This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer File: 98erVUq_Hcr4wXnBS8h6vPi3dg4.cer (raw, json) Hash identifier: agtGMtdA9PNJ3/ja3OS66R6R3s5l5WOREPr8ipJRqvU= Subject key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0275BF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 17 Nov 2025 18:26:02 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 38286 IP: 122.252.176.0/21 IP: 2401:cb00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161215 (0x275bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 17 18:26:02 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E15EA, serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:e7:72:5a:1f:91:5a:e8:8e:86:89:f3:2a: ea:ea:e7:23:fb:65:0d:7a:56:dc:df:ce:23:09:cf: ff:ed:b8:55:24:31:d0:ce:44:ba:29:75:05:ab:db: 62:35:5d:a1:78:22:d4:09:db:ee:ae:de:aa:ae:b4: 06:9d:ec:22:5f:c6:63:4e:0c:52:6b:c5:c2:14:1e: 4c:72:97:4e:51:16:72:66:66:68:66:a5:2f:92:a5: 03:1e:55:68:30:c8:ba:61:0e:6a:98:4e:48:15:cd: 53:1b:af:c3:96:a5:e6:21:a4:b3:8f:4f:b3:7e:14: a2:e5:eb:8a:c1:71:26:3c:64:6e:22:96:e8:81:0c: 1c:5d:ae:40:ab:9b:cb:c5:cb:b5:12:ba:47:72:72: d1:91:06:ae:7a:95:b1:a8:8e:b1:5c:3e:a9:89:43: 33:ea:14:da:4f:b6:a9:32:d3:7e:0f:20:7d:af:43: d2:38:33:72:84:48:91:40:dd:e4:12:7b:68:97:3f: 98:78:5a:3b:7a:1a:09:c8:47:85:59:6c:d8:ee:42: cc:8b:42:f3:cb:32:bf:52:7a:f3:61:19:04:a6:98: e3:06:57:7c:00:42:23:10:97:8a:17:a8:1e:3d:c9: 21:4f:1d:04:bc:9c:1d:aa:98:18:2f:f8:65:90:ed: 76:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38286 sbgp-ipAddrBlock: critical IPv4: 122.252.176.0/21 IPv6: 2401:cb00::/32 Signature Algorithm: sha256WithRSAEncryption a4:e5:57:58:89:32:7e:d4:b9:c1:b2:35:c9:a6:06:07:07:04: 0a:48:f2:23:b7:f3:a7:8c:e0:e7:2b:60:f5:8b:9f:ac:e3:d1: c5:b0:d5:0f:f1:12:23:5f:c1:73:c4:47:a2:c9:8b:90:c1:c5: b3:78:f8:f9:e7:28:af:de:38:44:a9:e6:6a:8e:99:a8:a7:8d: 93:04:5a:22:50:50:5f:d3:52:78:1a:be:51:1b:70:11:ca:2d: c0:c8:6a:56:04:91:20:bd:f9:cb:0f:bc:b7:75:7f:36:70:ec: 54:3b:d6:61:fb:b3:0f:e6:fb:d7:1d:eb:c0:14:84:6e:c5:bf: 72:63:d9:ce:84:8b:b5:3d:5c:9e:8a:1c:21:17:79:08:f2:a7: 0a:fa:11:ba:b1:96:d6:13:bf:37:1a:31:a6:fc:aa:3d:63:e4: ef:cd:78:b7:df:08:f8:18:bc:2b:6c:0f:41:44:e9:7c:1b:ca: 65:b3:0d:38:6f:86:8e:76:7c:85:45:c0:53:cd:1f:e7:bf:f0: 2d:75:5b:20:cb:24:a1:a8:49:97:aa:da:dc:89:bf:75:54:2a: 9d:74:d6:f1:dc:06:56:84:24:4a:74:70:19:f8:30:ee:e3:c9: 3c:4c:88:05:e7:76:69:ab:12:90:d5:4b:91:90:c6:ed:a5:c3: 54:30:17:35 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnW/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNzE4MjYwMloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTE1RUExMTAvBgNVBAUTKEY3QzdBQjU1NEFCRjFEQ0FGOEMxNzlD MTRCQzg3QUJDRjhCNzc2MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpzOdyWh+RWuiOhonzKurq5yP7ZQ16VtzfziMJz//tuFUkMdDORLopdQWr22I1 XaF4ItQJ2+6u3qqutAad7CJfxmNODFJrxcIUHkxyl05RFnJmZmhmpS+SpQMeVWgw yLphDmqYTkgVzVMbr8OWpeYhpLOPT7N+FKLl64rBcSY8ZG4iluiBDBxdrkCrm8vF y7USukdyctGRBq56lbGojrFcPqmJQzPqFNpPtqky034PIH2vQ9I4M3KESJFA3eQS e2iXP5h4Wjt6GgnIR4VZbNjuQsyLQvPLMr9SevNhGQSmmOMGV3wAQiMQl4oXqB49 ySFPHQS8nB2qmBgv+GWQ7XZ3AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQU98erVUq/ Hcr4wXnBS8h6vPi3dg4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUxNUVBL0YxQTdFMkY0RkI4MTExRUM5QzQxMjY0NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMTVFQS9GMUE3RTJGNEZCODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVx X0hjcjR3WG5CUzhoNnZQaTNkZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAJWOMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDevywMA0EAgAC MAcDBQAkAcsAMA0GCSqGSIb3DQEBCwUAA4IBAQCk5VdYiTJ+1LnBsjXJpgYHBwQK SPIjt/OnjODnK2D1i5+s49HFsNUP8RIjX8FzxEeiyYuQwcWzePj55yiv3jhEqeZq jpmop42TBFoiUFBf01J4Gr5RG3ARyi3AyGpWBJEgvfnLD7y3dX82cOxUO9Zh+7MP 5vvXHevAFIRuxb9yY9nOhIu1PVyeihwhF3kI8qcK+hG6sZbWE783GjGm/Ko9Y+Tv zXi33wj4GLwrbA9BROl8G8plsw04b4aOdnyFRcBTzR/nv/AtdVsgyyShqEmXqtrc ib91VCqddNbx3AZWhCRKdHAZ+DDu48k8TIgF53ZpqxKQ1UuRkMbtpcNUMBc1 -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:28 2025 by rpki-client