This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer File: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer (raw, json) Hash identifier: Z0wJD6M1ZQT7TKZiAF/t4vqXUmr4nRCUll/WhPcXGkI= Subject key identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02777E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 24 Nov 2025 16:01:42 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 18021 IP: 202.12.0.0/24 IP: 202.86.96.0/20 IP: 2400:5900::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161662 (0x2777e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 24 16:01:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91AB063, serialNumber=E7584F959A081A4DD94809353051D235939C391D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ef:58:79:94:cb:79:06:84:b2:c7:69:dc:91: b1:c4:66:5d:30:f9:00:41:99:d8:77:04:73:61:b5: 72:78:74:26:c5:09:c4:5e:f0:3b:d1:d6:2f:c3:a0: 39:f6:ba:23:73:85:f0:b6:a8:64:14:ee:0c:b2:86: 14:de:9a:3e:28:65:d9:bd:7c:f7:b5:da:93:2f:96: b8:05:7c:39:b8:37:a4:30:af:a9:be:07:9d:9f:b7: b2:fb:b2:70:a2:2d:d9:da:b9:95:4c:a0:94:2c:dd: de:8c:8a:b9:76:fa:bd:22:83:dc:a7:f7:6a:18:e3: fb:e0:33:cd:4e:df:ea:32:56:36:17:81:b8:77:cf: f4:50:8e:5a:d5:ab:88:55:5c:99:ff:0d:be:2c:13: f4:18:05:bd:a1:55:61:8a:c8:5c:12:06:06:c6:e6: 75:65:ac:2a:ed:fb:38:3e:69:a6:bc:bc:ac:ee:d4: 14:d8:0e:11:27:24:c5:bd:c8:7b:de:20:85:07:c0: 3b:30:49:3a:c2:fd:d8:9d:a3:49:d1:85:79:fd:2f: 4c:c1:e9:af:18:a8:42:6e:72:45:6d:9e:3c:d3:8d: 33:a2:b3:3f:4d:da:91:46:0e:af:18:63:86:66:04: 0d:a1:d1:39:7e:0c:2a:e7:ed:bc:16:e4:6b:91:2b: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18021 sbgp-ipAddrBlock: critical IPv4: 202.12.0.0/24 202.86.96.0/20 IPv6: 2400:5900::/32 Signature Algorithm: sha256WithRSAEncryption 4a:d2:39:02:ed:e6:73:6e:7f:88:10:e7:49:ca:4c:52:fa:3b: 11:6e:5c:ec:92:34:55:14:1e:ae:9f:f8:64:53:74:b4:db:bd: 9b:6e:5d:cb:8b:c4:24:60:74:92:47:b3:82:23:e3:c6:b5:5d: c8:ff:ca:62:b4:4a:a0:11:b1:7e:68:28:e0:c8:10:be:ac:3a: 32:5a:f6:bf:85:84:35:c6:32:b6:94:d6:fd:80:8f:b2:95:49: 7c:98:da:2b:f5:20:f2:8e:ad:f6:db:63:c5:3f:e8:92:d3:33: 75:ca:6a:81:e4:ae:39:b4:18:f6:1e:1d:1c:a8:c2:87:bc:dd: c5:3b:ef:49:8c:df:89:ae:0b:27:19:3b:09:d9:55:7b:5c:1d: a6:50:ac:d9:30:6d:15:07:91:aa:ef:8f:a7:57:88:98:63:81: a6:0d:c5:1a:5d:73:77:5c:45:38:80:e4:b2:aa:d6:ce:7c:34: 3c:10:31:1f:68:ae:40:05:98:51:47:54:65:47:a0:df:21:d5: 3a:69:54:90:7a:57:12:6d:72:6d:1a:85:3a:e1:41:64:18:57: 12:d5:95:df:15:8b:5e:94:f6:0f:29:6f:8d:97:2b:c1:0c:9d: 63:26:dc:98:08:e3:1a:81:a9:a1:62:12:9a:d1:ad:f8:81:62: 65:42:85:6a -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIDAnd+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNDE2MDE0MloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQUIwNjMxMTAvBgNVBAUTKEU3NTg0Rjk1OUEwODFBNEREOTQ4MDkz NTMwNTFEMjM1OTM5QzM5MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl71h5lMt5BoSyx2nckbHEZl0w+QBBmdh3BHNhtXJ4dCbFCcRe8DvR1i/DoDn2 uiNzhfC2qGQU7gyyhhTemj4oZdm9fPe12pMvlrgFfDm4N6Qwr6m+B52ft7L7snCi LdnauZVMoJQs3d6Mirl2+r0ig9yn92oY4/vgM81O3+oyVjYXgbh3z/RQjlrVq4hV XJn/Db4sE/QYBb2hVWGKyFwSBgbG5nVlrCrt+zg+aaa8vKzu1BTYDhEnJMW9yHve IIUHwDswSTrC/dido0nRhXn9L0zB6a8YqEJuckVtnjzTjTOisz9N2pFGDq8YY4Zm BA2h0Tl+DCrn7bwW5GuRKxXtAgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQU51hPlZoI Gk3ZSAk1MFHSNZOcOR0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFCMDYzLzExODZCNkJDMDkzQTExRTc5NTQwOTUwQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBQjA2My8xMTg2QjZCQzA5M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpv SUdrM1pTQWsxTUZIU05aT2NPUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICRmUwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBADKDAADBATKVmAw DQQCAAIwBwMFACQAWQAwDQYJKoZIhvcNAQELBQADggEBAErSOQLt5nNuf4gQ50nK TFL6OxFuXOySNFUUHq6f+GRTdLTbvZtuXcuLxCRgdJJHs4Ij48a1Xcj/ymK0SqAR sX5oKODIEL6sOjJa9r+FhDXGMraU1v2Aj7KVSXyY2iv1IPKOrfbbY8U/6JLTM3XK aoHkrjm0GPYeHRyowoe83cU770mM34muCycZOwnZVXtcHaZQrNkwbRUHkarvj6dX iJhjgaYNxRpdc3dcRTiA5LKq1s58NDwQMR9orkAFmFFHVGVHoN8h1TppVJB6VxJt cm0ahTrhQWQYVxLVld8Vi16U9g8pb42XK8EMnWMm3JgI4xqBqaFiEprRrfiBYmVC hWo= -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:48 2025 by rpki-client