kyw 6drwb3neYOLRXusiRufDFbQRAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUoA4C3Hg/ kIQCHflPdYYmTsR9NDgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVFNUU1L0Y5N0JDMzAyQUZCRjExRUZBMjhBMzY1NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFRTVFNS9GOTdCQzMwMkFGQkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hn X2tJUUNIZmxQZFlZbVRzUjlORGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlcvMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHTIDANBgkq hkiG9w0BAQsFAAOCAQEAAugLVZ0EaYdGpJ+kh/VS9gszb0Sa6s4kn6/eZAOZSpK6 0ly3ULraFK0AQx7XIFOfsUB4Rf+V/PTcD/tr8wI/zmouvY/DBlrzoyGdS360KqTc Ct3xgoFIN33KDAq6/Q4wfSfRbo7coi8YkjkgqKW2DlAdzqWjnKHbp5FBXB9tIPpG F5A1ED8wOF8NflWpWAMVPq9c0B51UQZrVK+uX/XKr0lHiVuJ/R7JOGMttEQFs5/s fLHlEeGqv+KzxXLGP776X2yV677+DtA+0lROF9DzeL5i0D7+U4myOe5xMhIxYM8n cekaEtCWLD1vDzf2GfSehP/yhRB08a9xsZjyCJqiWQ== -----END CERTIFICATE-----Generated at Fri Dec 19 17:38:47 2025 by rpki-client