This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer File: 7mC-_JS8D3S9nREVbhW6I_fr5ag.cer (raw, json) Hash identifier: yfAIKrrArCEtwPCzSpVRHyi919xZnEuE7cWvqISsmWY= Subject key identifier: EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0275DB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 11:21:59 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 2402:3020::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161243 (0x275db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 18 11:21:59 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91B6DD0, serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:66:12:ad:de:56:46:95:41:7e:73:44:9b:1f: d2:5c:a0:d9:54:ce:ab:69:27:be:60:09:c8:ad:b4: ad:ae:65:81:8b:a3:d4:7f:3b:2a:52:10:36:65:2b: 1c:96:5f:7c:3a:58:9d:39:a6:36:92:f2:17:2e:e0: 0d:c6:dd:6d:5d:a7:44:f9:0e:cc:12:29:91:8a:e4: e0:4d:f6:ec:7c:55:04:4c:2e:a0:72:6c:ea:6f:cf: 86:ca:f8:be:d9:11:ba:db:5d:c9:1a:a9:62:e6:39: 19:80:f3:f3:6f:a4:e4:76:e0:7f:28:0a:a5:80:6e: 88:64:4d:da:b3:e8:56:90:ff:05:f6:d1:cd:08:a2: c8:15:10:3f:f7:1a:01:c9:4a:9a:17:1b:30:c3:3c: 48:d7:b3:9f:27:58:f1:a8:03:4a:95:c9:98:36:f3: 76:a5:2f:d6:d1:b2:c0:0e:46:89:c8:97:88:f9:93: 7a:12:87:87:b6:67:eb:3b:5f:22:73:0b:22:bf:78: ab:2a:7f:d7:c7:4a:e8:5d:14:cb:7f:68:c6:84:5c: f7:b5:80:d5:2f:04:f2:82:6c:ee:cd:33:ee:c8:2a: 65:3e:ca:a3:f6:b2:8e:69:dd:1b:e0:84:09:72:47: c9:bd:41:b8:bb:31:b3:63:35:7a:36:aa:50:8b:d9: 5b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:3020::/32 Signature Algorithm: sha256WithRSAEncryption 11:c3:90:47:40:80:39:d1:73:96:b6:26:55:02:48:c6:7d:47: 70:69:7b:59:63:b8:66:e0:8c:84:56:68:90:2c:4a:dd:b8:64: e9:4f:36:4a:7f:ec:36:da:f6:bc:d2:0b:da:8f:63:49:8f:ee: e9:fd:c0:34:c0:e0:aa:e8:20:e7:c9:8c:bd:38:54:66:2c:4a: 1c:79:87:c7:6b:d1:b0:b0:2f:b4:24:81:69:2a:a4:3e:e2:f5: 71:06:21:30:53:ae:4c:b0:fe:d3:d1:d3:a7:04:4d:08:f7:74: d5:fb:31:b3:d8:d5:76:6a:2a:10:61:65:dc:91:33:2d:48:60: f0:90:cb:5e:6b:d0:8b:99:50:b4:9a:43:cf:38:73:6b:22:5a: e4:2d:7e:98:73:3b:ee:08:c1:5d:f4:c1:ee:00:58:a0:ce:c8: 80:08:68:4e:78:a4:76:63:58:34:97:f1:75:f0:de:e7:0e:a7: e8:f6:31:61:09:2b:4c:3b:43:bf:f9:d5:99:6c:5f:66:d8:e7: 03:a5:84:3b:cd:97:0a:52:48:1d:7e:36:d3:ea:f5:e5:c9:60: 4b:2e:99:31:0e:8c:e0:42:d3:8b:70:7d:41:be:ad:eb:55:19: 97:4c:d8:6e:42:b1:d2:df:1f:fe:4a:19:de:2b:08:86:86:e9: 94:cb:73:9c -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgIDAnXbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExODExMjE1OVoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjZERDAxMTAvBgNVBAUTKEVFNjBCRUZDOTRCQzBGNzRCRDlEMTEx NTZFMTVCQTIzRjdFQkU1QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1ZhKt3lZGlUF+c0SbH9JcoNlUzqtpJ75gCcittK2uZYGLo9R/OypSEDZlKxyW X3w6WJ05pjaS8hcu4A3G3W1dp0T5DswSKZGK5OBN9ux8VQRMLqBybOpvz4bK+L7Z EbrbXckaqWLmORmA8/NvpOR24H8oCqWAbohkTdqz6FaQ/wX20c0IosgVED/3GgHJ SpoXGzDDPEjXs58nWPGoA0qVyZg283alL9bRssAORonIl4j5k3oSh4e2Z+s7XyJz CyK/eKsqf9fHSuhdFMt/aMaEXPe1gNUvBPKCbO7NM+7IKmU+yqP2so5p3RvghAly R8m9Qbi7MbNjNXo2qlCL2VvBAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQU7mC+/JS8 D3S9nREVbhW6I/fr5agwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI2REQwL0NBNzUwQUNBQzQ3MDExRjBCRDVBNjIzOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCNkREMC9DQTc1MEFDQUM0NzAxMUYwQkQ1QTYyMzlDNEY5QUUwMi83bUMtX0pT OEQzUzluUkVWYmhXNklfZnI1YWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAkAjAgMA0GCSqGSIb3DQEBCwUAA4IBAQARw5BHQIA50XOWtiZV AkjGfUdwaXtZY7hm4IyEVmiQLErduGTpTzZKf+w22va80gvaj2NJj+7p/cA0wOCq 6CDnyYy9OFRmLEoceYfHa9GwsC+0JIFpKqQ+4vVxBiEwU65MsP7T0dOnBE0I93TV +zGz2NV2aioQYWXckTMtSGDwkMtea9CLmVC0mkPPOHNrIlrkLX6YczvuCMFd9MHu AFigzsiACGhOeKR2Y1g0l/F18N7nDqfo9jFhCStMO0O/+dWZbF9m2OcDpYQ7zZcK UkgdfjbT6vXlyWBLLpkxDozgQtOLcH1Bvq3rVRmXTNhuQrHS3x/+ShneKwiGhumU y3Oc -----END CERTIFICATE-----Generated at Sat Dec 6 13:12:04 2025 by rpki-client