This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DMXblmum0dk6179BKQ2hWKrXiE.cer File: 5DMXblmum0dk6179BKQ2hWKrXiE.cer (raw, json) Hash identifier: DB5gjiaS4Tv4oJIzD5Ptb/leGA8uApx8kBHq8Sz2vXs= Subject key identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0276DF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft caRepository: rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 21 Nov 2025 13:49:00 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 24187 AS: 133540 IP: 27.131.128.0/18 IP: 103.109.60.0/22 IP: 202.173.208.0/20 IP: 2407:7a00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161503 (0x276df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 21 13:49:00 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9180318, serialNumber=E433176E59AE9B4764EB5EFD04A4368562AB5E21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:b3:d1:aa:b6:45:45:58:58:10:d3:bc:4c: 01:2e:14:53:57:49:26:fb:91:1c:99:e6:b7:ab:2e: 54:a4:b8:fa:cf:7b:70:b3:93:de:ec:ad:f5:70:d6: e2:59:4e:38:ea:76:a6:04:ee:c4:46:22:bd:c5:f5: d7:19:ef:94:90:d3:30:23:65:a3:16:96:21:86:9f: 98:9b:36:0f:0e:dd:d7:d3:c6:1b:92:d8:49:e6:5b: bb:44:4c:2e:30:f9:40:fc:67:38:cd:99:cc:08:7c: f7:6c:1f:09:6f:a4:68:88:17:0b:b1:b8:72:0c:df: 2c:30:3e:df:61:f8:a2:2a:fa:d2:5e:c4:fa:13:40: 28:f0:f3:82:16:4a:c9:09:e0:16:a2:78:c5:cc:de: 1e:51:32:c8:6b:fa:9c:27:6f:7d:e9:a5:8c:b3:bf: 03:c0:5b:0b:14:e4:2a:7d:69:9d:db:d1:1f:aa:3a: 00:b8:8a:42:e6:62:ed:9e:2e:cb:dc:97:e8:88:ef: c6:6e:ff:90:7e:64:fa:81:ed:c4:ba:5e:b7:32:dd: 16:7b:12:1d:f4:84:fc:02:3b:41:bd:3f:52:4c:8f: b5:3e:2f:05:6d:49:45:e8:3e:3c:9f:23:be:52:6b: d8:19:b4:4e:9c:68:e4:0a:50:ba:05:bf:47:0d:85: b2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:33:17:6E:59:AE:9B:47:64:EB:5E:FD:04:A4:36:85:62:AB:5E:21 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9180318/B5719DD21D8F11E2B05707EF08B02CD2/5DMXblmum0dk6179BKQ2hWKrXiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24187 133540 sbgp-ipAddrBlock: critical IPv4: 27.131.128.0/18 103.109.60.0/22 202.173.208.0/20 IPv6: 2407:7a00::/32 Signature Algorithm: sha256WithRSAEncryption 7a:ec:d7:b0:51:70:66:d3:4e:7f:3e:09:fa:2b:a3:94:da:b4: fe:9c:56:71:92:32:9a:94:eb:01:65:36:44:d1:56:40:7b:f3: 77:aa:c7:49:a2:e8:8f:f5:49:96:d6:24:50:b4:e1:a7:f4:6b: 9e:83:35:28:29:53:ec:9f:4f:95:d4:b2:ad:71:a8:91:9a:33: f4:bc:01:c2:cc:6b:0e:e9:81:8a:2c:a6:57:67:55:30:1a:17: 69:7f:d2:bb:42:6e:01:2f:91:e7:83:9f:c4:ab:aa:00:bf:73: 2f:8c:5d:13:df:2b:76:d1:b3:d3:01:c6:85:4c:bd:9c:51:24: 5a:6d:a7:9d:f6:5e:54:1e:ad:fe:ce:46:a9:c1:e9:43:00:c5: 8d:a4:1f:09:eb:a2:55:52:4c:97:74:7b:3c:81:00:bb:89:3a: b1:aa:07:38:9d:14:c9:c0:62:cc:94:57:5e:9b:4b:ad:93:1d: de:86:75:16:39:ba:0a:ce:40:38:21:ba:9e:52:b3:cf:96:11: 8b:74:4d:42:c8:2a:62:8e:62:ba:e4:53:17:81:85:ee:82:de: 55:83:e8:f8:72:f2:79:b4:25:4a:ed:68:26:ca:9d:1d:14:0b: a7:d9:e3:cd:a1:04:4e:84:9e:1d:aa:10:ac:85:fa:93:7e:ce: 1a:77:9a:50 -----BEGIN CERTIFICATE----- MIIGOTCCBSGgAwIBAgIDAnbfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMTEzNDkwMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxODAzMTgxMTAvBgNVBAUTKEU0MzMxNzZFNTlBRTlCNDc2NEVCNUVG RDA0QTQzNjg1NjJBQjVFMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4TbPRqrZFRVhYENO8TAEuFFNXSSb7kRyZ5rerLlSkuPrPe3Czk97srfVw1uJZ TjjqdqYE7sRGIr3F9dcZ75SQ0zAjZaMWliGGn5ibNg8O3dfTxhuS2EnmW7tETC4w +UD8ZzjNmcwIfPdsHwlvpGiIFwuxuHIM3ywwPt9h+KIq+tJexPoTQCjw84IWSskJ 4BaieMXM3h5RMshr+pwnb33ppYyzvwPAWwsU5Cp9aZ3b0R+qOgC4ikLmYu2eLsvc l+iI78Zu/5B+ZPqB7cS6Xrcy3RZ7Eh30hPwCO0G9P1JMj7U+LwVtSUXoPjyfI75S a9gZtE6caOQKULoFv0cNhbKJAgMBAAGjggMuMIIDKjAdBgNVHQ4EFgQU5DMXblmu m0dk6179BKQ2hWKrXiEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTgwMzE4L0I1NzE5REQyMUQ4RjExRTJCMDU3MDdFRjA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4MDMxOC9CNTcxOUREMjFEOEYxMUUyQjA1NzA3RUYwOEIwMkNEMi81RE1YYmxt dW0wZGs2MTc5QktRMmhXS3JYaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICXnsCAwIJpDA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBhuDgAME AmdtPAMEBMqt0DANBAIAAjAHAwUAJAd6ADANBgkqhkiG9w0BAQsFAAOCAQEAeuzX sFFwZtNOfz4J+iujlNq0/pxWcZIympTrAWU2RNFWQHvzd6rHSaLoj/VJltYkULTh p/RrnoM1KClT7J9PldSyrXGokZoz9LwBwsxrDumBiiymV2dVMBoXaX/Su0JuAS+R 54OfxKuqAL9zL4xdE98rdtGz0wHGhUy9nFEkWm2nnfZeVB6t/s5GqcHpQwDFjaQf CeuiVVJMl3R7PIEAu4k6saoHOJ0UycBizJRXXptLrZMd3oZ1Fjm6Cs5AOCG6nlKz z5YRi3RNQsgqYo5iuuRTF4GF7oLeVYPo+HLyebQlSu1oJsqdHRQLp9njzaEEToSe HaoQrIX6k37OGneaUA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:12 2025 by rpki-client