This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer (raw, json) Hash identifier: JdTObw4ibz83sT3AYIQbgNwMSvoJRbGnn/jI9pFHieE= Subject key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027BDB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft caRepository: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 12:52:47 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 203.32.66.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162779 (0x27bdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 12:52:47 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:79:f7:dc:2e:dc:e1:e7:0b:27:27:32:58:20: 0f:4a:41:bd:24:4f:dc:57:a1:53:65:94:38:18:6a: 6c:37:84:54:c6:17:be:08:d4:08:85:d0:a5:ab:8b: e6:ed:3d:f3:5e:99:bd:81:a8:6b:f9:65:89:f1:4b: 0e:47:0c:ea:57:3f:97:2a:04:4a:af:6c:78:0e:68: 39:75:e3:fe:f0:d0:c9:e4:09:8a:88:ac:b6:9c:a8: 27:01:d2:9d:05:62:0e:98:15:b2:d1:8f:8c:ad:0d: fc:a1:11:e9:b5:f5:9a:9f:bb:89:48:87:48:aa:20: 8d:a2:8e:4d:14:1d:30:f1:b9:9a:1c:06:09:89:40: b1:e0:23:48:1f:79:6e:00:d3:20:9a:a8:b4:ed:9b: 26:b4:ab:ca:f1:f0:3e:59:52:66:79:01:3d:66:f5: b8:01:76:fe:28:c4:7f:b8:80:fa:f1:3c:ac:62:e9: ce:ea:f5:e0:ce:11:72:43:0d:49:3a:cb:49:b3:c2: 66:f0:38:c1:68:bd:da:7f:66:a4:73:f7:3f:c2:66: 0f:80:c8:d4:50:90:92:3e:50:df:57:d5:cc:9a:7c: d1:e6:58:3d:86:52:7d:08:c4:8f:92:7d:45:f9:c8: 52:53:68:41:d5:21:bf:52:15:33:4a:44:8d:7d:d1: f2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.32.66.0/24 Signature Algorithm: sha256WithRSAEncryption 76:13:7c:c4:45:02:a0:0d:95:c7:c4:40:8e:c7:12:3f:2f:e9: 7f:06:4b:94:d6:91:0d:75:b6:67:f4:0a:9c:b7:31:72:78:ae: 54:a4:57:0e:3d:a7:f8:1a:7e:db:a5:2b:fb:96:b9:d0:cc:a4: c7:b9:56:07:35:62:ad:ec:07:64:1c:dc:aa:11:61:fe:af:a3: a9:35:03:ef:8a:fe:e2:7d:6c:a3:a9:99:ae:12:9d:b0:87:e5: 07:01:6f:21:db:87:a1:20:d0:3f:35:9c:0c:0e:3c:12:a8:68: 68:cf:1b:33:a2:96:9b:53:4e:45:ed:7c:13:b8:82:5c:26:46: 13:7c:f2:4d:21:75:83:eb:c9:1e:7e:9e:02:29:79:43:9d:d1: 3b:c0:6c:87:a4:61:7e:c2:a4:94:86:3c:6f:3c:82:97:08:55: a9:5e:c1:85:84:3b:88:92:5b:0d:60:a4:25:cf:fc:e9:26:c6: f6:94:a1:70:59:79:50:46:2e:0b:e2:9d:e7:af:18:42:83:25: 6f:f6:88:4f:69:d7:ad:a8:d5:fc:20:1f:21:9f:76:7b:38:14: 32:81:f8:0f:cd:1b:88:f4:d6:29:c0:a4:f5:26:68:55:d1:50: b4:11:a9:c4:c1:8e:40:ff:76:9e:27:1c:76:53:21:45:78:69: b6:4e:eb:a3 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAnvbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDEyNTI0N1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIw MTczODVEMjNFRTcyMDM5NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNeffcLtzh5wsnJzJYIA9KQb0kT9xXoVNllDgYamw3hFTGF74I1AiF0KWri+bt PfNemb2BqGv5ZYnxSw5HDOpXP5cqBEqvbHgOaDl14/7w0MnkCYqIrLacqCcB0p0F Yg6YFbLRj4ytDfyhEem19Zqfu4lIh0iqII2ijk0UHTDxuZocBgmJQLHgI0gfeW4A 0yCaqLTtmya0q8rx8D5ZUmZ5AT1m9bgBdv4oxH+4gPrxPKxi6c7q9eDOEXJDDUk6 y0mzwmbwOMFovdp/ZqRz9z/CZg+AyNRQkJI+UN9X1cyafNHmWD2GUn0IxI+SfUX5 yFJTaEHVIb9SFTNKRI190fJJAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU3K1kRwXP GMJ9f8IBc4XSPucgOVUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTMzQTI3L0UyNjY0NkU0RjcwMzExRUVBMzFGNUQ3QUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzM0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndY UEdNSjlmOElCYzRYU1B1Y2dPVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBADLIEIwDQYJKoZIhvcNAQELBQADggEBAHYTfMRFAqANlcfEQI7H Ej8v6X8GS5TWkQ11tmf0Cpy3MXJ4rlSkVw49p/gaftulK/uWudDMpMe5Vgc1Yq3s B2Qc3KoRYf6vo6k1A++K/uJ9bKOpma4SnbCH5QcBbyHbh6Eg0D81nAwOPBKoaGjP GzOilptTTkXtfBO4glwmRhN88k0hdYPryR5+ngIpeUOd0TvAbIekYX7CpJSGPG88 gpcIValewYWEO4iSWw1gpCXP/OkmxvaUoXBZeVBGLgvineevGEKDJW/2iE9p162o 1fwgHyGfdns4FDKB+A/NG4j01inApPUmaFXRULQRqcTBjkD/dp4nHHZTIUV4abZO 66M= -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:39 2025 by rpki-client