This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer File: 9ssujrx6iSv6FcRHs5gkoFjHVa4.cer (raw, json) Hash identifier: UQTfYRpIkNkDeygmSYbnE4gp62tHIJxGPzSU3UdtQQs= Subject key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02780A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 21:28:58 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 45164 IP: 202.36.163.0/24 IP: 202.49.72.0/22 IP: 2001:df5:b000::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161802 (0x2780a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 21:28:58 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:55:6d:14:52:49:5d:df:ab:5c:af:d6:4a:4e: 8c:21:05:d5:1d:07:af:cf:2f:7d:79:8c:4a:7c:e5: 85:fa:51:7c:ee:f4:83:44:f0:ff:10:4e:47:37:bd: 2c:6c:08:d5:07:81:4d:14:3c:79:b4:61:ae:25:e6: 9b:67:34:47:5d:54:48:cf:d2:3f:77:2b:26:b8:ee: ab:40:36:d7:7b:6a:68:9e:6e:8c:2e:db:42:00:ea: 84:cc:c5:c7:b1:eb:ff:36:bc:8d:65:79:6a:ac:53: 6c:31:0c:a7:0a:18:5d:db:52:dd:fc:7e:bc:f9:3c: ef:c8:fa:95:71:f5:04:b4:3e:80:01:cb:eb:0d:a5: 11:b5:41:fd:c5:74:2b:05:e5:51:35:6c:67:11:63: ae:c7:50:d3:ca:31:78:5a:1e:92:e2:1b:44:c2:8d: ff:d1:fd:4f:cc:3e:f1:c7:f9:0c:d2:5d:ea:6e:16: ce:c1:6b:86:08:d3:dd:b3:33:39:e4:e3:00:4f:8f: 9c:77:23:3e:10:0b:b7:2f:1a:dd:bb:9f:f8:cc:64: eb:d5:34:66:c7:2a:98:f8:0f:ce:85:2f:94:34:cd: 77:ad:cb:03:f7:ca:65:b6:78:b4:d1:c8:4a:9a:c2: ad:6e:cd:c6:21:16:f6:64:78:67:cf:47:6e:fe:79: 49:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45164 sbgp-ipAddrBlock: critical IPv4: 202.36.163.0/24 202.49.72.0/22 IPv6: 2001:df5:b000::/48 Signature Algorithm: sha256WithRSAEncryption 96:8f:7e:49:b7:dc:4b:6e:ad:9e:9d:be:8c:0e:65:11:80:c1: c2:d8:70:2d:d9:53:7c:19:53:3f:f2:ba:a6:28:8e:2d:c7:af: b7:35:0a:97:db:7d:64:dc:e9:1a:6d:43:1b:bf:c2:2c:20:c3: f9:a5:4e:54:51:6e:b8:ee:f5:a3:d1:2a:c7:70:8e:9b:79:67: 15:92:be:5a:bc:63:70:89:e8:10:ed:c3:df:83:b8:2d:4d:83: 65:43:32:d0:61:48:d7:20:38:e4:e9:1a:86:55:03:6d:fd:34: 8e:3b:91:b1:a3:6a:1f:f4:1d:a2:94:56:41:09:a6:3b:12:8e: b1:5f:e5:26:9e:98:41:6b:b4:42:57:13:2a:de:ff:7f:8b:4c: 36:c6:d2:17:35:9c:57:7c:8c:c3:4c:66:be:44:31:7f:10:a9: 1f:85:05:17:ab:eb:21:40:ed:1b:7b:6c:c2:88:81:30:8b:36: 54:fd:71:ab:e0:c7:84:d0:4c:ef:b9:f1:8a:89:29:fb:1e:6b: 0d:6c:d3:03:be:c8:b3:f0:a9:c5:39:ef:2f:48:f4:4a:b1:5b: 85:f2:e1:b5:26:49:0f:c6:75:e5:a9:24:fd:a7:89:49:30:e5: 0b:39:6a:57:00:0c:8b:45:2c:8a:46:33:65:13:fb:34:77:e2: f8:a0:b4:3d -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIDAngKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTIxMjg1OFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjlFRjMxMTAvBgNVBAUTKEY2Q0IyRThFQkM3QTg5MkJGQTE1QzQ0 N0IzOTgyNEEwNThDNzU1QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6VW0UUkld36tcr9ZKTowhBdUdB6/PL315jEp85YX6UXzu9INE8P8QTkc3vSxs CNUHgU0UPHm0Ya4l5ptnNEddVEjP0j93Kya47qtANtd7amiebowu20IA6oTMxcex 6/82vI1leWqsU2wxDKcKGF3bUt38frz5PO/I+pVx9QS0PoABy+sNpRG1Qf3FdCsF 5VE1bGcRY67HUNPKMXhaHpLiG0TCjf/R/U/MPvHH+QzSXepuFs7Ba4YI092zMznk 4wBPj5x3Iz4QC7cvGt27n/jMZOvVNGbHKpj4D86FL5Q0zXetywP3ymW2eLTRyEqa wq1uzcYhFvZkeGfPR27+eUn3AgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQU9ssujrx6 iSv6FcRHs5gkoFjHVa4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI5RUYzLzI1MTlDREYwNDkyMzExRUFBMDY5QTU2NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCOUVGMy8yNTE5Q0RGMDQ5MjMxMUVBQTA2OUE1NjZDNEY5QUUwMi85c3N1anJ4 NmlTdjZGY1JIczVna29GakhWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALBsMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAyiSjAwQCyjFI MA8EAgACMAkDBwAgAQ31sAAwDQYJKoZIhvcNAQELBQADggEBAJaPfkm33EturZ6d vowOZRGAwcLYcC3ZU3wZUz/yuqYoji3Hr7c1CpfbfWTc6RptQxu/wiwgw/mlTlRR brju9aPRKsdwjpt5ZxWSvlq8Y3CJ6BDtw9+DuC1Ng2VDMtBhSNcgOOTpGoZVA239 NI47kbGjah/0HaKUVkEJpjsSjrFf5SaemEFrtEJXEyre/3+LTDbG0hc1nFd8jMNM Zr5EMX8QqR+FBRer6yFA7Rt7bMKIgTCLNlT9cavgx4TQTO+58YqJKfseaw1s0wO+ yLPwqcU57y9I9EqxW4Xy4bUmSQ/GdeWpJP2niUkw5Qs5alcADItFLIpGM2UT+zR3 4vigtD0= -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:32 2025 by rpki-client