This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer File: x7Jkc1A4Cmo0404yzv41GZN-l8g.cer (raw, json) Hash identifier: 7nk1B1ZoUlzYrnwpUh6ii75Qns4Fj2QXL9YYh6tMUE0= Subject key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027CAE Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft caRepository: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 13:07:30 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 55821 AS: 152326 IP: 27.126.152.0/22 IP: 45.114.132.0/22 IP: 103.5.4.0/22 IP: 103.16.168.0/22 IP: 103.54.84.0/22 IP: 110.235.128.0/18 IP: 203.96.180.0/22 IP: 2400:6a80::/31 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162990 (0x27cae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 8 13:07:30 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:e2:f0:4b:e4:bc:9c:7c:36:58:e9:a9:b6: 59:3b:4f:69:2e:ba:64:a6:2d:82:12:96:94:c9:a1: f4:21:87:7a:ab:f4:d1:ea:f0:84:4c:ed:8f:6a:e9: 88:92:f0:24:fd:75:c2:e0:61:db:e4:74:06:10:fe: 4c:0f:ff:06:5a:48:db:38:4f:47:fb:cb:eb:66:3c: a0:74:04:e6:ac:21:35:e2:45:70:b8:0a:02:e5:b8: 64:eb:93:6f:db:d1:01:31:2f:7b:9b:a6:65:db:0c: db:8e:b3:a0:6b:55:03:68:ae:25:41:07:7c:14:02: 70:97:72:27:ea:b6:66:08:b9:87:41:20:4f:7f:ee: 48:cc:74:c5:e4:96:92:7d:15:bb:bb:7d:49:be:d2: d9:de:f3:60:af:bc:a2:c0:18:82:72:cb:32:86:e7: 4d:ee:50:af:46:be:da:b0:50:a7:3f:9d:24:ed:eb: a0:c5:0f:0d:91:0f:34:01:7f:d5:bc:a3:d0:7b:d6: 2b:27:a5:0e:d7:4d:c1:27:56:a2:93:f2:ef:b3:bb: 89:88:79:a3:ff:29:bf:0b:8b:51:cc:25:02:e0:df: 69:db:06:68:24:7c:b8:42:5f:35:d3:36:b3:db:14: af:30:be:fb:ed:bb:0e:3c:64:72:9e:b0:5f:46:bf: 09:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 55821 152326 sbgp-ipAddrBlock: critical IPv4: 27.126.152.0/22 45.114.132.0/22 103.5.4.0/22 103.16.168.0/22 103.54.84.0/22 110.235.128.0/18 203.96.180.0/22 IPv6: 2400:6a80::/31 Signature Algorithm: sha256WithRSAEncryption 53:e2:25:1e:ad:16:79:f8:7e:05:6c:12:b8:2d:7f:0d:72:f0: 03:a3:e7:22:c7:51:c1:e5:bd:8e:60:05:52:b6:fb:70:3e:06: 6b:77:f9:38:96:27:b3:47:38:5e:16:34:95:41:e4:19:65:bb: 58:50:bb:fe:fb:42:49:ee:00:28:2f:b0:c7:b0:e5:08:f4:eb: 1b:b0:90:be:cb:08:0f:bc:24:2d:b9:ab:3a:21:4f:b1:85:5b: fb:e8:83:51:fd:98:bf:8f:a4:c9:a2:d0:3b:b7:c7:80:15:97: bf:6b:07:7a:25:4f:50:02:02:e8:a7:16:f7:1b:a4:a9:5e:c4: aa:3a:65:91:ac:3a:eb:0e:dd:28:de:a0:f2:e8:f2:69:53:4e: 1b:eb:d8:e6:3b:c7:a3:e3:63:e2:fe:25:d2:d0:e6:d4:86:a6: 89:61:0e:b5:a0:76:ba:50:0e:bf:a0:8f:80:93:69:ed:38:cf: 31:cb:50:b8:a2:38:34:da:92:b7:7e:b8:02:11:61:f9:f0:3e: 9d:54:ec:60:9f:1f:1f:31:9e:3f:8f:39:9f:82:cd:c6:f8:21: 8a:aa:65:81:e5:bb:db:df:7c:b3:28:de:43:eb:3d:c2:e8:ba: b0:9e:2e:77:83:7a:3b:d9:3c:15:38:e2:21:2b:06:58:bc:7d: ae:f8:52:58 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIDAnyuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwODEzMDczMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNDRGNTkxMTAvBgNVBAUTKEM3QjI2NDczNTAzODBBNkEzNEUzNEUz MkNFRkUzNTE5OTM3RTk3QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDFuLwS+S8nHw2WOmptlk7T2kuumSmLYISlpTJofQhh3qr9NHq8IRM7Y9q6YiS 8CT9dcLgYdvkdAYQ/kwP/wZaSNs4T0f7y+tmPKB0BOasITXiRXC4CgLluGTrk2/b 0QExL3ubpmXbDNuOs6BrVQNoriVBB3wUAnCXcifqtmYIuYdBIE9/7kjMdMXklpJ9 Fbu7fUm+0tne82CvvKLAGIJyyzKG503uUK9GvtqwUKc/nSTt66DFDw2RDzQBf9W8 o9B71isnpQ7XTcEnVqKT8u+zu4mIeaP/Kb8Li1HMJQLg32nbBmgkfLhCXzXTNrPb FK8wvvvtuw48ZHKesF9GvwmBAgMBAAGjggNHMIIDQzAdBgNVHQ4EFgQUx7Jkc1A4 Cmo0404yzv41GZN+l8gwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ0RjU5LzRCOTU4QkNFMDBDQjExRThCRUIxRUYxMEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0NEY1OS80Qjk1OEJDRTAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFB NENtbzA0MDR5enY0MUdaTi1sOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDANoNAgMCUwYwUgYIKwYBBQUHAQcBAf8EQzBBMDAEAgABMCoDBAIbfpgD BAItcoQDBAJnBQQDBAJnEKgDBAJnNlQDBAZu64ADBALLYLQwDQQCAAIwBwMFASQA aoAwDQYJKoZIhvcNAQELBQADggEBAFPiJR6tFnn4fgVsErgtfw1y8AOj5yLHUcHl vY5gBVK2+3A+Bmt3+TiWJ7NHOF4WNJVB5Bllu1hQu/77QknuACgvsMew5Qj06xuw kL7LCA+8JC25qzohT7GFW/vog1H9mL+PpMmi0Du3x4AVl79rB3olT1ACAuinFvcb pKlexKo6ZZGsOusO3SjeoPLo8mlTThvr2OY7x6PjY+L+JdLQ5tSGpolhDrWgdrpQ Dr+gj4CTae04zzHLULiiODTakrd+uAIRYfnwPp1U7GCfHx8xnj+POZ+Czcb4IYqq ZYHlu9vffLMo3kPrPcLourCeLneDejvZPBU44iErBli8fa74Ulg= -----END CERTIFICATE-----Generated at Fri Dec 19 16:05:57 2025 by rpki-client