This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer File: uttpn6AqlXLm70n0-Rof4Kc8LI0.cer (raw, json) Hash identifier: 7XbjNmVaErkUAaeOutXr5b6M6q10fXX9R3prWe6Viig= Subject key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027CE4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 19:48:55 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 24321 IP: 202.73.8.0/22 IP: 202.87.216.0/22 IP: 2407:6000::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163044 (0x27ce4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 8 19:48:55 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91E27B9, serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f9:fe:e8:14:bd:5f:92:f1:c0:2d:2d:2f:33: 9c:e1:cb:c1:0a:d0:dd:32:d9:95:ca:6a:c9:08:f1: 67:aa:b6:be:0b:5e:7d:7a:8c:fa:28:74:7c:a3:f8: e2:49:ab:fa:31:1f:88:70:7f:76:ba:b8:5f:c8:59: 66:2e:6a:2b:0c:d8:27:a5:c5:33:c4:15:9a:a1:26: 99:02:cd:c3:62:b5:1f:46:49:fd:5f:bb:56:6c:db: 64:69:9c:23:19:6e:e4:e7:03:46:56:43:c0:08:3b: ac:84:f0:1e:00:3f:70:55:47:7b:80:8c:8a:db:6f: 0e:f3:9e:a3:68:42:89:5b:ac:09:d2:c8:f7:bf:33: 9e:74:e1:ce:26:14:97:37:ae:42:a0:1e:01:3a:15: 35:1f:c8:52:bc:db:cc:c1:76:cb:6e:d3:bd:0a:c1: 77:20:a8:bb:19:21:34:b0:c4:f9:16:15:14:78:25: 24:ca:f9:98:fd:d9:f1:37:e1:91:c9:ec:ec:9a:ff: 67:3c:d5:89:02:54:1e:70:98:ed:1a:fd:73:a7:bf: 0f:7b:4f:79:a1:93:5d:fb:e7:75:ab:5a:a3:6b:a4: 0b:30:d7:7c:64:39:c1:45:c5:96:2a:49:56:2e:e0: e1:9a:06:78:ab:14:92:99:db:da:42:38:f0:dd:5c: 74:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24321 sbgp-ipAddrBlock: critical IPv4: 202.73.8.0/22 202.87.216.0/22 IPv6: 2407:6000::/32 Signature Algorithm: sha256WithRSAEncryption 49:79:8d:81:fd:2d:0c:1b:65:0a:94:a7:2d:a7:96:32:a3:78: 3c:cc:87:69:96:bb:53:da:aa:da:d5:a0:a6:6a:7c:a5:1c:57: bd:48:18:eb:1b:d1:c7:ef:23:f0:87:e0:3e:e5:bb:1f:b6:8c: 51:ba:fc:09:4a:5b:c9:30:7f:34:9c:36:d2:0f:0a:1a:45:5b: b2:ac:b3:d9:64:c8:2c:27:19:21:94:0e:93:ca:8c:04:d0:9d: db:a4:16:0f:39:19:39:49:2d:33:ae:90:ca:b4:82:96:f1:d8: 13:e7:83:ed:67:e0:c9:d1:ca:94:d4:68:5c:f8:f0:09:9a:3e: c0:dd:24:74:f6:62:f6:f6:08:c6:a7:a8:a7:2a:5b:c8:80:b7: 7b:1f:d2:ca:85:06:b9:f6:7e:5b:69:d6:33:56:f7:7c:7d:c0: d4:49:ec:37:99:a2:cb:69:84:9b:7b:dc:93:98:fe:b2:c1:c5: 71:fa:86:d5:84:b9:00:0e:02:b1:fb:4d:40:26:97:33:06:8f: 60:37:09:21:9a:63:d0:3f:98:13:ce:e0:cf:75:ff:ad:e2:60: 41:9b:dd:c6:2f:80:3a:d9:44:b0:26:18:cc:76:0b:57:34:f2: ba:b3:69:e4:a9:20:9e:88:85:56:c9:2d:5a:9f:07:87:84:23: 85:9c:7c:35 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIDAnzkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwODE5NDg1NVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTI3QjkxMTAvBgNVBAUTKEJBREI2OTlGQTAyQTk1NzJFNkVGNDlG NEY5MUExRkUwQTczQzJDOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy+f7oFL1fkvHALS0vM5zhy8EK0N0y2ZXKaskI8Weqtr4LXn16jPoodHyj+OJJ q/oxH4hwf3a6uF/IWWYuaisM2CelxTPEFZqhJpkCzcNitR9GSf1fu1Zs22RpnCMZ buTnA0ZWQ8AIO6yE8B4AP3BVR3uAjIrbbw7znqNoQolbrAnSyPe/M5504c4mFJc3 rkKgHgE6FTUfyFK828zBdstu070KwXcgqLsZITSwxPkWFRR4JSTK+Zj92fE34ZHJ 7Oya/2c81YkCVB5wmO0a/XOnvw97T3mhk13753WrWqNrpAsw13xkOcFFxZYqSVYu 4OGaBnirFJKZ29pCOPDdXHTJAgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQUuttpn6Aq lXLm70n0+Rof4Kc8LI0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUyN0I5Lzg0QkE3NDgyRjBDRTExRUE4OTFCMkM3NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMjdCOS84NEJBNzQ4MkYwQ0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZB cWxYTG03MG4wLVJvZjRLYzhMSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICXwEwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBALKSQgDBALKV9gw DQQCAAIwBwMFACQHYAAwDQYJKoZIhvcNAQELBQADggEBAEl5jYH9LQwbZQqUpy2n ljKjeDzMh2mWu1PaqtrVoKZqfKUcV71IGOsb0cfvI/CH4D7lux+2jFG6/AlKW8kw fzScNtIPChpFW7Kss9lkyCwnGSGUDpPKjATQndukFg85GTlJLTOukMq0gpbx2BPn g+1n4MnRypTUaFz48AmaPsDdJHT2Yvb2CManqKcqW8iAt3sf0sqFBrn2fltp1jNW 93x9wNRJ7DeZostphJt73JOY/rLBxXH6htWEuQAOArH7TUAmlzMGj2A3CSGaY9A/ mBPO4M91/63iYEGb3cYvgDrZRLAmGMx2C1c08rqzaeSpIJ6IhVbJLVqfB4eEI4Wc fDU= -----END CERTIFICATE-----Generated at Fri Dec 19 17:29:37 2025 by rpki-client