This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer File: --bA8ysvL8RXYKA0LkO79VK03oU.cer (raw, json) Hash identifier: bJACVO6VyDV5r2yciMipk5FZZCCwGSQOmp7wHTauKvA= Subject key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0275E7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft caRepository: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 13:11:44 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 38902 AS: 55448 IP: 27.50.4.0/22 IP: 202.52.56.0/23 IP: 202.174.92.0/22 IP: 2402:f100::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161255 (0x275e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 18 13:11:44 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:60:15:e7:bb:29:33:b7:98:c3:79:dd:6f:31: f6:de:dd:17:a8:de:6a:b4:4f:ec:1e:c5:ca:86:eb: 87:76:6b:0f:c3:9d:5b:bd:49:a0:ed:c1:3e:44:81: 8a:13:7c:98:6a:82:07:1f:89:10:4e:4c:f0:00:e4: 03:e3:ce:26:b5:5a:36:b4:28:2d:09:be:bc:c2:a4: b8:cb:f2:2c:c8:71:d6:ef:43:d4:cb:c9:b6:b6:02: 5c:47:27:a4:3a:18:f9:87:0b:da:b1:48:7b:35:b5: da:df:43:37:e8:06:21:41:e4:db:a4:86:8e:14:fa: 96:83:54:bb:ea:a4:dc:ac:f8:93:79:69:25:4f:ad: e8:ab:e6:e3:cf:d9:29:6f:4d:b0:93:41:66:0b:89: 40:c3:61:f6:32:ed:69:37:e3:0c:c7:e0:48:88:25: 43:02:2a:77:f6:3c:ad:06:b5:fe:7e:cd:6a:05:b4: 92:4f:5f:0e:1c:b5:63:cf:78:c3:93:50:7d:c1:21: c6:93:15:81:0a:98:78:b5:67:af:66:3d:ae:49:49: 21:4f:cb:98:66:5c:15:ef:9d:d3:65:a8:2d:37:53: e4:55:70:72:85:fb:b5:9d:eb:00:3e:37:a6:d8:dd: cc:ca:6f:10:ae:3e:bc:9f:7c:be:2f:9f:c2:39:9a: 49:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38902 55448 sbgp-ipAddrBlock: critical IPv4: 27.50.4.0/22 202.52.56.0/23 202.174.92.0/22 IPv6: 2402:f100::/32 Signature Algorithm: sha256WithRSAEncryption a2:98:72:02:02:f5:53:ee:87:1d:e8:cb:11:a8:87:81:e0:27: aa:7a:da:92:c6:05:e8:81:3d:91:89:38:95:98:eb:a3:81:f8: a9:e5:6b:18:d7:49:aa:6d:5b:a8:7e:4a:bb:0c:f8:1b:d9:82: dc:c2:77:5d:24:19:87:07:8f:23:e2:26:12:3c:84:3c:b3:ec: 78:66:0d:c9:34:98:7b:5c:a0:df:9d:d0:da:9f:48:91:ec:c5: 57:8e:e4:61:30:97:bc:7a:a4:87:d2:e1:7a:19:51:d2:88:e3: 9d:1c:33:9c:f5:85:ca:ee:9a:03:11:88:ec:53:61:bb:50:83: 67:4a:5b:f3:08:27:9a:50:cb:98:d9:bc:d2:5d:4c:4e:72:b1: 3f:3b:14:e5:2a:03:34:85:09:9d:4c:3d:3d:a3:a2:bc:56:07: 72:c6:20:a0:46:f4:ac:f6:2e:a7:a0:50:e5:06:94:a0:26:8a: 62:52:84:24:fd:3f:9e:f1:c8:c3:3e:71:2c:42:b5:9c:de:05: 3b:f0:b0:7d:d3:ac:5b:f0:7d:e8:1b:b1:6a:24:33:52:8d:8a: 29:29:b1:38:f8:3c:40:57:2b:bb:8d:93:80:3b:df:f4:b7:83: 40:3c:d3:d1:69:f0:a2:5a:5f:ff:96:be:5b:34:81:5b:86:37: 60:04:42:5f -----BEGIN CERTIFICATE----- MIIGOjCCBSKgAwIBAgIDAnXnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExODEzMTE0NFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAz NDJFNDNCQkY1NTJCNERFODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgYBXnuykzt5jDed1vMfbe3Reo3mq0T+wexcqG64d2aw/DnVu9SaDtwT5EgYoT fJhqggcfiRBOTPAA5APjzia1Wja0KC0JvrzCpLjL8izIcdbvQ9TLyba2AlxHJ6Q6 GPmHC9qxSHs1tdrfQzfoBiFB5Nukho4U+paDVLvqpNys+JN5aSVPreir5uPP2Slv TbCTQWYLiUDDYfYy7Wk34wzH4EiIJUMCKnf2PK0Gtf5+zWoFtJJPXw4ctWPPeMOT UH3BIcaTFYEKmHi1Z69mPa5JSSFPy5hmXBXvndNlqC03U+RVcHKF+7Wd6wA+N6bY 3czKbxCuPryffL4vn8I5mkldAgMBAAGjggMvMIIDKzAdBgNVHQ4EFgQU++bA8ysv L8RXYKA0LkO79VK03oUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI0QkQzLzBFNEQ4NjdBQzY4RDExRTk5QjQ1MkQxM0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyNEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlz dkw4UlhZS0EwTGtPNzlWSzAzb1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAJf2AgMA2JgwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAIbMgQD BAHKNDgDBALKrlwwDQQCAAIwBwMFACQC8QAwDQYJKoZIhvcNAQELBQADggEBAKKY cgIC9VPuhx3oyxGoh4HgJ6p62pLGBeiBPZGJOJWY66OB+KnlaxjXSaptW6h+SrsM +BvZgtzCd10kGYcHjyPiJhI8hDyz7HhmDck0mHtcoN+d0NqfSJHsxVeO5GEwl7x6 pIfS4XoZUdKI450cM5z1hcrumgMRiOxTYbtQg2dKW/MIJ5pQy5jZvNJdTE5ysT87 FOUqAzSFCZ1MPT2jorxWB3LGIKBG9Kz2LqegUOUGlKAmimJShCT9P57xyMM+cSxC tZzeBTvwsH3TrFvwfegbsWokM1KNiikpsTj4PEBXK7uNk4A73/S3g0A809Fp8KJa X/+Wvls0gVuGN2AEQl8= -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:34 2025 by rpki-client