This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer File: EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer (raw, json) Hash identifier: mfnhbJ436eyXOwhgRdaTKfEbJC2qbfoxcNK+0saQ4WE= Subject key identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02794F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft caRepository: rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 30 Nov 2025 12:26:22 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 132408 IP: 180.94.2.0/23 IP: 2001:df3:2bc0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162127 (0x2794f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 30 12:26:22 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A911A1FC, serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:8b:a3:09:e3:2f:61:2d:10:ae:8f:cf:8c: 9a:0a:aa:a4:67:c2:a6:cc:c3:da:07:56:3e:1c:de: 44:c1:dc:c5:15:e2:2b:fe:67:99:84:a1:98:8b:9c: ad:73:90:ab:91:e5:c2:56:8e:0a:c6:18:05:c2:3c: ba:32:52:1f:fc:a2:4c:f1:12:9d:53:83:16:02:d8: 8b:fb:84:5d:ea:f0:38:15:20:24:2e:82:b7:28:3c: 65:72:c2:70:fb:43:3e:7a:04:05:94:cf:e8:10:3e: 2b:f7:34:05:71:fe:40:bd:05:61:08:98:57:2e:3c: 1b:36:9b:6b:f1:80:e4:73:10:d5:c9:bf:26:c4:82: 9d:fb:36:a2:9d:e3:b4:72:5a:ce:af:1a:47:ff:46: 4f:59:ac:70:a1:60:b0:15:b3:47:88:89:30:fb:09: 5d:16:25:e0:9d:cb:77:ac:e7:bf:e9:2b:40:11:6c: 44:29:36:31:9a:f7:37:4e:ee:ce:31:42:4c:59:fa: 53:b7:0f:9b:28:5b:eb:d8:3c:2c:3e:3f:50:c2:34: 37:ad:a6:b4:6c:e7:e3:a3:59:6d:2e:4c:70:69:28: bf:bb:14:95:3d:10:f9:56:56:b7:c6:3f:47:75:09: fe:d9:d1:92:b3:b8:ba:01:66:4a:d0:00:ab:c2:7f: db:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 132408 sbgp-ipAddrBlock: critical IPv4: 180.94.2.0/23 IPv6: 2001:df3:2bc0::/48 Signature Algorithm: sha256WithRSAEncryption 3b:6c:bf:a4:e4:d6:87:02:61:bb:ca:a7:1e:8c:26:78:cb:ca: bb:fb:ad:2e:ee:05:ed:41:78:32:01:69:37:a1:b4:4c:85:f7: 4a:46:4d:b2:1e:e0:3b:6e:08:37:0f:8b:bc:69:d4:15:9a:86: 02:fb:e0:35:42:01:92:b3:98:51:34:ce:42:e7:f0:13:ef:50: 89:fa:0f:bf:a3:25:f8:1f:b8:bf:07:46:99:4a:d8:4e:46:ba: 53:71:b2:0e:cf:22:25:bd:31:bb:74:a2:89:41:de:fa:f7:f4: 34:00:51:52:5f:78:11:a3:46:3d:8a:7a:42:51:a2:ad:6e:82: f6:0a:e6:57:47:49:16:e8:9c:3e:18:1d:f3:62:7b:3c:66:fd: 71:a5:85:af:bb:9d:78:d2:8a:2d:a6:a5:5d:86:89:7a:3f:ec: db:a3:00:c3:db:14:f0:40:e0:16:c0:b7:fc:17:09:5a:2b:00: dc:dc:99:22:ba:94:e2:99:66:24:cf:ad:5d:0a:4c:e2:03:9f: 4e:d4:b4:37:a7:65:51:ba:c2:7c:98:90:66:70:04:6c:07:11: 43:f8:3e:37:31:67:cc:b9:4d:61:03:a2:64:18:41:f7:c2:72: 61:39:7c:2c:9e:b6:56:11:fb:5c:b9:b6:19:09:99:4f:a6:1a: a3:bb:6d:cd -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnlPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEzMDEyMjYyMloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMUExRkMxMTAvBgNVBAUTKDExOEY5Mjk4NTkwQzc5ODc5QUExRDhG QzZEMTdGNjY1NDU0QkNCQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIt4ujCeMvYS0Qro/PjJoKqqRnwqbMw9oHVj4c3kTB3MUV4iv+Z5mEoZiLnK1z kKuR5cJWjgrGGAXCPLoyUh/8okzxEp1TgxYC2Iv7hF3q8DgVICQugrcoPGVywnD7 Qz56BAWUz+gQPiv3NAVx/kC9BWEImFcuPBs2m2vxgORzENXJvybEgp37NqKd47Ry Ws6vGkf/Rk9ZrHChYLAVs0eIiTD7CV0WJeCdy3es57/pK0ARbEQpNjGa9zdO7s4x QkxZ+lO3D5soW+vYPCw+P1DCNDetprRs5+OjWW0uTHBpKL+7FJU9EPlWVrfGP0d1 Cf7Z0ZKzuLoBZkrQAKvCf9vVAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUEY+SmFkM eYeaodj8bRf2ZUVLy7kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFBMUZDLzgxOTFGQjZDODg3QTExRUU5REI0NUIxNEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExQTFGQy84MTkxRkI2Qzg4N0ExMUVFOURCNDVCMTRDNEY5QUUwMi9FWS1TbUZr TWVZZWFvZGo4YlJmMlpVVkx5N2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgU4MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBtF4CMA8EAgAC MAkDBwAgAQ3zK8AwDQYJKoZIhvcNAQELBQADggEBADtsv6Tk1ocCYbvKpx6MJnjL yrv7rS7uBe1BeDIBaTehtEyF90pGTbIe4DtuCDcPi7xp1BWahgL74DVCAZKzmFE0 zkLn8BPvUIn6D7+jJfgfuL8HRplK2E5GulNxsg7PIiW9Mbt0oolB3vr39DQAUVJf eBGjRj2KekJRoq1ugvYK5ldHSRbonD4YHfNiezxm/XGlha+7nXjSii2mpV2GiXo/ 7NujAMPbFPBA4BbAt/wXCVorANzcmSK6lOKZZiTPrV0KTOIDn07UtDenZVG6wnyY kGZwBGwHEUP4PjcxZ8y5TWEDomQYQffCcmE5fCyetlYR+1y5thkJmU+mGqO7bc0= -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:13 2025 by rpki-client