This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer File: HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer (raw, json) Hash identifier: E8kvY3OIIAisgx3wfDFlpxW/P4yLQRh8jny4yeSl3L0= Subject key identifier: 1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0272B1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 04 Nov 2025 01:29:38 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 4609 AS: 7617 AS: 24335 IP: 27.109.128.0/17 IP: 45.64.20.0/22 IP: 60.246.0.0/16 IP: 103.233.188.0/22 IP: 113.52.64.0/18 IP: 122.100.128.0/17 IP: 125.31.0.0/18 IP: 180.94.128.0/18 IP: 182.93.0.0/18 IP: 202.86.128.0/18 IP: 202.174.0.0/22 IP: 202.175.0.0/17 IP: 202.175.160.0/19 IP: 2001:f90::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160433 (0x272b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 4 01:29:38 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91F3FAF, serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f9:4c:3e:f1:ba:d4:4e:5f:f4:ac:f3:47:f0: 96:e3:f2:b3:72:89:77:6e:4b:55:7e:70:d1:77:0e: 7c:9d:c6:ec:9e:7c:a5:d3:0f:ae:c1:5d:dd:54:da: 9d:67:51:66:69:63:10:ee:b2:94:55:12:29:97:ff: 4c:fd:1b:33:da:09:c8:59:68:67:6e:84:5a:9e:1f: 04:03:2f:1f:ab:c3:b2:8b:c7:3d:2c:5d:53:06:44: 6e:c8:a9:f4:6e:53:50:08:88:b2:5e:f9:98:b0:39: 4b:49:06:3d:b0:38:10:ba:1a:ba:86:bc:61:f6:43: d8:ff:c7:0d:99:83:fd:5d:87:d2:10:0a:f2:91:97: 70:3a:a6:80:7e:3c:cf:17:ef:15:17:79:46:80:ab: dd:3a:e1:7f:be:20:92:d4:f3:86:26:c9:4c:b7:77: a5:e7:21:38:ca:a1:e6:54:e1:0f:60:cb:50:c4:09: 53:32:05:df:98:72:e1:6a:f9:8a:7a:53:e1:3f:af: 9f:a8:e9:af:e3:04:0b:bd:6c:fa:fc:24:33:9c:e7: a0:f8:68:0a:7b:c1:ad:95:e4:22:69:2e:00:55:e3: 10:4b:f7:10:65:7c:7c:51:36:11:80:ac:5e:91:d3: cf:0d:32:ad:7b:62:70:df:dd:3d:dd:97:fe:93:3c: b8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 4609 7617 24335 sbgp-ipAddrBlock: critical IPv4: 27.109.128.0/17 45.64.20.0/22 60.246.0.0/16 103.233.188.0/22 113.52.64.0/18 122.100.128.0/17 125.31.0.0/18 180.94.128.0/18 182.93.0.0/18 202.86.128.0/18 202.174.0.0/22 202.175.0.0/17 202.175.160.0/19 IPv6: 2001:f90::/32 Signature Algorithm: sha256WithRSAEncryption b4:63:10:06:51:61:ef:74:cb:4d:11:f1:8f:94:68:af:b1:19: 2e:0d:25:3e:a8:b2:fa:c1:91:d4:c4:f8:df:91:0b:ea:a0:2d: 90:26:1e:82:c1:73:dc:77:45:b7:1e:51:4e:2f:4d:1c:f2:fb: 09:02:de:c0:7a:60:23:f7:eb:67:eb:cc:24:74:72:4f:f2:1d: 20:5d:33:b2:bb:11:42:15:96:75:93:b5:30:ae:af:3a:09:00: 62:93:98:d7:94:d9:7f:0e:b9:70:b8:00:d5:cf:4c:8b:fe:19: 68:94:fa:a4:4f:c3:0c:64:98:54:c7:fb:23:fa:a5:66:fb:6d: 61:9f:35:63:10:19:ab:84:21:db:e0:6c:8c:a9:75:60:8a:91: 69:27:21:14:0b:f3:c7:9f:81:ec:33:71:ec:f0:35:c1:43:09: af:5a:59:b8:8d:b0:b1:1d:75:90:96:a7:a8:3a:3b:10:43:42: b4:ac:f3:9d:b5:7e:d4:04:51:75:41:81:20:3b:7b:1a:97:e9: a0:56:30:c6:86:6d:88:c3:96:26:14:74:8c:fb:91:38:7f:85: e7:68:76:bc:47:94:25:14:7c:45:36:3b:e5:e9:7d:2f:88:a4: 8a:0e:19:a9:d5:95:17:8e:b9:24:e4:6d:6e:2b:ef:8d:19:e1: 92:b6:58:d4 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIDAnKxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNDAxMjkzOFoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjNGQUYxMTAvBgNVBAUTKDFFODVBODYwRDYyRTI2MDc5MjMzQ0I3 QTAxREIwQkFDQkIwMzY5QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG+Uw+8brUTl/0rPNH8Jbj8rNyiXduS1V+cNF3DnydxuyefKXTD67BXd1U2p1n UWZpYxDuspRVEimX/0z9GzPaCchZaGduhFqeHwQDLx+rw7KLxz0sXVMGRG7IqfRu U1AIiLJe+ZiwOUtJBj2wOBC6GrqGvGH2Q9j/xw2Zg/1dh9IQCvKRl3A6poB+PM8X 7xUXeUaAq9064X++IJLU84YmyUy3d6XnITjKoeZU4Q9gy1DECVMyBd+YcuFq+Yp6 U+E/r5+o6a/jBAu9bPr8JDOc56D4aAp7wa2V5CJpLgBV4xBL9xBlfHxRNhGArF6R 088NMq17YnDf3T3dl/6TPLhFAgMBAAGjggNsMIIDaDAdBgNVHQ4EFgQUHoWoYNYu JgeSM8t6AdsLrLsDaaYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYzRkFGL0E5MEQxQjk2NDE1QzExRUU5RDM1NUQyQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGM0ZBRi9BOTBEMUI5NjQxNUMxMUVFOUQzNTVEMkNDNEY5QUUwMi9Ib1dvWU5Z dUpnZVNNOHQ2QWRzTHJMc0RhYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQgBAf8EEjAQ oA4wDAICEgECAh3BAgJfDzB1BggrBgEFBQcBBwEB/wRmMGQwUwQCAAEwTQMEBxtt gAMEAi1AFAMDADz2AwQCZ+m8AwQGcTRAAwQHemSAAwQGfR8AAwQGtF6AAwQGtl0A AwQGylaAAwQCyq4AAwQHyq8AAwQFyq+gMA0EAgACMAcDBQAgAQ+QMA0GCSqGSIb3 DQEBCwUAA4IBAQC0YxAGUWHvdMtNEfGPlGivsRkuDSU+qLL6wZHUxPjfkQvqoC2Q Jh6CwXPcd0W3HlFOL00c8vsJAt7AemAj9+tn68wkdHJP8h0gXTOyuxFCFZZ1k7Uw rq86CQBik5jXlNl/DrlwuADVz0yL/hlolPqkT8MMZJhUx/sj+qVm+21hnzVjEBmr hCHb4GyMqXVgipFpJyEUC/PHn4HsM3Hs8DXBQwmvWlm4jbCxHXWQlqeoOjsQQ0K0 rPOdtX7UBFF1QYEgO3sal+mgVjDGhm2Iw5YmFHSM+5E4f4XnaHa8R5QlFHxFNjvl 6X0viKSKDhmp1ZUXjrkk5G1uK++NGeGStljU -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:21 2025 by rpki-client