This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer File: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer (raw, json) Hash identifier: IaXxvGJFZtUjvPDIgwAOyPOg5ethhMM7FRbr1cmkKZc= Subject key identifier: DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02762D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft caRepository: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 05:11:35 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154049 IP: 2402:39a0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161325 (0x2762d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 19 05:11:35 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9147CA8, serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:dc:bc:72:72:c4:de:58:b6:1b:da:f8:39: 4d:e4:e6:ec:16:6c:9a:3b:01:a7:d8:44:c5:1f:d1: 6b:97:db:da:31:d0:e4:e9:ee:f2:85:05:31:5d:a5: 64:70:d7:ef:96:2a:8b:b6:7d:53:90:5d:70:b3:2e: 6e:84:f5:b8:64:72:0f:fd:7c:e5:2a:7e:13:25:07: 54:03:5f:f0:ce:f7:98:0a:9c:7a:27:ce:8a:a1:ac: a6:14:17:bf:a3:2e:e7:5d:e5:97:58:40:2c:e7:9c: 4e:eb:56:81:f9:e0:73:2d:c3:28:17:23:51:08:4d: bb:93:f7:27:58:cc:6b:9f:e8:93:cd:42:ae:9b:e3: 54:3e:14:5d:54:64:0d:7c:3d:f8:57:f8:40:a5:b5: ea:71:37:37:a9:02:b2:30:56:4f:ef:6b:53:50:98: b0:7c:ad:a7:fa:71:46:9e:df:7d:99:7a:5e:69:30: b4:89:cd:62:4b:69:ed:c2:42:24:34:69:59:8f:cb: 5d:00:55:f8:25:eb:09:d0:ee:98:c0:45:9c:96:c1: 82:68:50:47:67:ca:86:a1:3c:46:0f:cb:31:a9:ce: 2f:9f:85:41:a5:f7:60:68:62:b2:2c:29:06:2b:ce: 63:45:f9:11:15:24:2f:ad:2f:55:fc:e6:df:4e:e8: 60:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154049 sbgp-ipAddrBlock: critical IPv6: 2402:39a0::/32 Signature Algorithm: sha256WithRSAEncryption 5b:24:ae:5d:82:14:ad:5e:87:36:30:93:b3:28:ba:02:ad:ad: 66:04:e9:a5:0e:fa:dd:d7:a9:53:50:03:bb:6e:fc:e1:08:46: 5e:04:18:e6:f2:49:63:a0:00:96:b5:a8:76:00:a7:dc:97:35: 37:88:5a:7f:4a:86:c8:47:36:e1:bd:7b:22:2c:65:bc:14:5a: 1f:6d:a9:0a:96:34:85:bd:da:e1:16:20:5a:92:68:1c:84:2b: d4:d0:47:f2:50:17:48:f6:fe:67:9c:9e:ac:34:c5:7e:a2:87: 56:c3:49:7a:c3:76:36:75:51:87:c6:cb:05:4a:58:46:34:ee: 62:49:ad:8e:7b:82:7a:46:c9:1c:f0:eb:c0:0b:65:c0:25:8b: 2a:15:70:3d:3d:8e:71:20:ba:3d:e0:d7:8d:cc:e9:7f:0c:cf: 78:4e:21:92:92:14:33:6d:ff:6f:53:d7:4e:57:88:4f:ce:42: b5:33:8b:6b:3e:94:0a:ca:7b:d6:85:6f:70:6e:94:21:40:41: 77:06:3e:c7:96:55:e3:e1:38:58:a4:19:50:5d:00:69:d0:6b: 3c:d8:cb:ef:3c:c0:d4:aa:9d:c4:87:f7:f9:bb:dc:2f:37:3d: aa:e1:3a:7d:18:8d:b7:3d:f7:a2:e3:8d:7c:14:b1:e8:52:72: 2d:29:5d:25 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAnYtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExOTA1MTEzNVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNDdDQTgxMTAvBgNVBAUTKEREMjgwODI4RkYwOTk2QThDQkVGMjlC RjBEOTE0REYyNTJERjFDQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvb9y8cnLE3li2G9r4OU3k5uwWbJo7AafYRMUf0WuX29ox0OTp7vKFBTFdpWRw 1++WKou2fVOQXXCzLm6E9bhkcg/9fOUqfhMlB1QDX/DO95gKnHonzoqhrKYUF7+j Ludd5ZdYQCznnE7rVoH54HMtwygXI1EITbuT9ydYzGuf6JPNQq6b41Q+FF1UZA18 PfhX+ECltepxNzepArIwVk/va1NQmLB8raf6cUae332Zel5pMLSJzWJLae3CQiQ0 aVmPy10AVfgl6wnQ7pjARZyWwYJoUEdnyoahPEYPyzGpzi+fhUGl92BoYrIsKQYr zmNF+REVJC+tL1X85t9O6GC3AgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQU3SgIKP8J lqjL7ym/DZFN8lLfHL0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ3Q0E4LzZBOUU5MTVDNkVFOTExRjBCMzAxRjY2N0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0N0NBOC82QTlFOTE1QzZFRTkxMUYwQjMwMUY2NjdDNEY5QUUwMi8zU2dJS1A4 Smxxakw3eW1fRFpGTjhsTGZITDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlnBMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAI5oDANBgkq hkiG9w0BAQsFAAOCAQEAWySuXYIUrV6HNjCTsyi6Aq2tZgTppQ763depU1ADu278 4QhGXgQY5vJJY6AAlrWodgCn3Jc1N4haf0qGyEc24b17IixlvBRaH22pCpY0hb3a 4RYgWpJoHIQr1NBH8lAXSPb+Z5yerDTFfqKHVsNJesN2NnVRh8bLBUpYRjTuYkmt jnuCekbJHPDrwAtlwCWLKhVwPT2OcSC6PeDXjczpfwzPeE4hkpIUM23/b1PXTleI T85CtTOLaz6UCsp71oVvcG6UIUBBdwY+x5ZV4+E4WKQZUF0AadBrPNjL7zzA1Kqd xIf3+bvcLzc9quE6fRiNtz33ouONfBSx6FJyLSldJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:03 2025 by rpki-client