This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer File: uRM0fmudd6kbsHSCrkXNdBFrAi0.cer (raw, json) Hash identifier: j8XW+nKroEOk3Pmo5DJDbd3Wc/O2mC5Bi40WBOF1svI= Subject key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D6C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft caRepository: rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 11 Dec 2025 07:20:20 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154418 IP: 2402:3ea0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163180 (0x27d6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 11 07:20:20 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:03:99:4d:39:a8:d7:1d:bf:ff:e3:ea:a0:94: 9e:33:6c:c7:22:19:78:7b:77:97:e0:fc:62:a9:46: 47:77:69:bc:a8:cd:73:b7:f7:8c:da:6a:b7:d1:e7: fa:f3:c5:33:93:e8:74:c8:7f:8b:82:af:14:60:cc: 06:6d:c0:22:13:2a:e9:d2:8e:0a:0d:f1:d6:cd:98: 45:12:45:bb:52:ab:03:8f:b0:cc:2c:52:2e:29:e1: 9d:f6:ff:ba:19:a5:f9:8d:27:8e:00:9a:4b:92:19: 26:2a:59:76:bf:80:9c:8c:60:ba:81:c1:8a:86:bb: 44:14:44:27:d7:50:e3:cb:0b:77:af:ef:c8:9a:36: 58:a1:74:36:f1:a4:70:e8:2a:a5:a1:b5:ee:65:65: b8:a8:0e:2e:e1:db:5a:03:3b:4b:26:7d:da:6f:96: 0d:a2:e7:be:5e:db:3c:a3:53:f7:31:e6:f4:ee:70: 69:22:0b:46:e8:87:77:21:ac:24:f8:22:d3:d8:e6: 3a:ff:87:a5:58:35:ba:5b:eb:b2:0c:e9:a3:37:0f: c6:f9:85:69:f1:35:05:6e:b2:6c:75:6d:7d:e0:7d: 8b:c3:1e:e5:b2:8c:a2:f1:b2:c2:a8:2a:8c:5f:04: 21:55:cb:9f:fc:e4:3e:90:bd:8f:a7:f5:3c:9a:da: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154418 sbgp-ipAddrBlock: critical IPv6: 2402:3ea0::/32 Signature Algorithm: sha256WithRSAEncryption b2:b8:c1:a3:30:92:88:7d:7b:3b:9b:e0:67:d6:e2:f8:94:40: 2f:0b:39:91:67:7e:99:6e:f9:7f:34:6a:83:88:cd:8e:d1:d1: 1e:ee:57:4d:39:d8:41:b2:18:15:f5:f0:f7:fe:e6:66:64:dd: 50:be:56:c7:49:f4:8e:ad:02:71:14:8e:96:54:46:a8:5a:3c: 5c:fc:22:d7:ac:b0:46:16:b3:89:1f:cf:85:51:ff:9b:98:e3: 48:84:32:65:5f:03:78:54:9e:1c:7f:43:37:65:b2:bb:3b:96: 7f:e2:c4:82:ca:4b:a1:97:c3:13:8f:40:74:17:6a:b3:42:ac: 39:f6:8a:61:84:f5:43:71:51:f3:dc:9d:84:b9:61:40:89:fe: 53:5b:52:91:d1:43:e4:0f:20:02:55:8d:23:f6:52:6c:d7:66: 94:43:be:f1:19:28:d5:43:a5:d5:80:c4:38:0a:2b:f3:16:25: e4:3c:22:7f:4e:fa:ea:02:1d:4a:53:99:fa:ab:a1:d6:be:e6: 09:f9:6a:47:9e:f8:78:77:22:34:87:fb:c6:db:b9:8f:11:d9: 46:e6:43:9b:e0:af:e1:85:a8:e2:df:2c:95:03:9e:cb:bf:7b: 94:2f:af:4a:7a:e4:66:6b:98:d3:5b:af:73:18:86:49:cf:59: e1:9a:ca:41 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAn1sMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMTA3MjAyMFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOUZCRjMxMTAvBgNVBAUTKEI5MTMzNDdFNkI5RDc3QTkxQkIwNzQ4 MkFFNDVDRDc0MTE2QjAyMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWA5lNOajXHb//4+qglJ4zbMciGXh7d5fg/GKpRkd3abyozXO394zaarfR5/rz xTOT6HTIf4uCrxRgzAZtwCITKunSjgoN8dbNmEUSRbtSqwOPsMwsUi4p4Z32/7oZ pfmNJ44AmkuSGSYqWXa/gJyMYLqBwYqGu0QURCfXUOPLC3ev78iaNlihdDbxpHDo KqWhte5lZbioDi7h21oDO0smfdpvlg2i575e2zyjU/cx5vTucGkiC0boh3chrCT4 ItPY5jr/h6VYNbpb67IM6aM3D8b5hWnxNQVusmx1bX3gfYvDHuWyjKLxssKoKoxf BCFVy5/85D6QvY+n9Tya2pBHAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUuRM0fmud d6kbsHSCrkXNdBFrAi0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlGQkYzL0VFNjI5Njk0RDY2MDExRjBCMkE1NEI5NTBCQjQzRTEzLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5RkJGMy9FRTYyOTY5NEQ2NjAxMUYwQjJBNTRCOTUwQkI0M0UxMy91Uk0wZm11 ZGQ2a2JzSFNDcmtYTmRCRnJBaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlsyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAI+oDANBgkq hkiG9w0BAQsFAAOCAQEAsrjBozCSiH17O5vgZ9bi+JRALws5kWd+mW75fzRqg4jN jtHRHu5XTTnYQbIYFfXw9/7mZmTdUL5Wx0n0jq0CcRSOllRGqFo8XPwi16ywRhaz iR/PhVH/m5jjSIQyZV8DeFSeHH9DN2WyuzuWf+LEgspLoZfDE49AdBdqs0KsOfaK YYT1Q3FR89ydhLlhQIn+U1tSkdFD5A8gAlWNI/ZSbNdmlEO+8Rko1UOl1YDEOAor 8xYl5Dwif0766gIdSlOZ+quh1r7mCflqR574eHciNIf7xtu5jxHZRuZDm+Cv4YWo 4t8slQOey797lC+vSnrkZmuY01uvcxiGSc9Z4ZrKQQ== -----END CERTIFICATE-----Generated at Fri Dec 19 16:06:30 2025 by rpki-client