This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer File: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer (raw, json) Hash identifier: DU5G84huymWOkM8S/NvbRXmDpPAfn3xX1Pr3+m8tyCw= Subject key identifier: C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F3F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 18 Dec 2025 23:30:01 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 153390 IP: 2401:d360::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163647 (0x27f3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 18 23:30:01 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A913EF9C, serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:55:95:a8:53:a0:47:42:df:2a:b3:44:c4:d5: 04:73:2f:7d:99:00:ff:cb:19:7e:a9:98:f9:42:85: 0a:3f:b2:d8:ce:ca:60:87:d9:df:c0:00:83:7b:18: d1:42:5f:fd:2a:ba:d9:cd:9a:a7:a5:f7:a5:39:7b: 23:98:f8:fd:26:62:28:39:c2:66:7a:4e:9e:2f:cd: ed:25:bc:fb:3b:01:36:b5:db:d7:ea:19:6e:8f:fa: 8e:16:e0:f9:63:35:72:3d:23:71:ec:fd:a2:06:b2: e1:69:b3:9b:46:84:fa:c7:6b:3e:ad:5e:40:69:e7: 3a:1d:fb:7d:e8:06:3f:c7:f6:8b:b3:83:98:a0:f9: e0:24:47:63:58:48:84:8d:90:e8:11:d0:48:b9:3f: e2:0f:6e:50:45:fb:a8:e5:ff:79:8a:20:cd:69:d0: b0:be:a5:4c:f0:e8:07:31:c6:9e:cc:e5:e5:56:b3: 98:e3:7d:0f:71:b3:a5:9b:1b:e1:cd:64:ea:f6:72: c5:8d:bb:fb:02:13:3c:0d:b2:1d:93:d0:0c:30:c2: 40:e7:88:74:85:29:7f:78:3b:8a:48:b6:a5:44:7a: 2e:18:68:83:fc:9a:de:7e:27:4f:80:90:12:2c:2a: 8d:34:45:31:7e:2b:2b:a6:d9:e8:17:30:9d:15:51: 0a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153390 sbgp-ipAddrBlock: critical IPv6: 2401:d360::/32 Signature Algorithm: sha256WithRSAEncryption 57:fa:8b:a7:ed:e8:83:cf:1a:16:c3:cc:8c:eb:e3:f9:9b:d0: f2:d6:17:c7:5c:82:92:cc:1a:ff:cf:10:3e:bb:72:bc:8f:13: 04:73:6f:96:75:cc:5c:f5:24:ee:9f:de:80:83:ff:80:a7:75: 81:cc:15:06:4a:b9:de:8a:ee:0c:3f:8e:1e:b5:68:07:13:b7: d8:62:b7:d3:73:e8:16:88:48:d3:31:29:b4:b2:1a:db:75:5d: 89:10:fa:06:cd:9f:7e:cc:01:b5:60:cb:9a:a0:c5:7a:c2:4f: ee:b7:51:12:c5:31:12:2e:66:ec:c9:6e:a8:b2:c5:3f:b7:3e: b0:00:95:8d:d9:54:7f:26:09:a4:63:06:a6:d2:5b:5c:75:ba: 35:67:5f:55:68:2d:78:7d:d3:d2:05:f2:5e:cd:75:f8:dd:dd: ba:fa:60:f0:11:38:f3:0f:8c:d9:12:d9:4c:5e:74:c4:1e:d4: 69:af:ed:c8:66:3d:46:a6:e3:8d:d4:94:44:f8:1c:f1:2a:41: c7:d9:c9:62:6c:86:e6:60:5a:8a:ed:a2:a4:0a:03:d8:1e:60: cb:da:74:25:b4:a9:f4:cf:1a:2e:2e:8b:05:42:28:95:18:45: 08:a8:eb:4b:27:56:c4:a3:88:80:05:90:a9:89:b8:67:46:97: b0:e9:80:86 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAn8/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxODIzMzAwMVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxM0VGOUMxMTAvBgNVBAUTKEM0NDM5REMwMUUyMEQxNkNDNUEwRUY5 ODE3RDQxQkY2Mjg5NzY1MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkVZWoU6BHQt8qs0TE1QRzL32ZAP/LGX6pmPlChQo/stjOymCH2d/AAIN7GNFC X/0qutnNmqel96U5eyOY+P0mYig5wmZ6Tp4vze0lvPs7ATa129fqGW6P+o4W4Plj NXI9I3Hs/aIGsuFps5tGhPrHaz6tXkBp5zod+33oBj/H9ouzg5ig+eAkR2NYSISN kOgR0Ei5P+IPblBF+6jl/3mKIM1p0LC+pUzw6Acxxp7M5eVWs5jjfQ9xs6WbG+HN ZOr2csWNu/sCEzwNsh2T0AwwwkDniHSFKX94O4pItqVEei4YaIP8mt5+J0+AkBIs Ko00RTF+Kyum2egXMJ0VUQpzAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUxEOdwB4g 0WzFoO+YF9Qb9iiXZSQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNFRjlDL0NEMkNBOEY4RDNFQTExRUZBNjZDNDc2MEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzRUY5Qy9DRDJDQThGOEQzRUExMUVGQTY2QzQ3NjBDNEY5QUUwMi94RU9kd0I0 ZzBXekZvTy1ZRjlRYjlpaVhaU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlcuMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHTYDANBgkq hkiG9w0BAQsFAAOCAQEAV/qLp+3og88aFsPMjOvj+ZvQ8tYXx1yCkswa/88QPrty vI8TBHNvlnXMXPUk7p/egIP/gKd1gcwVBkq53oruDD+OHrVoBxO32GK303PoFohI 0zEptLIa23VdiRD6Bs2ffswBtWDLmqDFesJP7rdREsUxEi5m7MluqLLFP7c+sACV jdlUfyYJpGMGptJbXHW6NWdfVWgteH3T0gXyXs11+N3duvpg8BE48w+M2RLZTF50 xB7Uaa/tyGY9RqbjjdSURPgc8SpBx9nJYmyG5mBaiu2ipAoD2B5gy9p0JbSp9M8a Li6LBUIolRhFCKjrSydWxKOIgAWQqYm4Z0aXsOmAhg== -----END CERTIFICATE-----Generated at Fri Dec 19 16:05:42 2025 by rpki-client