This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer File: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer (raw, json) Hash identifier: /LGbEoYq2EVum9hvijCRTDWas6xLDRHUnLUMT/HGj6A= Subject key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02776E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft caRepository: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 24 Nov 2025 14:42:10 +0000 Certificate not after: Sat 31 Oct 2026 00:00:00 +0000 Subordinate resources: AS: 38264 AS: 55356 IP: 58.27.128.0/17 IP: 103.112.152.0/22 IP: 110.36.0.0 -- 110.36.57.255 IP: 110.36.60.0 -- 110.39.255.255 IP: 2402:fd00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161646 (0x2776e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 24 14:42:10 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:dd:ec:67:93:40:46:d6:8d:80:ba:a7:1e:82: 66:10:0c:ea:3a:25:9c:26:83:23:65:91:d0:f8:75: 46:8e:da:be:60:b7:32:60:3e:db:db:c9:42:d2:97: ec:84:40:cb:c2:7c:db:b4:8c:22:53:4d:63:56:f9: ff:fe:07:55:9d:90:64:17:f8:fe:d3:ee:08:44:1e: 0b:a3:73:cd:7f:58:09:d0:3d:4d:32:54:9b:33:ba: 29:fe:21:df:84:64:d6:76:e8:89:75:f7:ec:85:5f: 65:b7:a5:42:1c:f1:57:c7:53:a0:7c:97:a2:be:03: 8b:6c:d0:1c:cc:07:14:d7:45:f7:35:7f:2d:bb:1a: e1:9a:5b:33:be:07:1a:54:19:33:fa:ea:30:1a:10: 5c:cd:0b:f3:9e:48:81:98:1a:55:40:46:8e:c4:1f: 07:e1:6d:bf:49:4a:d0:de:fe:79:c7:cc:fa:ef:56: af:b2:c8:1a:79:41:84:52:cb:bc:42:7b:74:dc:4c: 20:c0:e4:1d:00:0e:55:38:38:45:c5:e1:23:90:36: f1:8e:42:da:12:a8:0f:4e:70:69:ef:2d:98:0d:8d: ed:fc:cc:5e:80:6e:d1:95:42:3e:cf:79:2f:ae:50: fe:1c:b6:92:bd:97:a0:c8:6a:96:d9:f4:c3:a5:b8: 75:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38264 55356 sbgp-ipAddrBlock: critical IPv4: 58.27.128.0/17 103.112.152.0/22 110.36.0.0-110.36.57.255 110.36.60.0-110.39.255.255 IPv6: 2402:fd00::/32 Signature Algorithm: sha256WithRSAEncryption 2b:e0:bf:a7:f8:a0:b2:d1:16:14:a6:40:4b:32:3f:13:16:52: 87:57:c1:a2:06:98:3c:ad:f5:c2:eb:ac:68:c8:2f:9e:cd:26: fa:13:7d:35:60:2a:47:91:df:6c:ca:71:e3:1b:dd:77:67:55: 82:53:96:15:cb:45:3a:64:cd:ad:23:7e:6a:9e:cf:4d:6b:ac: 98:60:85:10:b4:f0:14:19:8e:f3:38:11:9c:50:5d:51:6d:f5: 2d:61:f6:3d:50:62:3d:c5:b2:7d:0e:2b:9e:63:88:62:1c:95: 59:c6:bc:3d:c0:10:ef:81:2e:69:4d:0c:98:63:a2:b8:3d:1a: 90:87:31:da:69:fd:49:a0:20:f2:0e:86:6d:9e:c9:5e:68:2e: a5:38:51:35:74:91:5e:f5:bf:6a:ec:8c:7c:36:80:77:48:4f: 97:ea:d9:53:e9:2a:00:cd:cb:ee:c4:76:77:e8:f4:3d:8f:04: e1:47:ae:ea:52:34:56:80:8c:04:a1:57:52:74:f3:0b:61:60: 43:13:73:a8:cc:ae:34:e7:cd:f0:97:47:8a:de:c4:5b:57:21: a2:ac:9b:5f:2c:fc:e1:aa:22:5a:44:04:8b:9b:b9:89:84:29: 52:14:b7:71:80:76:26:37:e2:77:7a:d1:67:24:f3:a3:79:69: d0:1b:5b:d9 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIDAnduMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNDE0NDIxMFoXDTI2MTAzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxN0ZGQjAxMTAvBgNVBAUTKDEzMjQwNDMwMjFCQjQ1RDdGRjY2RjIw QUZDNjgzOTM0MzEzMEMzRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi3exnk0BG1o2AuqcegmYQDOo6JZwmgyNlkdD4dUaO2r5gtzJgPtvbyULSl+yE QMvCfNu0jCJTTWNW+f/+B1WdkGQX+P7T7ghEHgujc81/WAnQPU0yVJszuin+Id+E ZNZ26Il19+yFX2W3pUIc8VfHU6B8l6K+A4ts0BzMBxTXRfc1fy27GuGaWzO+BxpU GTP66jAaEFzNC/OeSIGYGlVARo7EHwfhbb9JStDe/nnHzPrvVq+yyBp5QYRSy7xC e3TcTCDA5B0ADlU4OEXF4SOQNvGOQtoSqA9OcGnvLZgNje38zF6AbtGVQj7PeS+u UP4ctpK9l6DIapbZ9MOluHX1AgMBAAGjggNDMIIDPzAdBgNVHQ4EFgQUEyQEMCG7 Rdf/ZvIK/Gg5NDEww/IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTdGRkIwL0U1NTdDMDAwMUQ5MjExRTI5MzNBMjFGNjA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3RkZCMC9FNTU3QzAwMDFEOTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNH N1JkZl9adklLX0dnNU5ERXd3X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAJV4AgMA2DwwTgYIKwYBBQUHAQcBAf8EPzA9MCwEAgABMCYDBAc6G4AD BAJncJgwCwMDAm4kAwQBbiQ4MAsDBAJuJDwDAwNuIDANBAIAAjAHAwUAJAL9ADAN BgkqhkiG9w0BAQsFAAOCAQEAK+C/p/igstEWFKZASzI/ExZSh1fBogaYPK31wuus aMgvns0m+hN9NWAqR5HfbMpx4xvdd2dVglOWFctFOmTNrSN+ap7PTWusmGCFELTw FBmO8zgRnFBdUW31LWH2PVBiPcWyfQ4rnmOIYhyVWca8PcAQ74EuaU0MmGOiuD0a kIcx2mn9SaAg8g6GbZ7JXmgupThRNXSRXvW/auyMfDaAd0hPl+rZU+kqAM3L7sR2 d+j0PY8E4Ueu6lI0VoCMBKFXUnTzC2FgQxNzqMyuNOfN8JdHit7EW1choqybXyz8 4aoiWkQEi5u5iYQpUhS3cYB2Jjfid3rRZyTzo3lp0Btb2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:36:54 2025 by rpki-client