This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer File: sceOjrQ5MbA-kLu1U1edee0Z_VA.cer (raw, json) Hash identifier: AbgIAN8iqOWzx18sQaEp39avM6sboWz+z24FVt1jm1Y= Subject key identifier: B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027CA5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft caRepository: rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 06:08:10 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154399 IP: 2402:3da0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162981 (0x27ca5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 8 06:08:10 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9126BDE, serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:59:d7:ac:8c:ca:58:fa:5b:6e:74:aa:5e: af:0f:42:2d:e4:b3:a2:73:c7:9e:0d:7e:94:43:5d: e3:67:86:5d:f6:6e:3c:1e:ea:3e:39:e9:03:6d:1e: 8d:15:2f:ff:39:94:7d:dd:96:8d:52:16:0c:f5:24: 3a:d2:29:4d:56:9e:54:4d:db:c4:4b:4a:37:8c:96: aa:cc:ed:ab:fa:00:0c:c4:c0:7a:48:2a:70:48:f7: fb:06:87:54:90:d6:e0:01:3b:8f:49:7f:52:05:56: 08:ea:2f:cb:dc:6e:f1:d5:2e:6a:6b:e7:65:40:e5: 8b:ce:c4:6c:36:94:27:5e:16:1d:9d:35:18:7b:43: 34:e1:c3:b3:0a:46:8b:c9:40:04:0c:cf:7e:f9:95: f9:13:ed:c6:a7:19:6d:f4:01:c7:7a:d5:3e:a0:af: a8:0a:5b:fe:cd:49:2b:02:ec:bd:0d:b3:23:18:52: 7f:9d:64:e2:c7:c0:49:f5:4e:56:bd:4c:45:e4:3b: 41:83:53:d3:46:72:06:3b:d0:dc:cb:20:c7:81:85: b9:c2:05:84:1a:f6:83:38:ae:fd:a2:18:12:5d:21: d1:d1:9d:e3:a0:b7:e2:75:e4:e5:40:2b:18:a6:60: 54:49:1c:e1:80:fe:68:ce:91:e9:98:28:dc:b6:07: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154399 sbgp-ipAddrBlock: critical IPv6: 2402:3da0::/32 Signature Algorithm: sha256WithRSAEncryption 9c:50:80:d1:61:81:60:f6:36:6c:af:9b:82:10:ec:06:9e:82: 46:56:e6:4a:9b:95:7a:a8:6c:f8:f6:ec:12:3b:95:69:52:86: 2a:b1:66:76:3e:76:df:a6:8f:c2:0b:0b:ce:01:ea:00:47:10: 14:d8:4b:e2:cf:ce:f2:37:fe:94:f7:95:81:5c:14:35:c8:5b: 1f:af:82:c6:0f:3f:75:a4:71:c1:cb:26:c2:9e:5a:fb:d6:52: d3:44:8b:9e:e0:67:25:03:b9:56:9a:e5:21:16:99:a2:5c:d4: 01:f4:2a:fa:a0:d7:5c:26:b0:27:0d:1b:aa:29:82:03:b5:9d: f2:d2:42:c5:d2:f1:ef:b6:d1:39:52:20:70:00:a7:a8:6d:67: e0:ae:f8:ec:9d:14:bd:d5:b3:f9:e1:85:1a:43:25:fc:fd:fa: 72:17:61:97:aa:3b:67:9d:e1:b2:0c:20:7f:75:46:8f:5e:56: 6e:c6:17:6d:3b:5d:52:33:34:b7:d6:cf:06:47:cf:5e:68:8c: ab:9c:67:44:2b:d2:c0:09:f1:59:96:22:e9:6e:ac:f5:3e:96: a5:7e:08:ad:ec:de:98:74:85:46:31:79:85:58:06:23:e2:b1: e7:be:81:1c:6f:e0:99:7a:7d:5e:4b:8a:79:c1:6b:48:0a:ac: 23:ee:3e:64 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAnylMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwODA2MDgxMFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMjZCREUxMTAvBgNVBAUTKEIxQzc4RThFQjQzOTMxQjAzRTkwQkJC NTUzNTc5RDc5RUQxOUZENTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDVlnXrIzKWPpbbnSqXq8PQi3ks6Jzx54NfpRDXeNnhl32bjwe6j456QNtHo0V L/85lH3dlo1SFgz1JDrSKU1WnlRN28RLSjeMlqrM7av6AAzEwHpIKnBI9/sGh1SQ 1uABO49Jf1IFVgjqL8vcbvHVLmpr52VA5YvOxGw2lCdeFh2dNRh7QzThw7MKRovJ QAQMz375lfkT7canGW30Acd61T6gr6gKW/7NSSsC7L0NsyMYUn+dZOLHwEn1Tla9 TEXkO0GDU9NGcgY70NzLIMeBhbnCBYQa9oM4rv2iGBJdIdHRneOgt+J15OVAKxim YFRJHOGA/mjOkemYKNy2B7PfAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUsceOjrQ5 MbA+kLu1U1edee0Z/VAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI2QkRFLzQzNUJGMUFDRDNGQzExRjBCOUY5NjQzMkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyNkJERS80MzVCRjFBQ0QzRkMxMUYwQjlGOTY0MzJDNEY5QUUwMi9zY2VPanJR NU1iQS1rTHUxVTFlZGVlMFpfVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlsfMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAI9oDANBgkq hkiG9w0BAQsFAAOCAQEAnFCA0WGBYPY2bK+bghDsBp6CRlbmSpuVeqhs+PbsEjuV aVKGKrFmdj5236aPwgsLzgHqAEcQFNhL4s/O8jf+lPeVgVwUNchbH6+Cxg8/daRx wcsmwp5a+9ZS00SLnuBnJQO5VprlIRaZolzUAfQq+qDXXCawJw0bqimCA7Wd8tJC xdLx77bROVIgcACnqG1n4K747J0UvdWz+eGFGkMl/P36chdhl6o7Z53hsgwgf3VG j15WbsYXbTtdUjM0t9bPBkfPXmiMq5xnRCvSwAnxWZYi6W6s9T6WpX4IrezemHSF RjF5hVgGI+Kx576BHG/gmXp9XkuKecFrSAqsI+4+ZA== -----END CERTIFICATE-----Generated at Fri Dec 19 17:40:21 2025 by rpki-client