This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer File: tOfjRK3ONthPHzq8zRSyTBUSu6o.cer (raw, json) Hash identifier: GKowd14RK6D4ZdSn1MenHPAZp3KUAt70NZxh/842RY0= Subject key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D61 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft caRepository: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 11 Dec 2025 01:29:22 +0000 Certificate not after: Sat 31 Oct 2026 00:00:00 +0000 Subordinate resources: AS: 153169 IP: 2001:df4:13c0::/47 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163169 (0x27d61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 11 01:29:22 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:66:30:40:f1:6d:87:46:90:ee:ea:f1:63: 71:13:2d:f0:a1:2d:69:ce:9b:0f:f5:84:60:23:7e: 67:2c:48:74:39:2a:e7:af:92:91:c9:d2:cf:fa:50: 13:c8:0a:00:b3:3b:73:77:59:d2:2b:84:26:75:d4: a8:41:cb:9e:a8:8d:d0:70:45:48:7a:61:d0:56:3c: 28:35:c9:5c:68:6c:7c:f1:70:d3:55:6c:e1:3b:27: 0c:6a:18:8d:5e:17:e0:bc:83:da:46:f2:98:33:86: cb:ce:e1:dc:bc:e8:26:16:93:d2:eb:51:69:e6:98: 97:24:f4:90:7a:87:f7:4f:5d:da:85:42:26:d8:b7: 84:31:20:6c:16:8a:31:34:74:43:81:08:d1:3f:7a: d3:95:34:93:ab:3b:0e:bf:69:3e:f5:e3:dc:52:1a: 84:14:aa:9a:82:b4:66:33:c0:47:37:0b:b8:6f:56: fb:05:aa:97:05:ac:c4:94:50:a9:cd:40:93:cd:d0: 0d:96:b1:4e:cc:09:31:8c:9a:54:62:2b:e4:93:7f: 6e:01:4b:77:20:bd:6f:50:e1:e5:d2:55:75:5e:95: 8a:61:ef:77:cf:ea:44:de:c7:b1:38:5b:01:8f:64: 18:36:b6:c2:92:82:22:2a:86:3a:be:c2:58:a3:80: a8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153169 sbgp-ipAddrBlock: critical IPv6: 2001:df4:13c0::/47 Signature Algorithm: sha256WithRSAEncryption 22:68:96:4f:2b:dc:08:6b:76:94:19:9e:5f:c3:e1:d0:7e:b3: f4:bf:3a:85:ab:74:3d:1d:08:74:33:9c:9a:83:a6:cb:ef:d3: c0:f4:98:ef:3c:f2:bb:99:57:ea:28:1b:41:fe:96:0d:88:d4: 9a:a4:ff:01:e0:67:fb:02:dc:24:5d:58:e9:c0:7e:8b:a0:79: c2:d6:e1:08:cd:66:76:18:76:68:29:e6:3e:6b:e6:d9:51:dd: a3:78:fd:f0:fc:5c:0c:b4:d1:ce:ad:0a:d0:5c:f4:94:10:e3: 80:52:a8:68:9a:6e:a5:5b:da:33:06:7a:4e:32:76:ac:64:cc: e5:26:82:01:4e:39:ab:14:a8:a9:61:ea:7e:77:a8:08:a1:70: 11:3f:9e:32:d9:67:96:63:fd:aa:c1:a2:53:a3:b4:da:e0:08: 47:89:94:96:f3:58:74:3b:77:04:a9:e4:cb:65:33:88:61:61: dd:c0:9b:e3:3d:c6:eb:40:1e:8c:0f:5d:9d:9a:12:93:ba:bb: d2:96:14:79:5d:35:28:72:f2:e0:37:d1:0d:9c:fc:8c:7e:5f: e7:c1:8c:10:4c:49:8a:d9:7c:51:07:71:59:0a:c9:30:36:5d: 87:c0:b7:15:d7:88:23:86:d8:9f:2d:a0:53:47:1d:f4:d4:c0: 56:07:a4:df -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAn1hMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMTAxMjkyMloXDTI2MTAzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FC Q0NEMTRCMjRDMTUxMkJCQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/tmYwQPFth0aQ7urxY3ETLfChLWnOmw/1hGAjfmcsSHQ5KuevkpHJ0s/6UBPI CgCzO3N3WdIrhCZ11KhBy56ojdBwRUh6YdBWPCg1yVxobHzxcNNVbOE7JwxqGI1e F+C8g9pG8pgzhsvO4dy86CYWk9LrUWnmmJck9JB6h/dPXdqFQibYt4QxIGwWijE0 dEOBCNE/etOVNJOrOw6/aT7149xSGoQUqpqCtGYzwEc3C7hvVvsFqpcFrMSUUKnN QJPN0A2WsU7MCTGMmlRiK+STf24BS3cgvW9Q4eXSVXVelYph73fP6kTex7E4WwGP ZBg2tsKSgiIqhjq+wlijgKj1AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUtOfjRK3O NthPHzq8zRSyTBUSu6owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFCREE5LzM2QTUzMEY2NDRCRDExRUZCNzNEQjc3QkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExQkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUksz T050aFBIenE4elJTeVRCVVN1Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlZRMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEN9BPAMA0G CSqGSIb3DQEBCwUAA4IBAQAiaJZPK9wIa3aUGZ5fw+HQfrP0vzqFq3Q9HQh0M5ya g6bL79PA9JjvPPK7mVfqKBtB/pYNiNSapP8B4Gf7AtwkXVjpwH6LoHnC1uEIzWZ2 GHZoKeY+a+bZUd2jeP3w/FwMtNHOrQrQXPSUEOOAUqhomm6lW9ozBnpOMnasZMzl JoIBTjmrFKipYep+d6gIoXARP54y2WeWY/2qwaJTo7Ta4AhHiZSW81h0O3cEqeTL ZTOIYWHdwJvjPcbrQB6MD12dmhKTurvSlhR5XTUocvLgN9ENnPyMfl/nwYwQTEmK 2XxRB3FZCskwNl2HwLcV14gjhtifLaBTRx301MBWB6Tf -----END CERTIFICATE-----Generated at Fri Dec 19 17:37:24 2025 by rpki-client