This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer File: AwfvDynPItsJcPUIPAI8KqDW9Rc.cer (raw, json) Hash identifier: 2DFiU/36NZafRl9MQ0IpmlhUec5b4VN13j+w7LBJTyc= Subject key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02824E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 31 Dec 2025 14:19:18 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 24320 IP: 202.72.240.0/21 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164430 (0x2824e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 31 14:19:18 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:78:08:54:f3:43:0a:8b:06:ed:ba:ca:5d:a4: 77:f0:ff:30:02:21:35:39:e4:18:8f:f7:9b:a1:ee: e0:68:33:58:03:2a:d3:24:34:f6:cc:57:49:e4:ec: a6:96:96:e5:37:38:1b:eb:bd:ab:1a:bc:ed:26:cc: c7:71:ef:13:74:61:13:af:2f:ca:81:64:59:f4:72: a9:5b:b7:be:d4:a0:26:46:03:c4:df:9a:ab:f1:f0: 90:d0:89:39:e5:c2:52:17:dd:11:b7:b1:1a:20:5f: 23:a4:f2:e0:1b:9d:2e:d1:86:ef:b0:1c:4d:4d:f2: bb:b9:f3:42:12:c3:8a:e2:b8:45:d4:eb:a4:c5:da: 56:ff:1c:a0:f9:dd:7d:fb:41:9f:08:75:6d:7e:f5: 19:51:af:05:26:39:a8:68:96:b8:49:fd:16:1c:a7: 0a:2e:b7:98:2d:cf:0e:5a:66:ee:0b:8f:de:59:71: bc:c8:57:67:1c:63:15:58:c5:d8:d6:95:ba:d0:5f: 14:45:1e:7f:15:43:6d:a5:df:9e:fe:18:e1:10:14: 0d:a6:fd:66:1f:dc:11:3b:62:12:a3:01:e1:e0:57: 0c:6a:a3:0f:78:7b:4f:17:6b:6d:c4:d5:db:71:ce: b2:d8:61:4f:51:00:f2:ae:25:b4:5e:5c:9c:a2:95: 3d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24320 sbgp-ipAddrBlock: critical IPv4: 202.72.240.0/21 Signature Algorithm: sha256WithRSAEncryption bc:23:f8:5a:b3:ba:c6:18:63:0a:b0:dc:37:23:8c:d1:a5:02: bd:09:bb:c5:1e:2a:ce:f0:0e:25:8d:13:60:f1:d4:71:bd:49: 99:a9:56:96:40:42:29:f9:3f:7c:64:c4:9f:bb:74:b0:f4:b7: c0:0c:ac:11:f4:51:82:0e:f3:04:c8:1f:67:ec:ab:d2:ee:70: fb:ff:40:6a:d5:80:bb:e6:4f:22:0a:85:a0:95:a1:c0:0e:d6: da:bc:e1:de:c9:b3:15:50:5c:d6:4e:ca:01:36:6d:9e:61:46: 10:44:d0:aa:77:f8:7e:dc:06:51:d6:f0:2f:70:39:1b:bc:ff: 65:2d:55:0d:01:d4:a0:ee:5b:d6:a3:86:21:e2:50:bf:d3:cd: 9d:83:66:00:2e:c1:ce:dc:a7:a5:05:5a:29:6d:33:ea:7e:a7: b4:9b:68:ed:c5:05:3b:ed:81:0a:d1:88:75:49:84:0d:b3:2e: ca:a2:b8:c4:7d:6b:70:bd:3f:44:8c:b7:ff:7a:d5:c2:71:d2: 7a:66:63:48:82:23:93:70:af:a5:a5:6f:97:fb:a4:23:a2:8b: b2:d3:1b:01:3f:6e:6e:a1:06:a8:ec:d3:65:c7:85:bb:7a:21: e3:ee:a1:5b:ae:4e:48:f4:ff:5c:ad:8e:3d:12:0d:ec:64:53: 23:a2:29:21 -----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgIDAoJOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMTE0MTkxOFoXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRDg3MDQxMTAvBgNVBAUTKDAzMDdFRjBGMjlDRjIyREIwOTcwRjUw ODNDMDIzQzJBQTBENkY1MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkeAhU80MKiwbtuspdpHfw/zACITU55BiP95uh7uBoM1gDKtMkNPbMV0nk7KaW luU3OBvrvasavO0mzMdx7xN0YROvL8qBZFn0cqlbt77UoCZGA8Tfmqvx8JDQiTnl wlIX3RG3sRogXyOk8uAbnS7Rhu+wHE1N8ru580ISw4riuEXU66TF2lb/HKD53X37 QZ8IdW1+9RlRrwUmOaholrhJ/RYcpwout5gtzw5aZu4Lj95ZcbzIV2ccYxVYxdjW lbrQXxRFHn8VQ22l357+GOEQFA2m/WYf3BE7YhKjAeHgVwxqow94e08Xa23E1dtx zrLYYU9RAPKuJbReXJyilT29AgMBAAGjggMOMIIDCjAdBgNVHQ4EFgQUAwfvDynP ItsJcPUIPAI8KqDW9RcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ4NzA0LzU2NTVBQzk4QkMwQzExRUE5MUUwOUI2OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEODcwNC81NjU1QUM5OEJDMEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHlu UEl0c0pjUFVJUEFJOEtxRFc5UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICXwAwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPKSPAwDQYJKoZI hvcNAQELBQADggEBALwj+FqzusYYYwqw3DcjjNGlAr0Ju8UeKs7wDiWNE2Dx1HG9 SZmpVpZAQin5P3xkxJ+7dLD0t8AMrBH0UYIO8wTIH2fsq9LucPv/QGrVgLvmTyIK haCVocAO1tq84d7JsxVQXNZOygE2bZ5hRhBE0Kp3+H7cBlHW8C9wORu8/2UtVQ0B 1KDuW9ajhiHiUL/TzZ2DZgAuwc7cp6UFWiltM+p+p7SbaO3FBTvtgQrRiHVJhA2z LsqiuMR9a3C9P0SMt/961cJx0npmY0iCI5Nwr6Wlb5f7pCOii7LTGwE/bm6hBqjs 02XHhbt6IePuoVuuTkj0/1ytjj0SDexkUyOiKSE= -----END CERTIFICATE-----Generated at Sun Jan 25 07:27:38 2026 by rpki-client