This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0mtnZWftapePvOYYgsidvXs_AgA.cer File: 0mtnZWftapePvOYYgsidvXs_AgA.cer (raw, json) Hash identifier: yLnA2zsQ06w46LNP0gH6h8cZMyq8YWbJ0TvSsNYbv30= Subject key identifier: D2:6B:67:65:67:ED:6A:97:8F:BC:E6:18:82:C8:9D:BD:7B:3F:02:00 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0278E3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918C287/B47BC29ECBEC11F0A2D87D15C4F9AE02/0mtnZWftapePvOYYgsidvXs_AgA.mft caRepository: rsync://rpki.apnic.net/member_repository/A918C287/B47BC29ECBEC11F0A2D87D15C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 23:56:38 +0000 Certificate not after: Sat 01 May 2038 00:00:00 +0000 Subordinate resources: AS: 45163 AS: 55471 AS: 131211 IP: 203.176.189.0/24 IP: 2001:df0:90::/48 IP: 2401:4600::/32 IP: 2401:e640::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162019 (0x278e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 27 23:56:38 2025 GMT Not After : May 1 00:00:00 2038 GMT Subject: CN=A918C287, serialNumber=D26B676567ED6A978FBCE61882C89DBD7B3F0200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:90:f1:bc:9f:17:29:d2:2e:b3:ad:d2:25: 89:bb:5c:da:e2:01:6a:52:e8:df:68:9b:1b:8a:16: b8:98:89:bb:db:f0:eb:9e:94:25:06:32:8c:af:42: 7d:60:9e:28:f8:d8:fc:14:73:47:c0:ee:01:39:30: cb:ef:59:50:02:8a:20:04:48:3b:21:3f:bd:e5:18: 6c:c3:fd:43:4e:8b:d3:d4:af:e5:95:85:5f:18:7a: 06:86:65:ad:a0:0f:7c:4a:5a:c6:a9:ce:08:5e:47: ef:89:66:fd:a7:e9:ed:34:66:20:b0:e0:b2:eb:6e: 65:be:7a:3a:5b:ae:a4:33:b3:ee:45:af:ba:eb:5d: 57:48:2e:2c:95:7d:e4:ce:55:fe:20:bd:63:6c:df: c9:ad:18:d1:f7:0c:df:a8:78:83:41:b9:44:b0:90: e4:ca:e7:b5:47:a7:27:c9:b8:56:d7:5f:03:7e:30: bc:64:45:fd:e8:e4:86:cb:f6:b8:66:42:f3:41:4c: 15:8b:de:ef:24:16:8f:9d:5b:64:05:6c:a1:7d:5e: 84:e0:e2:5a:83:e1:96:fc:8a:18:0c:15:2e:6f:c9: 0f:e3:ad:e5:e0:15:7e:ba:10:3e:61:a2:d0:b5:fa: 04:f1:42:46:fb:3a:ac:86:48:88:67:75:87:71:25: 37:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6B:67:65:67:ED:6A:97:8F:BC:E6:18:82:C8:9D:BD:7B:3F:02:00 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C287/B47BC29ECBEC11F0A2D87D15C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C287/B47BC29ECBEC11F0A2D87D15C4F9AE02/0mtnZWftapePvOYYgsidvXs_AgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45163 55471 131211 sbgp-ipAddrBlock: critical IPv4: 203.176.189.0/24 IPv6: 2001:df0:90::/48 2401:4600::/32 2401:e640::/32 Signature Algorithm: sha256WithRSAEncryption b7:d9:82:24:9e:d4:29:f6:fb:9b:e4:3a:71:7d:a8:7c:44:18: aa:8a:a2:02:99:44:34:49:12:8a:46:1c:6b:de:c1:97:d8:4b: 47:88:ab:76:a0:59:18:62:04:89:c0:ac:f9:09:24:9f:9e:f5: c3:20:83:35:5a:ab:2c:2a:5e:54:d9:2a:28:fd:d8:45:09:fb: 63:c0:8e:4c:90:10:04:fc:bf:9a:4f:55:85:c3:d3:61:9a:6d: 69:e2:cc:c2:de:70:ec:12:b4:8f:1d:6a:35:95:46:26:25:b1: 84:88:40:d4:a3:27:c3:e6:9a:aa:04:a9:3a:e6:08:3a:cf:76: 2d:05:6f:73:d9:53:a4:9a:73:06:ef:7e:35:42:96:a4:0b:ee: 06:ee:93:d7:84:71:95:4b:1f:75:b2:98:ed:98:cb:d3:31:d4: 51:cd:d7:6f:ed:ac:ca:9f:9a:43:31:0c:2e:f1:b5:8f:b4:5d: 2c:4f:43:ee:06:94:fd:b2:61:8e:11:6c:17:f2:be:19:40:a3: de:4d:e3:57:8c:5d:47:95:a0:c1:a2:8e:83:f5:88:0e:c9:e9: 9a:c9:68:55:dd:3f:58:d4:c6:b1:06:a9:04:0b:32:e4:58:62: 2a:6f:96:14:0b:36:ed:eb:c0:d0:17:cd:cf:bb:cc:05:50:d4: 2e:6b:16:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIDAnjjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNzIzNTYzOFoXDTM4MDUwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOEMyODcxMTAvBgNVBAUTKEQyNkI2NzY1NjdFRDZBOTc4RkJDRTYx ODgyQzg5REJEN0IzRjAyMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1xZDxvJ8XKdIus63SJYm7XNriAWpS6N9omxuKFriYibvb8OuelCUGMoyvQn1g nij42PwUc0fA7gE5MMvvWVACiiAESDshP73lGGzD/UNOi9PUr+WVhV8YegaGZa2g D3xKWsapzgheR++JZv2n6e00ZiCw4LLrbmW+ejpbrqQzs+5Fr7rrXVdILiyVfeTO Vf4gvWNs38mtGNH3DN+oeINBuUSwkOTK57VHpyfJuFbXXwN+MLxkRf3o5IbL9rhm QvNBTBWL3u8kFo+dW2QFbKF9XoTg4lqD4Zb8ihgMFS5vyQ/jreXgFX66ED5hotC1 +gTxQkb7OqyGSIhndYdxJTepAgMBAAGjggM4MIIDNDAdBgNVHQ4EFgQU0mtnZWft apePvOYYgsidvXs/AgAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThDMjg3L0I0N0JDMjlFQ0JFQzExRjBBMkQ4N0QxNUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4QzI4Ny9CNDdCQzI5RUNCRUMxMUYwQTJEODdEMTVDNEY5QUUwMi8wbXRuWldm dGFwZVB2T1lZZ3NpZHZYc19BZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDALBrAgMA2K8CAwIAizA+BggrBgEFBQcBBwEB/wQvMC0wDAQCAAEwBgME AMuwvTAdBAIAAjAXAwcAIAEN8ACQAwUAJAFGAAMFACQB5kAwDQYJKoZIhvcNAQEL BQADggEBALfZgiSe1Cn2+5vkOnF9qHxEGKqKogKZRDRJEopGHGvewZfYS0eIq3ag WRhiBInArPkJJJ+e9cMggzVaqywqXlTZKij92EUJ+2PAjkyQEAT8v5pPVYXD02Ga bWnizMLecOwStI8dajWVRiYlsYSIQNSjJ8PmmqoEqTrmCDrPdi0Fb3PZU6Sacwbv fjVClqQL7gbuk9eEcZVLH3WymO2Yy9Mx1FHN12/trMqfmkMxDC7xtY+0XSxPQ+4G lP2yYY4RbBfyvhlAo95N41eMXUeVoMGijoP1iA7J6ZrJaFXdP1jUxrEGqQQLMuRY YipvlhQLNu3rwNAXzc+7zAVQ1C5rFqo= -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:32 2025 by rpki-client