This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer File: B_MbR0cTs6FSxqX49I3tIJfcJB8.cer (raw, json) Hash identifier: vPtU1Bk7sPjk6vk61xet8MlRQJiB+wqrBbaaUsKoflg= Subject key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028165 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft caRepository: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 04:44:40 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 138667 IP: 2001:df4:9340::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164197 (0x28165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 29 04:44:40 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:99:fd:fb:7c:f0:f5:14:41:6b:1b:e3:3b: f3:bc:61:78:d6:84:dc:5b:98:6e:10:40:c3:2a:be: b1:c2:22:7a:35:a8:7f:6e:6b:fd:e3:72:13:a9:e2: 2d:8a:b2:fc:5c:2c:27:bc:db:66:c1:29:5a:cd:3a: 75:dc:a0:af:00:b3:7b:1b:09:72:ed:ff:61:3f:b8: 3c:f4:c7:0f:19:c9:a2:1a:69:9f:f0:cf:28:cc:76: 87:8d:85:85:bc:0c:93:ae:35:53:4f:54:21:68:fe: fd:29:6b:db:7b:64:c0:c6:ac:e7:8b:e4:0e:3f:16: 4b:7d:ef:4f:1a:b7:4a:a9:c8:91:7b:01:96:f4:81: 6d:fd:23:34:70:6d:7c:55:bf:4b:3a:8f:05:c8:50: 41:19:02:d4:8f:4f:63:49:e8:09:8b:97:07:86:22: 80:a0:cc:4a:68:c2:76:42:89:5c:60:31:6c:c0:82: a2:79:c4:61:3d:38:5f:bb:c1:60:50:eb:70:c0:a6: 92:d9:82:15:9b:67:cd:b2:28:f0:f5:73:df:be:f7: d9:e4:47:68:b8:0f:b4:57:1f:c6:b7:57:30:5a:66: 45:30:ea:bf:64:74:de:0d:ad:33:f1:71:dc:c3:d0: b8:00:a0:24:cc:eb:ea:17:78:77:fe:86:fa:bc:72: c1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138667 sbgp-ipAddrBlock: critical IPv6: 2001:df4:9340::/48 Signature Algorithm: sha256WithRSAEncryption 3a:f7:d7:b0:74:35:4e:46:9d:15:f8:5a:a4:a0:86:c8:50:36: 0e:d3:08:f7:57:54:c4:fe:e9:49:6c:43:3b:3b:fb:54:35:4c: 08:34:e4:9d:66:ec:0c:1e:83:58:5e:a7:e1:02:7e:d8:5e:85: 3f:0a:d9:74:5f:19:4f:80:39:a2:e4:ce:eb:6c:fe:fd:65:0e: 3e:c4:5e:3c:05:4e:34:d5:45:05:0b:c6:6a:9c:c1:98:c6:0b: 3d:2e:03:8b:95:fa:4e:13:f8:f1:3e:69:17:70:aa:cb:03:74: 89:36:40:16:9b:97:a2:57:66:c5:e5:61:25:64:a7:6f:a4:6d: 86:07:d5:32:e2:18:7b:9c:02:7a:d9:13:13:5e:fe:dd:7a:34: 00:33:3f:8f:0a:61:d3:88:6b:ad:a4:23:27:3f:af:3c:d2:f2: e8:f7:92:fa:23:b7:cc:f1:a8:0f:57:bc:28:00:cd:22:a8:1f: 85:bf:eb:3c:55:fb:df:fe:d5:5d:38:96:d4:61:94:e7:df:23: a6:f1:3d:18:67:50:28:aa:96:3e:06:05:72:a4:e1:1c:6e:85: 57:61:da:af:21:76:8a:d0:28:47:74:bc:5b:d8:83:c0:2f:c6: f9:8b:63:94:a2:1a:cb:5d:9e:4a:17:36:6f:2b:69:66:ce:9a: 4d:e4:74:ec -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAoFlMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyOTA0NDQ0MFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNzBEM0UxMTAvBgNVBAUTKDA3RjMxQjQ3NDcxM0IzQTE1MkM2QTVG OEY0OERFRDIwOTdEQzI0MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF3Zn9+3zw9RRBaxvjO/O8YXjWhNxbmG4QQMMqvrHCIno1qH9ua/3jchOp4i2K svxcLCe822bBKVrNOnXcoK8As3sbCXLt/2E/uDz0xw8ZyaIaaZ/wzyjMdoeNhYW8 DJOuNVNPVCFo/v0pa9t7ZMDGrOeL5A4/Fkt9708at0qpyJF7AZb0gW39IzRwbXxV v0s6jwXIUEEZAtSPT2NJ6AmLlweGIoCgzEpownZCiVxgMWzAgqJ5xGE9OF+7wWBQ 63DAppLZghWbZ82yKPD1c9++99nkR2i4D7RXH8a3VzBaZkUw6r9kdN4NrTPxcdzD 0LgAoCTM6+oXeHf+hvq8csF3AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUB/MbR0cT s6FSxqX49I3tIJfcJB8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTcwRDNFL0JERUU5RTI0OUZENzExRUY5RTM4QTgzN0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3MEQzRS9CREVFOUUyNDlGRDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBj VHM2RlN4cVg0OUkzdElKZmNKQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAh2rMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9JNAMA0G CSqGSIb3DQEBCwUAA4IBAQA699ewdDVORp0V+FqkoIbIUDYO0wj3V1TE/ulJbEM7 O/tUNUwINOSdZuwMHoNYXqfhAn7YXoU/Ctl0XxlPgDmi5M7rbP79ZQ4+xF48BU40 1UUFC8ZqnMGYxgs9LgOLlfpOE/jxPmkXcKrLA3SJNkAWm5eiV2bF5WElZKdvpG2G B9Uy4hh7nAJ62RMTXv7dejQAMz+PCmHTiGutpCMnP6880vLo95L6I7fM8agPV7wo AM0iqB+Fv+s8Vfvf/tVdOJbUYZTn3yOm8T0YZ1AoqpY+BgVypOEcboVXYdqvIXaK 0ChHdLxb2IPAL8b5i2OUohrLXZ5KFzZvK2lmzppN5HTs -----END CERTIFICATE-----Generated at Sun Jan 25 02:50:02 2026 by rpki-client