This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer File: 5EL5lVmsG6h-4TSLL8evCiL_smE.cer (raw, json) Hash identifier: AO2SHbfratfawQnWpVmmiKVMgQU/OzAWdKq7UkzRB9c= Subject key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0275F7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft caRepository: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 15:03:37 +0000 Certificate not after: Thu 30 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 203.132.0.0/22 IP: 2400:d2c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161271 (0x275f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 18 15:03:37 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=A9143336, serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2a:0e:31:9e:83:de:3b:6f:8a:47:ac:4d:58: 52:07:bd:2c:c6:8d:87:0c:61:ca:ae:a4:74:24:ba: e1:21:c6:13:37:62:c9:87:a7:ad:f5:b0:18:1a:c8: fb:fb:7d:30:06:1b:89:b3:4f:6f:a0:4c:4f:51:7f: 0e:41:07:91:44:b6:0b:9f:0f:64:b1:f1:ed:18:d2: 8d:bc:49:fb:1c:27:78:4b:51:bc:ba:4d:1b:9a:14: 05:f5:0f:8f:01:46:83:b1:6c:dc:b7:46:0e:4d:50: 85:6e:28:78:26:ea:b6:60:9c:41:79:b3:a6:e7:70: 9d:88:55:09:6b:58:18:c0:fc:a0:c6:bf:95:6a:69: 04:88:ba:dc:97:7c:c9:fd:ae:47:e7:ec:34:a5:e1: e1:ab:56:07:40:ed:25:8d:84:bb:91:a1:64:c3:e9: a6:82:dd:a1:3d:55:0d:76:88:fc:cc:51:12:27:e9: 9a:84:80:51:1f:d3:ec:a4:ed:c9:72:31:17:49:74: ce:fc:7f:63:1d:fa:60:09:bd:80:8b:0c:b1:4f:54: f9:75:f5:41:9f:36:e9:40:a7:2c:03:d7:25:c6:d1: 1c:12:74:9e:cf:72:3c:05:57:3b:e8:03:05:c4:bc: 51:50:01:6c:47:54:43:80:16:5e:62:c4:17:52:71: 7f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.132.0.0/22 IPv6: 2400:d2c0::/32 Signature Algorithm: sha256WithRSAEncryption 02:65:28:05:fe:e7:a6:27:5d:3d:f1:12:27:6a:c5:b3:8d:db: c8:58:e0:c1:ff:89:ec:55:d8:2d:c2:98:6e:e7:f6:e2:ed:8c: de:20:60:34:eb:07:df:88:94:ea:3e:05:0a:25:59:4c:5c:44: 09:49:3c:e2:17:ea:28:b9:db:b2:fa:0d:ac:a8:d3:9d:6b:11: 6e:42:6f:11:88:dd:68:f4:e0:8e:8d:91:c8:81:5c:9c:5b:0b: 0b:d2:09:2e:fc:03:0f:3e:8c:d9:a8:ca:7a:f0:01:07:3a:e8: b0:f0:7d:c2:8e:29:82:7b:f8:d7:10:23:ab:fe:7f:5b:db:2e: 07:8d:60:c0:a8:24:3f:ce:48:a1:35:d9:22:31:c2:ac:22:0a: 7f:9b:0e:6c:86:4f:8d:d3:fc:08:03:c6:86:79:2d:1a:94:82: ee:c6:42:5d:66:22:c7:f3:2a:ac:ab:45:f3:5e:b2:d0:81:3e: 80:ad:de:51:7c:c8:7b:bf:55:3d:cd:e0:ee:35:af:84:ea:c2: 70:27:38:1f:ac:80:e9:29:6b:3c:6e:78:5e:f7:9a:61:25:6e: ef:ae:1b:21:16:5e:63:29:10:f3:00:73:d1:59:42:e4:58:73: 0b:41:cc:3a:c0:3c:72:13:cd:d9:f6:13:79:4d:c9:4d:9f:8e: 22:8e:e7:79 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIDAnX3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExODE1MDMzN1oXDTI2MDczMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4 QjJGQzdBRjBBMjJGRkIyNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgKg4xnoPeO2+KR6xNWFIHvSzGjYcMYcqupHQkuuEhxhM3YsmHp631sBgayPv7 fTAGG4mzT2+gTE9Rfw5BB5FEtgufD2Sx8e0Y0o28SfscJ3hLUby6TRuaFAX1D48B RoOxbNy3Rg5NUIVuKHgm6rZgnEF5s6bncJ2IVQlrWBjA/KDGv5VqaQSIutyXfMn9 rkfn7DSl4eGrVgdA7SWNhLuRoWTD6aaC3aE9VQ12iPzMURIn6ZqEgFEf0+yk7cly MRdJdM78f2Md+mAJvYCLDLFPVPl19UGfNulApywD1yXG0RwSdJ7PcjwFVzvoAwXE vFFQAWxHVEOAFl5ixBdScX+1AgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQU5EL5lVms G6h+4TSLL8evCiL/smEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQzMzM2LzhFRTdGQzFFMDg1MzExRTRCMDIzOUU2MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0MzMzNi84RUU3RkMxRTA4NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZt c0c2aC00VFNMTDhldkNpTF9zbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBALLhAAwDQQCAAIwBwMFACQA0sAwDQYJKoZIhvcNAQELBQADggEB AAJlKAX+56YnXT3xEidqxbON28hY4MH/iexV2C3CmG7n9uLtjN4gYDTrB9+IlOo+ BQolWUxcRAlJPOIX6ii527L6Dayo051rEW5CbxGI3Wj04I6NkciBXJxbCwvSCS78 Aw8+jNmoynrwAQc66LDwfcKOKYJ7+NcQI6v+f1vbLgeNYMCoJD/OSKE12SIxwqwi Cn+bDmyGT43T/AgDxoZ5LRqUgu7GQl1mIsfzKqyrRfNestCBPoCt3lF8yHu/VT3N 4O41r4TqwnAnOB+sgOkpazxueF73mmElbu+uGyEWXmMpEPMAc9FZQuRYcwtBzDrA PHITzdn2E3lNyU2fjiKO53k= -----END CERTIFICATE-----Generated at Sat Dec 6 10:36:12 2025 by rpki-client