This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.cer (raw, json) Hash identifier: P0q/tuguMVm/6CNgeAafgF1SxLo6FgD0kZ7KdrjGYvQ= Subject key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02746D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 11 Nov 2025 03:24:40 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 203.62.205.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160877 (0x2746d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 11 03:24:40 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bd:fa:54:89:5d:7e:f8:2f:9d:88:3f:41:eb: 00:52:22:fd:12:fb:dc:59:8a:ea:92:f5:85:e2:38: b0:de:16:90:83:27:77:61:4c:43:b0:00:ed:29:36: 54:00:a9:07:88:b8:b8:d8:a4:fa:d0:d1:7b:54:86: c2:c6:02:63:db:ae:dc:b4:3c:af:c1:03:65:dc:4d: 05:a1:0f:07:83:57:ac:08:15:7b:86:c8:f6:22:0f: 4b:98:3e:a3:36:29:5e:bb:fb:78:d3:f7:9c:8b:5d: 8a:7e:12:cb:1b:4b:a7:6b:48:b8:80:cb:73:d7:39: 9f:05:11:b7:9b:3e:47:93:38:0c:7b:d5:90:ad:0c: 31:76:55:41:91:59:ea:d1:f3:c9:a8:39:17:9a:dc: f2:65:81:ab:02:5b:27:2c:a1:4c:8e:d3:38:de:b1: a0:06:1d:df:0a:54:e2:a4:ef:34:33:b7:b7:f2:c6: 0a:0b:fa:08:61:41:90:24:d6:3b:25:17:93:a9:bb: 34:5f:71:e1:7d:97:e8:41:36:84:4b:db:22:cf:e4: 5b:05:a2:40:32:72:40:19:6c:49:04:91:8c:53:bd: a1:da:ef:31:80:a6:d9:6d:76:a6:a6:80:60:49:ad: d9:12:7f:ab:47:86:ee:2a:e9:6b:8c:e5:7f:20:9f: d3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.62.205.0/24 Signature Algorithm: sha256WithRSAEncryption 84:d6:ea:19:f9:d4:c3:c2:3f:8c:3e:5a:4d:42:7f:c6:1c:10: 69:66:b4:6d:55:18:c0:25:d0:6f:94:51:38:7d:7e:c4:80:a4: c5:35:8a:92:34:ec:92:f8:2e:ca:10:35:59:21:10:b3:83:37: af:7c:85:b9:d7:89:9f:93:ff:5e:6d:bc:1d:72:ce:e9:0a:bb: b4:d3:64:0b:f3:98:41:37:29:43:1c:68:10:19:87:8d:fd:fa: df:79:12:c2:96:c3:3a:f7:45:6e:de:22:6a:bf:0b:30:a2:b6: 33:4a:bd:c8:8e:b7:6e:a6:dc:25:8e:5e:08:e3:50:af:18:f8: 0e:cf:99:ce:50:5a:6c:c1:59:02:d9:97:a6:d9:c9:bb:2f:9b: db:81:f7:26:78:3a:42:0f:bc:61:ab:15:74:54:38:a1:bb:7e: 74:52:83:10:56:9d:98:1e:00:7b:64:a7:7d:8f:f0:68:8d:57: 7e:14:31:86:55:a1:2d:b1:e6:00:9c:1d:a2:7e:f5:d3:a1:6f: 25:21:e2:55:4e:c5:da:fa:a9:2b:38:e2:85:f4:38:46:4c:0c: 92:06:49:fa:27:c3:e5:62:6a:83:81:dd:09:17:be:43:92:ba: f8:9c:67:55:f7:bb:7c:a6:ef:9b:cb:dc:35:65:3a:78:c8:0b: c0:57:de:b1 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAnRtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMTAzMjQ0MFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5 MjQ1ODdFREY1NzIzRDUwN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMvfpUiV1++C+diD9B6wBSIv0S+9xZiuqS9YXiOLDeFpCDJ3dhTEOwAO0pNlQA qQeIuLjYpPrQ0XtUhsLGAmPbrty0PK/BA2XcTQWhDweDV6wIFXuGyPYiD0uYPqM2 KV67+3jT95yLXYp+EssbS6drSLiAy3PXOZ8FEbebPkeTOAx71ZCtDDF2VUGRWerR 88moORea3PJlgasCWycsoUyO0zjesaAGHd8KVOKk7zQzt7fyxgoL+ghhQZAk1jsl F5OpuzRfceF9l+hBNoRL2yLP5FsFokAyckAZbEkEkYxTvaHa7zGAptltdqamgGBJ rdkSf6tHhu4q6WuM5X8gn9PTAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQU3obmXuoe CzDk/Y2SRYft9XI9UH0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUwMEE1L0E2NDgzQTNDN0FCQjExRUY5Mzc5QUU1MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVv ZUN6RGtfWTJTUllmdDlYSTlVSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBADLPs0wDQYJKoZIhvcNAQELBQADggEBAITW6hn51MPCP4w+Wk1C f8YcEGlmtG1VGMAl0G+UUTh9fsSApMU1ipI07JL4LsoQNVkhELODN698hbnXiZ+T /15tvB1yzukKu7TTZAvzmEE3KUMcaBAZh439+t95EsKWwzr3RW7eImq/CzCitjNK vciOt26m3CWOXgjjUK8Y+A7Pmc5QWmzBWQLZl6bZybsvm9uB9yZ4OkIPvGGrFXRU OKG7fnRSgxBWnZgeAHtkp32P8GiNV34UMYZVoS2x5gCcHaJ+9dOhbyUh4lVOxdr6 qSs44oX0OEZMDJIGSfonw+ViaoOB3QkXvkOSuvicZ1X3u3ym75vL3DVlOnjIC8BX 3rE= -----END CERTIFICATE-----Generated at Sat Dec 6 14:02:13 2025 by rpki-client