This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer File: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer (raw, json) Hash identifier: DKAxrj+2UvEeZupfUewUKJ9qq8TekorMtmkgGvlx8QM= Subject key identifier: F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0276C6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft caRepository: rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 21 Nov 2025 02:35:32 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154376 IP: 2402:3a60::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161478 (0x276c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 21 02:35:32 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A913CE18, serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:6d:53:ac:4a:2c:d0:1b:13:d4:d9:24:d4: 58:7d:15:f5:81:60:0f:96:6c:9b:8f:f7:65:f6:24: e4:f9:3d:c6:76:d8:8f:88:a6:d5:c7:d7:b6:a1:af: 69:60:c9:1d:29:96:9e:a2:61:60:e5:f1:67:47:0e: ea:00:62:74:9a:93:42:2d:2e:b4:1a:e0:1c:f4:a1: c7:59:37:08:a2:40:3d:62:98:1d:fe:2e:ab:f5:ea: ab:a6:dc:34:7a:d2:0f:93:5e:68:c3:d3:b1:f0:e9: ae:39:48:54:ef:e6:7e:0a:39:de:c2:59:d4:0f:63: c1:e2:82:c7:9e:c5:a5:66:e9:00:d4:a6:2a:e3:fa: d5:a0:7a:e3:29:5b:66:56:c6:87:a1:ad:a6:44:65: 51:3b:e0:c9:51:11:cc:17:7b:9e:e2:82:39:65:5f: ef:06:85:4d:f6:0e:8f:c8:ce:17:b1:59:e7:c7:fd: 78:0a:2f:80:3d:57:7a:33:e3:9c:34:c7:f7:95:9d: 94:5d:60:a2:36:4f:5c:94:fd:d8:64:8f:be:d9:3f: d8:25:8e:b3:13:df:4a:c2:a1:8e:3a:48:3e:ea:83: 5b:26:83:90:90:1f:e3:d0:6d:5f:75:f8:76:1b:95: f2:92:5a:c0:a3:b4:c3:d7:8e:4c:57:92:7b:03:9a: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154376 sbgp-ipAddrBlock: critical IPv6: 2402:3a60::/32 Signature Algorithm: sha256WithRSAEncryption 73:cf:ef:b5:0d:6f:4a:3c:61:5c:c3:18:af:ea:7f:33:23:d5: ef:6f:d8:f6:31:24:de:c4:32:33:1b:d2:1b:2e:22:01:f3:cc: bb:e8:b2:e7:70:3a:27:92:18:ac:4e:92:cc:97:8a:1c:86:e5: 0b:74:dd:ae:66:51:3a:fb:a6:12:1f:31:20:78:89:bf:fb:22: 62:51:18:3b:0b:c5:c7:b8:51:24:4c:70:3e:5d:c3:6c:09:19: 22:a6:a3:46:44:9f:2e:f4:28:46:f8:a4:66:bb:37:1b:36:a8: e8:24:9e:10:ac:f6:3d:2b:dc:d3:ba:cc:ff:a3:1e:6b:69:58: f9:42:5f:34:ec:e7:d1:72:93:fb:7d:90:bf:a4:8d:2b:bc:c6: aa:9e:fc:18:82:c1:78:ea:d1:6b:b2:51:8a:48:09:cf:43:ba: af:20:55:54:2e:10:74:0d:ba:fe:15:4d:c8:82:a7:f3:4b:d3: 31:dc:f8:9c:b1:33:65:af:3d:66:2a:01:37:13:0b:8e:4a:44: 2a:aa:20:ad:97:39:28:e8:56:7f:0c:ca:51:be:28:9e:67:a6: 0b:db:94:a4:60:55:b0:6d:c3:85:68:f5:4b:8d:62:c2:f6:33: 34:1d:69:58:23:9a:18:12:07:7b:c9:b4:60:44:b6:a4:2c:26: 5a:c8:1a:97 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAnbGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMTAyMzUzMloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxM0NFMTgxMTAvBgNVBAUTKEY0QjAzODVBNURDREVGRTZENEVDNkM2 Q0JDRUEyMTU1RkQ2MDU3MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIDG1TrEos0BsT1Nkk1Fh9FfWBYA+WbJuP92X2JOT5PcZ22I+IptXH17ahr2lg yR0plp6iYWDl8WdHDuoAYnSak0ItLrQa4Bz0ocdZNwiiQD1imB3+Lqv16qum3DR6 0g+TXmjD07Hw6a45SFTv5n4KOd7CWdQPY8HigseexaVm6QDUpirj+tWgeuMpW2ZW xoehraZEZVE74MlREcwXe57igjllX+8GhU32Do/IzhexWefH/XgKL4A9V3oz45w0 x/eVnZRdYKI2T1yU/dhkj77ZP9gljrMT30rCoY46SD7qg1smg5CQH+PQbV91+HYb lfKSWsCjtMPXjkxXknsDmrspAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQU9LA4Wl3N 7+bU7GxsvOohVf1gVxcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNDRTE4L0JEREM0REI0QzY4MjExRjBCQTVFMTc0NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzQ0UxOC9CRERDNERCNEM2ODIxMUYwQkE1RTE3NDZDNEY5QUUwMi85TEE0V2wz TjctYlU3R3hzdk9vaFZmMWdWeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlsIMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAI6YDANBgkq hkiG9w0BAQsFAAOCAQEAc8/vtQ1vSjxhXMMYr+p/MyPV72/Y9jEk3sQyMxvSGy4i AfPMu+iy53A6J5IYrE6SzJeKHIblC3TdrmZROvumEh8xIHiJv/siYlEYOwvFx7hR JExwPl3DbAkZIqajRkSfLvQoRvikZrs3Gzao6CSeEKz2PSvc07rM/6Mea2lY+UJf NOzn0XKT+32Qv6SNK7zGqp78GILBeOrRa7JRikgJz0O6ryBVVC4QdA26/hVNyIKn 80vTMdz4nLEzZa89ZioBNxMLjkpEKqogrZc5KOhWfwzKUb4onmemC9uUpGBVsG3D hWj1S41iwvYzNB1pWCOaGBIHe8m0YES2pCwmWsgalw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:27 2025 by rpki-client