This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer (raw, json) Hash identifier: VRbj7KaAWIzpoNoHkWTOIptLMU36teKSgYXI/diAyKw= Subject key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C3B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 13:17:54 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 202.0.108.0/24 IP: 202.2.0.0/22 IP: 203.7.130.0/23 IP: 203.26.100.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162875 (0x27c3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 5 13:17:54 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:0a:bb:a0:b2:c4:0f:22:83:76:54:c3:d2: 58:6f:d1:91:fa:20:57:d9:fe:63:69:fd:5a:c5:d3: f0:3d:b5:48:e4:f6:c1:b3:ba:ef:4e:48:a5:19:62: 8f:a9:30:6d:80:1b:4f:64:08:55:87:4d:7e:81:82: 96:54:a2:73:31:a3:b9:2a:f0:da:41:b0:47:76:b2: 2e:84:08:bf:ba:58:25:17:b4:d8:e4:d0:6a:f2:93: ed:10:89:ae:07:cd:e0:3c:53:3a:ad:c5:f5:28:33: a7:09:68:1f:2b:6c:4a:7e:f2:ec:7a:13:23:18:c6: 2b:b3:b4:e2:ed:29:13:5c:39:ca:a7:79:79:8a:ec: 08:07:a8:d2:c2:11:93:1b:0d:39:4a:cf:6c:1e:8b: b2:ce:dd:e6:b5:86:3e:78:de:1a:ad:c7:76:44:4a: 17:09:9b:13:23:f2:4b:21:0a:c0:4e:82:5a:a0:63: 54:a7:76:85:3e:90:85:30:be:98:21:30:52:b1:87: 4a:3c:36:73:a7:cc:01:b5:56:8e:e4:06:5e:86:a3: 5e:82:ac:52:24:12:4d:f5:05:a0:87:78:e5:25:c0: 8f:f9:d9:2b:26:7a:fa:20:5d:db:81:6f:ea:42:85: 85:bb:ce:8d:15:99:a0:10:b3:86:2f:b6:5c:54:eb: 88:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.0.108.0/24 202.2.0.0/22 203.7.130.0/23 203.26.100.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:af:72:ab:79:e4:5a:12:dc:28:41:2e:0f:dd:d0:31:2d:a4: db:5a:55:65:40:5c:48:4d:3f:1b:e1:6e:b5:53:ea:d6:a5:40: 3e:a7:92:53:fb:69:9d:76:9e:bb:7d:e8:d6:14:bb:e5:c1:18: ca:26:2b:f6:23:76:e3:21:1a:7d:57:eb:24:c9:af:e0:59:38: 4a:04:a3:84:e1:ec:f1:1e:30:66:d0:22:34:ab:45:f5:e3:0c: dd:85:cf:c3:6c:7d:f9:94:61:7b:48:57:0d:5c:8e:d4:29:00: 7e:7a:47:23:4a:ea:43:0c:79:89:59:7b:c9:a2:c7:07:3f:5a: 54:2b:05:4e:92:14:cd:88:24:cb:45:c1:f3:63:e5:78:1f:54: c4:80:a4:71:b7:9a:63:f1:e5:c8:2f:00:b6:ab:0b:83:5d:9c: 10:2b:bf:02:13:13:17:e8:1c:26:13:f6:95:40:a8:f2:45:c3: 35:34:b6:a7:9d:8b:68:2f:f3:03:80:2e:5b:b6:88:f7:c7:fc: a1:38:de:3a:a0:c2:a2:0b:fa:14:3e:6f:69:2f:4d:b1:ef:52: 5c:d3:1f:31:56:96:04:e4:0b:b6:ad:6f:11:92:82:b4:54:e0: b9:d1:c0:7e:95:9f:f9:ac:5f:92:12:75:df:43:e0:2d:87:b9: d2:52:7b:c9 -----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgIDAnw7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNTEzMTc1NFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxMkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQy RDI3M0E0MUYyMDFFQTY0MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6dAq7oLLEDyKDdlTD0lhv0ZH6IFfZ/mNp/VrF0/A9tUjk9sGzuu9OSKUZYo+p MG2AG09kCFWHTX6BgpZUonMxo7kq8NpBsEd2si6ECL+6WCUXtNjk0Gryk+0Qia4H zeA8UzqtxfUoM6cJaB8rbEp+8ux6EyMYxiuztOLtKRNcOcqneXmK7AgHqNLCEZMb DTlKz2wei7LO3ea1hj543hqtx3ZEShcJmxMj8kshCsBOglqgY1SndoU+kIUwvpgh MFKxh0o8NnOnzAG1Vo7kBl6Go16CrFIkEk31BaCHeOUlwI/52SsmevogXduBb+pC hYW7zo0VmaAQs4YvtlxU64jZAgMBAAGjggMFMIIDATAdBgNVHQ4EFgQU7FGp6gbB yFf0jr0tJzpB8gHqZDQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJERDE1L0M3NjFBMEFBQ0M1MjExRURBODI5MUQxMEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyREQxNS9DNzYxQTBBQUNDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdi QnlGZjBqcjB0SnpwQjhnSHFaRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8EIjAg MB4EAgABMBgDBADKAGwDBALKAgADBAHLB4IDBADLGmQwDQYJKoZIhvcNAQELBQAD ggEBAI6vcqt55FoS3ChBLg/d0DEtpNtaVWVAXEhNPxvhbrVT6talQD6nklP7aZ12 nrt96NYUu+XBGMomK/YjduMhGn1X6yTJr+BZOEoEo4Th7PEeMGbQIjSrRfXjDN2F z8NsffmUYXtIVw1cjtQpAH56RyNK6kMMeYlZe8mixwc/WlQrBU6SFM2IJMtFwfNj 5XgfVMSApHG3mmPx5cgvALarC4NdnBArvwITExfoHCYT9pVAqPJFwzU0tqedi2gv 8wOALlu2iPfH/KE43jqgwqIL+hQ+b2kvTbHvUlzTHzFWlgTkC7atbxGSgrRU4LnR wH6Vn/msX5ISdd9D4C2HudJSe8k= -----END CERTIFICATE-----Generated at Sat Dec 6 10:44:20 2025 by rpki-client