This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer File: EiOAOGQwr9Y_NklEdk4bNBhj0No.cer (raw, json) Hash identifier: wu55zUJkZhuBC9VPOYyBUkuT/nAEbs/xvwSAK+ZtzZY= Subject key identifier: 12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027766 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft caRepository: rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 24 Nov 2025 13:55:44 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 203.25.67.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161638 (0x27766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 24 13:55:44 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9156AFF, serialNumber=122380386430AFD63F364944764E1B341863D0DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7b:0d:bf:46:1b:7f:bb:d0:c3:15:f8:72:ad: 36:7e:b0:a6:ab:f6:ab:74:89:7e:4f:0e:5f:78:09: 48:88:c2:41:19:64:a5:cd:29:78:b1:37:63:93:3b: 28:3c:ef:b8:f9:6b:a8:a2:57:ec:a7:5d:e1:30:bc: 55:fb:31:3b:86:b1:8e:69:4a:dc:4f:90:77:6c:34: e2:12:15:4f:4c:ef:97:ff:03:bb:08:40:2b:b0:b1: 51:86:a2:39:4d:8c:52:f2:12:f0:d5:18:71:ee:b6: df:5a:71:97:44:7f:ff:f3:6f:00:2b:2c:d5:ab:0a: be:6e:37:cc:4c:13:9d:bf:3f:fe:71:a3:d4:27:b5: b0:e9:8e:12:9b:cd:60:bf:e5:07:24:95:3f:c5:9e: 39:7c:87:02:4b:59:83:7c:d2:07:90:83:3c:f8:70: 00:19:cb:ca:de:4c:58:df:71:b6:eb:d4:ed:8a:d0: 6b:1a:25:d5:ff:93:e2:61:5d:e6:a1:e5:1f:08:3a: df:75:4f:d7:39:a7:8e:44:60:cf:36:9d:c2:8e:dd: 75:ee:c6:c0:91:fe:e2:2f:ae:89:9a:54:8c:70:2e: 82:43:a8:db:1d:67:f3:6b:d2:77:11:c5:67:5e:d8: 44:d7:9c:1b:cb:a5:ba:a2:b6:a5:26:95:91:c8:c7: c1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.25.67.0/24 Signature Algorithm: sha256WithRSAEncryption 18:7e:f9:e7:16:84:9c:64:de:08:f8:72:bd:6b:8e:94:57:dd: 72:a1:62:72:a6:48:e2:be:b3:0a:91:10:f4:b4:96:c6:b8:ec: b9:aa:42:9d:13:cd:26:ff:31:b1:da:29:01:b6:dd:b0:5c:87: 51:99:23:ad:68:0f:57:1c:06:c5:82:2d:a3:54:fb:65:b1:b6: ad:b9:2f:f4:bc:4b:1a:9b:48:aa:54:8e:5f:10:25:12:00:8f: ab:4b:e9:69:da:8c:72:62:54:65:44:b9:3f:53:e7:a4:f9:52: 66:03:ca:a1:ba:e2:d1:e6:88:72:0f:29:78:53:d0:31:75:8f: d7:d2:2c:92:ab:60:29:af:c1:19:54:55:33:9e:c6:17:ce:0f: b4:7b:3f:0e:da:15:c4:8d:3c:b8:02:e6:d4:3a:83:15:b4:2b: 6c:61:e1:32:fa:b5:81:69:3b:fe:c5:3f:39:1a:bd:d1:4d:61: 51:2d:6b:de:e4:8b:e6:f1:8d:c6:22:99:32:5d:3b:2c:78:d3: b9:08:c4:26:d9:93:78:b4:f6:9b:cd:63:78:73:d1:3a:86:46: a9:aa:64:54:84:36:87:24:00:5a:dd:ac:5f:b3:c7:83:42:6a: a4:2b:e9:65:e7:48:cb:be:be:60:8d:96:42:73:2f:9a:ac:a0: d7:16:09:e6 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAndmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNDEzNTU0NFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTZBRkYxMTAvBgNVBAUTKDEyMjM4MDM4NjQzMEFGRDYzRjM2NDk0 NDc2NEUxQjM0MTg2M0QwREEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpew2/Rht/u9DDFfhyrTZ+sKar9qt0iX5PDl94CUiIwkEZZKXNKXixN2OTOyg8 77j5a6iiV+ynXeEwvFX7MTuGsY5pStxPkHdsNOISFU9M75f/A7sIQCuwsVGGojlN jFLyEvDVGHHutt9acZdEf//zbwArLNWrCr5uN8xME52/P/5xo9QntbDpjhKbzWC/ 5QcklT/Fnjl8hwJLWYN80geQgzz4cAAZy8reTFjfcbbr1O2K0GsaJdX/k+JhXeah 5R8IOt91T9c5p45EYM82ncKO3XXuxsCR/uIvromaVIxwLoJDqNsdZ/Nr0ncRxWde 2ETXnBvLpbqitqUmlZHIx8GxAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUEiOAOGQw r9Y/NklEdk4bNBhj0NowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU2QUZGLzNCN0IzMUI2MTREODExRjBBMzdFQzA0RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1NkFGRi8zQjdCMzFCNjE0RDgxMUYwQTM3RUMwNEVDNEY5QUUwMi9FaU9BT0dR d3I5WV9Oa2xFZGs0Yk5CaGowTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBADLGUMwDQYJKoZIhvcNAQELBQADggEBABh++ecWhJxk3gj4cr1r jpRX3XKhYnKmSOK+swqREPS0lsa47LmqQp0TzSb/MbHaKQG23bBch1GZI61oD1cc BsWCLaNU+2Wxtq25L/S8SxqbSKpUjl8QJRIAj6tL6WnajHJiVGVEuT9T56T5UmYD yqG64tHmiHIPKXhT0DF1j9fSLJKrYCmvwRlUVTOexhfOD7R7Pw7aFcSNPLgC5tQ6 gxW0K2xh4TL6tYFpO/7FPzkavdFNYVEta97ki+bxjcYimTJdOyx407kIxCbZk3i0 9pvNY3hz0TqGRqmqZFSENockAFrdrF+zx4NCaqQr6WXnSMu+vmCNlkJzL5qsoNcW CeY= -----END CERTIFICATE-----Generated at Sat Dec 6 21:06:22 2025 by rpki-client