This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer File: -nL57HMUa01gWMiKYGr6AzMOA1E.cer (raw, json) Hash identifier: antgxpYpYk1C4Zb2db0AASAQjmDgHOFgoznX6Yf1Z3o= Subject key identifier: FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027635 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 08:37:24 +0000 Certificate not after: Sat 31 Oct 2026 00:00:00 +0000 Subordinate resources: AS: 154064 IP: 2001:df5:e040::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161333 (0x27635) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 19 08:37:24 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=A91B2D56, serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:5d:4b:f2:2b:cd:fd:9e:e0:b9:54:b8:c1: 6f:66:2c:ff:52:ea:04:08:7e:b7:f3:86:61:f1:d9: 74:66:79:d2:8d:0b:1c:ee:89:b2:c9:2a:f5:51:f7: 20:7f:07:ec:10:b6:a1:9b:85:b4:dd:e0:5d:df:20: 59:c9:75:f9:d3:bc:39:68:27:12:f5:86:a9:93:35: e4:9e:be:08:66:b9:a6:3f:87:39:14:c0:3d:6e:e0: 01:cb:bc:0a:fc:ae:58:93:ba:29:9a:c7:50:e1:a5: bf:0e:01:eb:b9:67:41:ed:a3:74:c4:76:d0:c2:4e: 3d:65:b3:0a:0b:e4:f7:06:6a:da:20:24:e4:3e:2d: b6:26:ba:8e:ab:05:8e:36:04:e3:22:17:9c:98:a0: 52:a3:c7:94:90:14:0e:ac:b2:6e:6e:2d:30:e2:ef: 4c:31:ef:70:54:92:68:d8:e3:ee:bf:2f:b3:88:91: 74:67:98:af:4c:ac:43:02:9e:a5:fa:aa:6e:ea:43: c1:3d:2a:c1:90:b4:b6:d2:96:33:8a:7d:28:44:f6: bb:7c:62:f8:92:62:7b:ba:8d:93:b4:5f:40:4e:43: 4f:ba:e8:73:0f:a4:37:5a:2a:da:3b:bb:26:4f:6c: 46:5f:ce:06:83:aa:88:d0:13:7a:43:9d:8d:b4:9e: 0c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154064 sbgp-ipAddrBlock: critical IPv6: 2001:df5:e040::/48 Signature Algorithm: sha256WithRSAEncryption 04:87:f0:bb:2d:fe:3d:1f:ce:47:11:1a:c3:cc:50:ec:29:71: 72:89:b3:f7:e7:78:f7:5d:e9:3f:82:71:1b:91:83:b4:53:8f: e4:15:6a:89:11:73:6c:15:60:31:66:a9:9c:22:c4:d9:b2:93: 32:bf:63:fa:55:3b:8e:fb:86:32:5a:04:cb:d3:29:49:70:45: 31:9b:e0:e3:09:5b:44:45:c3:6a:41:bb:d5:8b:a6:a4:ee:fa: 2b:65:6a:17:bd:75:65:12:38:6c:ae:4e:80:e1:72:8b:ae:74: ea:14:b6:4f:68:62:c9:1a:84:4e:fe:98:5d:c0:61:5b:f6:f8: d5:4f:5c:81:27:ba:bf:be:cb:a3:11:07:35:23:8b:66:60:05: 31:9f:54:e7:7a:e6:f5:56:8f:82:44:58:08:b7:52:0a:4f:b0: c9:af:35:05:a7:34:cf:09:04:5c:96:95:5f:7c:3f:69:64:31: 0d:ad:f3:42:b4:4b:47:3e:8e:de:1b:ad:3a:6c:c2:26:f0:a7: 3c:43:cb:70:e6:f1:bf:b3:4d:24:8f:bf:b4:30:48:6c:0a:d9: 70:09:ea:61:95:2e:bb:e6:a6:b1:87:3f:06:c3:23:d2:bb:7b: c4:49:36:63:47:2e:d3:04:33:7b:92:d1:20:4f:5b:7b:83:bc: 91:c0:3a:55 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAnY1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExOTA4MzcyNFoXDTI2MTAzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjJENTYxMTAvBgNVBAUTKEZBNzJGOUVDNzMxNDZCNEQ2MDU4Qzg4 QTYwNkFGQTAzMzMwRTAzNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUoF1L8ivN/Z7guVS4wW9mLP9S6gQIfrfzhmHx2XRmedKNCxzuibLJKvVR9yB/ B+wQtqGbhbTd4F3fIFnJdfnTvDloJxL1hqmTNeSevghmuaY/hzkUwD1u4AHLvAr8 rliTuimax1Dhpb8OAeu5Z0Hto3TEdtDCTj1lswoL5PcGatogJOQ+LbYmuo6rBY42 BOMiF5yYoFKjx5SQFA6ssm5uLTDi70wx73BUkmjY4+6/L7OIkXRnmK9MrEMCnqX6 qm7qQ8E9KsGQtLbSljOKfShE9rt8YviSYnu6jZO0X0BOQ0+66HMPpDdaKto7uyZP bEZfzgaDqojQE3pDnY20ngydAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQU+nL57HMU a01gWMiKYGr6AzMOA1EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUIyRDU2L0Y2OTIzNjdBQzUyMjExRjA5NUQxQjIxN0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCMkQ1Ni9GNjkyMzY3QUM1MjIxMUYwOTVEMUIyMTdDNEY5QUUwMi8tbkw1N0hN VWEwMWdXTWlLWUdyNkF6TU9BMUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlnQMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9eBAMA0G CSqGSIb3DQEBCwUAA4IBAQAEh/C7Lf49H85HERrDzFDsKXFyibP353j3Xek/gnEb kYO0U4/kFWqJEXNsFWAxZqmcIsTZspMyv2P6VTuO+4YyWgTL0ylJcEUxm+DjCVtE RcNqQbvVi6ak7vorZWoXvXVlEjhsrk6A4XKLrnTqFLZPaGLJGoRO/phdwGFb9vjV T1yBJ7q/vsujEQc1I4tmYAUxn1Tneub1Vo+CRFgIt1IKT7DJrzUFpzTPCQRclpVf fD9pZDENrfNCtEtHPo7eG606bMIm8Kc8Q8tw5vG/s00kj7+0MEhsCtlwCephlS67 5qaxhz8GwyPSu3vESTZjRy7TBDN7ktEgT1t7g7yRwDpV -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:53 2025 by rpki-client