This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer File: 0NbEemjLQdEG6wQtcma5y7_Bpzs.cer (raw, json) Hash identifier: cbBQ5t0ZUDFpP7BEMKfCcw/36Kgkf9Q4qZhTTEFPGtc= Subject key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02749E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 11 Nov 2025 18:04:00 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 45961 IP: 202.47.86.0/24 IP: 2001:df6:d500::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160926 (0x2749e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 11 18:04:00 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91EBF76, serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:eb:e5:42:ce:1f:42:35:e5:0c:31:c9:0c: 9f:d4:7c:9e:de:61:51:28:aa:3e:f3:ea:cd:4a:68: 9d:c8:ba:7d:1b:ce:67:c3:f9:88:c2:c7:08:e7:88: f8:d1:84:22:74:5d:75:9a:b4:a6:2d:a4:c1:05:63: 36:c5:9a:c0:68:1e:71:58:63:b9:de:79:49:83:1d: 05:ae:43:80:5a:17:7f:5f:fe:89:5d:2e:e6:dd:93: 12:ec:49:26:78:0a:85:bd:2c:37:dd:4c:b0:5d:34: 90:14:98:f7:ca:58:26:2e:e7:4e:17:1a:5b:10:20: 18:6f:0b:25:ae:dc:aa:46:d4:15:34:fa:42:ea:05: 8d:6c:da:21:eb:c6:d0:ab:7a:41:7d:88:12:2d:99: e2:3c:dd:be:7c:7e:fa:8f:20:b9:5b:40:82:c4:84: a4:2a:64:e0:27:65:f8:b1:c8:b7:48:bb:b5:b6:a1: b6:aa:4c:48:a4:93:14:61:50:3a:72:a2:8b:0a:e7: 1f:3a:a5:81:d5:b1:98:65:d2:e4:1f:77:12:59:9e: 71:8e:8e:1d:44:5a:b4:b3:5c:e9:3d:17:de:f5:47: 2f:0c:8e:f4:8c:d8:0d:38:14:ce:10:43:e6:ee:f3: 90:6e:df:5b:da:20:99:46:85:36:9a:a3:a1:ef:71: c9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45961 sbgp-ipAddrBlock: critical IPv4: 202.47.86.0/24 IPv6: 2001:df6:d500::/48 Signature Algorithm: sha256WithRSAEncryption 1f:0e:14:69:84:64:72:4c:aa:84:4c:f0:73:47:b8:20:fa:e4: 1b:7e:c9:d6:17:f7:b1:81:21:e3:9c:0e:eb:1e:8f:05:5f:07: f7:8c:52:1c:78:28:c2:8b:d1:ed:10:c0:31:41:d2:fa:ad:a3: 70:89:d0:07:ed:23:5c:2b:ef:2d:54:56:6d:6f:6c:5c:74:d5: 3a:67:b2:52:b2:4d:a9:ce:cb:89:61:46:09:fb:68:ef:22:7c: 98:f8:9c:a1:71:a5:c7:46:31:48:f5:25:f1:a1:a2:01:bc:54: 5e:13:c4:a8:60:2c:ad:aa:3e:c0:b3:48:d0:08:18:07:70:4c: 7f:81:8e:4d:c7:b0:03:b9:6b:98:bd:ed:a1:07:b7:5b:b3:3b: 24:38:26:1b:08:aa:dd:fa:5c:af:c6:df:2b:dd:8c:7a:1f:5e: dc:0c:32:70:35:60:3e:bc:03:98:96:8c:31:e8:eb:79:da:db: a4:33:33:f1:0d:b0:9d:5f:43:85:8c:41:43:61:c2:bd:66:19: d9:c4:bb:3a:b4:b7:2a:2d:02:76:6d:e4:89:34:70:62:55:b0: 82:47:73:9e:16:bb:f7:28:2b:22:70:c7:5c:16:b0:f8:0d:f4: 7e:f2:8b:a8:dd:80:97:df:42:7f:07:56:4f:cd:30:c2:16:5e: b2:12:71:ce -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnSeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMTE4MDQwMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRUJGNzYxMTAvBgNVBAUTKEQwRDZDNDdBNjhDQjQxRDEwNkVCMDQy RDcyNjZCOUNCQkZDMUE3M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsKevlQs4fQjXlDDHJDJ/UfJ7eYVEoqj7z6s1KaJ3Iun0bzmfD+YjCxwjniPjR hCJ0XXWatKYtpMEFYzbFmsBoHnFYY7neeUmDHQWuQ4BaF39f/oldLubdkxLsSSZ4 CoW9LDfdTLBdNJAUmPfKWCYu504XGlsQIBhvCyWu3KpG1BU0+kLqBY1s2iHrxtCr ekF9iBItmeI83b58fvqPILlbQILEhKQqZOAnZfixyLdIu7W2obaqTEikkxRhUDpy oosK5x86pYHVsZhl0uQfdxJZnnGOjh1EWrSzXOk9F971Ry8MjvSM2A04FM4QQ+bu 85Bu31vaIJlGhTaao6HvccntAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU0NbEemjL QdEG6wQtcma5y7/BpzswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVCRjc2L0E2REUwOTdDODUyMzExRUJCN0U5RjM4M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFQkY3Ni9BNkRFMDk3Qzg1MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1q TFFkRUc2d1F0Y21hNXk3X0JwenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALOJMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyi9WMA8EAgAC MAkDBwAgAQ321QAwDQYJKoZIhvcNAQELBQADggEBAB8OFGmEZHJMqoRM8HNHuCD6 5Bt+ydYX97GBIeOcDusejwVfB/eMUhx4KMKL0e0QwDFB0vqto3CJ0AftI1wr7y1U Vm1vbFx01TpnslKyTanOy4lhRgn7aO8ifJj4nKFxpcdGMUj1JfGhogG8VF4TxKhg LK2qPsCzSNAIGAdwTH+Bjk3HsAO5a5i97aEHt1uzOyQ4JhsIqt36XK/G3yvdjHof XtwMMnA1YD68A5iWjDHo63na26QzM/ENsJ1fQ4WMQUNhwr1mGdnEuzq0tyotAnZt 5Ik0cGJVsIJHc54Wu/coKyJwx1wWsPgN9H7yi6jdgJffQn8HVk/NMMIWXrIScc4= -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:10 2025 by rpki-client