This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer File: 1Hn1NF93o5en0pzMzvEk3B3_cro.cer (raw, json) Hash identifier: OP7QLBMBHu15YIgqTyWzzw8BLl22YnfsFwh4VXTPUcE= Subject key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A3C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft caRepository: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 20:26:20 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 131254 IP: 202.137.224.0/24 IP: 2001:df3:9e00::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162364 (0x27a3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 20:26:20 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a3:68:24:e4:9f:47:df:15:34:ce:e4:48:07: 53:0a:77:c6:a7:d5:e1:da:5f:e0:37:bf:be:8f:d3: 0c:d1:cd:bf:5c:e5:b8:0d:3d:22:49:c4:e3:ec:cf: 6e:de:a8:20:61:fc:4d:27:1e:f6:43:cf:58:1f:6c: 1d:53:94:a0:ff:89:65:78:50:09:35:e8:a4:6b:bb: 57:b2:b2:6a:ee:40:6f:83:24:24:6e:03:6d:60:8b: e9:e4:2e:60:54:a8:36:92:89:c3:0f:0c:c3:97:8a: cf:f5:5e:b9:35:46:a4:a7:02:f8:3e:af:5c:ef:a5: 71:57:08:47:58:bf:c2:57:92:f8:91:2b:d0:79:92: 70:9e:41:0f:a1:5b:40:2a:1f:90:e6:b6:f0:95:77: b9:36:4c:60:47:b7:55:c3:a0:97:17:db:7e:11:16: dc:50:73:f2:15:f8:a5:67:d4:46:bf:47:50:81:fe: 6f:6b:a1:75:2c:01:3d:ce:04:0e:01:9b:57:58:b4: 4d:90:bf:42:7e:c9:07:f8:6f:bf:03:0f:4e:ea:ad: 5f:cf:a7:c5:8f:93:e3:c1:ed:e3:19:ec:f3:09:5f: 1e:44:a3:48:e3:57:d9:12:f4:9b:b4:6d:e4:a6:cf: 08:a9:9b:f1:07:b4:4e:29:03:ba:79:12:32:70:95: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131254 sbgp-ipAddrBlock: critical IPv4: 202.137.224.0/24 IPv6: 2001:df3:9e00::/48 Signature Algorithm: sha256WithRSAEncryption b8:98:f3:d2:35:e6:b3:6a:2a:79:82:87:fe:98:34:d1:01:6a: 31:f4:13:61:53:01:89:9f:da:bc:f1:df:70:38:4e:41:24:57: d3:fd:b5:79:b5:5a:64:22:4b:ab:ff:19:b7:e4:5a:67:18:3a: 35:02:15:6c:17:60:3e:ca:5d:5d:f1:15:e1:20:b6:fb:af:73: ad:0d:7b:5d:3d:a4:ba:51:90:5f:57:a8:df:5e:d4:5e:b4:4e: 2f:49:27:8a:64:cf:1f:62:86:e0:34:9d:ba:97:1f:62:2c:ba: d1:c2:90:ce:6e:24:52:cf:81:7d:11:56:5d:2b:ce:b1:d2:13: 9e:eb:ed:d4:14:bf:63:ae:b4:5a:4e:20:df:1b:1a:79:fb:c8: 66:b9:34:be:7e:9c:1f:e5:f1:3c:82:69:f2:78:c1:51:53:c2: 1a:49:8e:f4:56:5e:bf:12:b1:56:ec:63:b2:60:69:f5:87:7a: 54:e2:a2:49:37:9b:f3:fa:9e:e1:ae:20:e2:c1:16:5a:49:6a: 1b:65:aa:c4:bc:04:41:34:10:f3:2c:f2:e1:87:5b:73:92:6b: f6:22:3f:54:79:c8:2d:d2:40:50:f7:ae:49:4d:c9:da:14:25: d0:63:95:d5:2f:f3:f7:f5:f9:89:6a:08:ab:21:b7:79:88:18: 5e:32:b4:e0 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAno8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTIwMjYyMFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUND Q0NFRjEyNERDMURGRjcyQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1o2gk5J9H3xU0zuRIB1MKd8an1eHaX+A3v76P0wzRzb9c5bgNPSJJxOPsz27e qCBh/E0nHvZDz1gfbB1TlKD/iWV4UAk16KRru1eysmruQG+DJCRuA21gi+nkLmBU qDaSicMPDMOXis/1Xrk1RqSnAvg+r1zvpXFXCEdYv8JXkviRK9B5knCeQQ+hW0Aq H5DmtvCVd7k2TGBHt1XDoJcX234RFtxQc/IV+KVn1Ea/R1CB/m9roXUsAT3OBA4B m1dYtE2Qv0J+yQf4b78DD07qrV/Pp8WPk+PB7eMZ7PMJXx5Eo0jjV9kS9Ju0beSm zwipm/EHtE4pA7p5EjJwlb6dAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU1Hn1NF93 o5en0pzMzvEk3B3/crowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk5QTcwL0NEQkIxODk2RDdEOTExRUM5QzI2NTc1NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5OUE3MC9DREJCMTg5NkQ3RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5 M281ZW4wcHpNenZFazNCM19jcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgC2MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyongMA8EAgAC MAkDBwAgAQ3zngAwDQYJKoZIhvcNAQELBQADggEBALiY89I15rNqKnmCh/6YNNEB ajH0E2FTAYmf2rzx33A4TkEkV9P9tXm1WmQiS6v/GbfkWmcYOjUCFWwXYD7KXV3x FeEgtvuvc60Ne109pLpRkF9XqN9e1F60Ti9JJ4pkzx9ihuA0nbqXH2IsutHCkM5u JFLPgX0RVl0rzrHSE57r7dQUv2OutFpOIN8bGnn7yGa5NL5+nB/l8TyCafJ4wVFT whpJjvRWXr8SsVbsY7JgafWHelTiokk3m/P6nuGuIOLBFlpJahtlqsS8BEE0EPMs 8uGHW3OSa/YiP1R5yC3SQFD3rklNydoUJdBjldUv8/f1+YlqCKsht3mIGF4ytOA= -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:25 2025 by rpki-client