This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer File: AZcEvn5KzguhIRSzKOsCBxHvTq8.cer (raw, json) Hash identifier: PttwIrDw4jovCLygxZIDzVWU4emc1UW/KyDJuxP8Z6w= Subject key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027429 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 09 Nov 2025 13:32:30 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 24504 IP: 202.51.0.0/22 IP: 2401:b20::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160809 (0x27429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 9 13:32:30 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91728E2, serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:d3:db:bd:13:8a:dd:6f:b8:e1:98:60:98: 51:51:c3:e4:cd:40:87:ee:70:09:2b:79:a4:e4:05: aa:ce:f1:03:01:93:9c:81:13:77:95:96:bb:9b:3c: cf:f4:9f:45:1c:85:41:f8:35:fe:fc:f9:f4:03:b1: 14:4b:37:07:46:3d:99:5f:23:25:b9:bc:2f:6f:9c: b1:15:6a:97:8f:36:5e:db:85:56:59:73:27:d9:cf: 05:66:94:b7:0f:b5:1c:ed:d2:a7:1d:0f:19:47:c8: 98:64:e2:54:1a:e2:28:ca:f3:af:d8:61:e5:e2:9e: cb:7d:17:bb:46:6f:ac:48:7b:77:73:75:74:2b:5d: fc:43:01:ea:61:2b:c8:e6:20:38:ff:7f:c4:14:34: 8f:2e:24:45:e3:8f:03:84:d0:4c:0f:3c:27:b1:50: e8:93:a7:25:f4:da:fa:42:e9:9e:a7:84:81:ba:8d: 12:c2:d9:1f:3d:bd:09:78:2e:71:5f:c3:2d:e2:6a: 9d:fb:c7:1e:78:b2:00:3f:03:ef:f8:d3:76:ef:f6: 5d:68:dd:f7:1f:ae:7a:95:c6:59:d2:5d:78:b2:b8: ed:1f:39:cd:cf:d3:5b:b4:21:93:19:07:21:6d:d0: ff:a2:f5:57:a1:73:48:25:bb:ab:33:eb:be:bb:ef: 8c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24504 sbgp-ipAddrBlock: critical IPv4: 202.51.0.0/22 IPv6: 2401:b20::/32 Signature Algorithm: sha256WithRSAEncryption 3f:4a:a3:b1:dc:ae:9e:46:0b:35:0a:f2:2b:f0:37:c0:15:20: d4:c6:79:64:ba:82:6a:4d:86:c0:0b:53:ec:fc:d2:98:0a:03: cc:47:04:08:04:28:65:07:02:c4:7d:23:29:b3:c1:d7:fa:1a: 32:3a:9f:54:82:21:27:6d:36:08:70:b0:d9:a3:02:0b:98:e3: 77:d8:68:ba:f3:5d:7d:37:63:2d:7a:e2:23:45:22:20:d9:71: b9:18:ca:f0:3f:ba:96:b0:92:eb:0d:f7:93:b4:7b:12:02:e4: 2d:5c:e1:f0:bc:e7:bc:5b:6f:cd:a1:a9:90:00:e3:2f:93:37: 86:e8:52:17:24:c0:12:c4:78:76:b2:2d:62:a2:4a:6e:41:be: 6e:d3:63:61:23:61:01:ca:85:1d:bf:26:b8:ca:36:35:39:f3: d4:06:6a:63:64:8f:e0:d5:54:76:ac:7c:8b:81:ed:56:3c:64: c8:83:bc:a0:43:57:d1:2f:e9:44:e0:cc:99:ce:78:38:7b:a5: cc:60:05:cf:5b:b7:ce:a3:40:e5:d0:5d:7a:09:2f:86:59:31: ca:ff:d5:31:91:0f:8d:2d:91:0f:3a:e9:a0:1e:e6:a0:e0:7f: 71:bb:4c:8c:a1:89:21:6c:15:e1:0f:a0:02:11:40:1e:13:0f: 47:1d:86:b5 -----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgIDAnQpMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwOTEzMzIzMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNzI4RTIxMTAvBgNVBAUTKDAxOTcwNEJFN0U0QUNFMEJBMTIxMTRC MzI4RUIwMjA3MTFFRjRFQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAudPbvROK3W+44ZhgmFFRw+TNQIfucAkreaTkBarO8QMBk5yBE3eVlrubPM/0 n0UchUH4Nf78+fQDsRRLNwdGPZlfIyW5vC9vnLEVapePNl7bhVZZcyfZzwVmlLcP tRzt0qcdDxlHyJhk4lQa4ijK86/YYeXinst9F7tGb6xIe3dzdXQrXfxDAephK8jm IDj/f8QUNI8uJEXjjwOE0EwPPCexUOiTpyX02vpC6Z6nhIG6jRLC2R89vQl4LnFf wy3iap37xx54sgA/A+/403bv9l1o3fcfrnqVxlnSXXiyuO0fOc3P01u0IZMZByFt 0P+i9Vehc0glu6sz676774wPAgMBAAGjggMdMIIDGTAdBgNVHQ4EFgQUAZcEvn5K zguhIRSzKOsCBxHvTq8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTcyOEUyLzk3MDEzQTRFNTA0MDExRUQ4QUVDQUE2RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3MjhFMi85NzAxM0E0RTUwNDAxMUVEOEFFQ0FBNkZDNEY5QUUwMi9BWmNFdm41 S3pndWhJUlN6S09zQ0J4SHZUcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICX7gwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBALKMwAwDQQCAAIw BwMFACQBCyAwDQYJKoZIhvcNAQELBQADggEBAD9Ko7Hcrp5GCzUK8ivwN8AVINTG eWS6gmpNhsALU+z80pgKA8xHBAgEKGUHAsR9Iymzwdf6GjI6n1SCISdtNghwsNmj AguY43fYaLrzXX03Yy164iNFIiDZcbkYyvA/upawkusN95O0exIC5C1c4fC857xb b82hqZAA4y+TN4boUhckwBLEeHayLWKiSm5Bvm7TY2EjYQHKhR2/JrjKNjU589QG amNkj+DVVHasfIuB7VY8ZMiDvKBDV9Ev6UTgzJnOeDh7pcxgBc9bt86jQOXQXXoJ L4ZZMcr/1TGRD40tkQ866aAe5qDgf3G7TIyhiSFsFeEPoAIRQB4TD0cdhrU= -----END CERTIFICATE-----Generated at Sat Dec 6 22:12:01 2025 by rpki-client