This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer File: IQlGzanedd75YJiV-_Ie2Exy9Oc.cer (raw, json) Hash identifier: v/oNPGRxebiBm3qwm64ONzpGMW2myO+iKqRjUPiZDlo= Subject key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028167 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 04:48:01 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 153456 IP: 2001:df4:a040::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164199 (0x28167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 29 04:48:01 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:4d:d0:35:7c:85:f0:df:66:5a:da:79:ef: 10:ff:b3:36:d6:e2:3c:69:8b:b4:11:72:c7:5f:a6: ad:1d:ad:5c:24:fb:15:50:17:e6:35:fe:51:e5:4e: 82:38:f4:3a:1d:b4:cc:89:c2:31:bf:c4:e1:22:5f: fc:da:60:84:ec:75:28:c0:b7:b0:2d:5d:f6:2d:b2: 90:d2:00:41:17:6a:dd:92:d1:fe:3a:04:d9:26:dc: c9:66:61:39:c4:9f:83:83:be:b7:01:29:00:57:82: 96:60:8f:af:65:6b:4c:76:1e:f8:e2:b5:e1:87:18: ee:a8:6d:c5:0e:7e:32:6c:59:f0:d8:65:58:28:71: 1c:2c:57:ce:b8:d4:17:77:44:75:63:e5:df:08:a3: c4:2f:88:1f:ae:f6:c6:1a:4e:ed:d7:3f:ba:80:a7: 1c:4a:b4:39:f1:f5:e3:d4:9c:a3:dc:9e:97:59:72: af:bf:22:44:31:d7:fb:0e:30:7c:29:78:85:86:3a: 2d:5f:2d:e9:d6:1d:91:0e:b4:51:94:47:1b:d1:4f: f2:0d:f3:bd:ab:60:c0:32:df:28:d9:9c:e4:6d:ec: 91:25:ca:91:ad:ee:57:d1:98:53:d3:af:11:df:03: be:cc:02:15:0f:96:8b:ce:ea:ed:93:fa:0a:2f:57: 6c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153456 sbgp-ipAddrBlock: critical IPv6: 2001:df4:a040::/48 Signature Algorithm: sha256WithRSAEncryption 23:80:93:28:8f:87:a2:a6:11:77:bd:ae:a2:43:44:b5:f6:ef: fb:1c:ec:4a:0f:aa:04:24:6c:ad:da:53:4c:24:23:04:ed:5c: 65:d6:01:aa:c8:85:cb:0f:73:ab:b3:9b:c5:1f:49:09:28:c9: b7:f3:00:a7:6f:f4:0d:2b:3b:50:f2:58:69:f2:d8:1a:ef:93: d0:3b:08:df:0b:d1:28:7b:05:88:38:e0:1f:5b:d3:fa:02:b8: e7:fc:05:aa:67:94:fa:4f:86:8d:0b:e4:93:38:5f:e0:46:86: c2:db:f3:22:d1:bd:0f:0d:6f:e8:db:0d:3d:2b:f7:8b:6a:83: b9:29:b8:88:b8:04:76:90:41:b3:2a:36:71:12:42:db:1d:19: 36:cd:ba:63:1f:11:9f:d0:74:ba:91:1b:d6:93:8e:bd:21:15: 6a:b3:23:0e:02:68:f6:c9:9c:c1:5d:c3:63:05:f9:1e:e3:1d: 2b:45:11:8a:78:67:bb:96:c2:8d:f1:e7:dd:92:04:8e:73:54: 3e:ef:57:cc:38:fd:7d:af:57:1f:83:56:d5:d2:5f:4e:9d:2d: 08:a5:48:e7:8c:82:b1:83:86:01:1a:13:73:67:5f:c3:80:7b: bf:f5:09:bd:22:62:8c:4d:e5:8e:b4:22:d6:f6:06:c9:b5:26: ab:aa:3e:61 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAoFnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyOTA0NDgwMVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRjc1MzcxMTAvBgNVBAUTKDIxMDk0NkNEQTlERTc1REVGOTYwOTg5 NUZCRjIxRUQ4NEM3MkY0RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdv03QNXyF8N9mWtp57xD/szbW4jxpi7QRcsdfpq0drVwk+xVQF+Y1/lHlToI4 9DodtMyJwjG/xOEiX/zaYITsdSjAt7AtXfYtspDSAEEXat2S0f46BNkm3MlmYTnE n4ODvrcBKQBXgpZgj69la0x2HvjiteGHGO6obcUOfjJsWfDYZVgocRwsV8641Bd3 RHVj5d8Io8QviB+u9sYaTu3XP7qApxxKtDnx9ePUnKPcnpdZcq+/IkQx1/sOMHwp eIWGOi1fLenWHZEOtFGURxvRT/IN872rYMAy3yjZnORt7JElypGt7lfRmFPTrxHf A77MAhUPlovO6u2T+govV2zxAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUIQlGzane dd75YJiV+/Ie2Exy9OcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY3NTM3Lzg3REQ1NDhDQTI3MTExRUZBMzkyRjA3OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGNzUzNy84N0RENTQ4Q0EyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFu ZWRkNzVZSmlWLV9JZTJFeHk5T2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAldwMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9KBAMA0G CSqGSIb3DQEBCwUAA4IBAQAjgJMoj4eiphF3va6iQ0S19u/7HOxKD6oEJGyt2lNM JCME7Vxl1gGqyIXLD3Ors5vFH0kJKMm38wCnb/QNKztQ8lhp8tga75PQOwjfC9Eo ewWIOOAfW9P6Arjn/AWqZ5T6T4aNC+STOF/gRobC2/Mi0b0PDW/o2w09K/eLaoO5 KbiIuAR2kEGzKjZxEkLbHRk2zbpjHxGf0HS6kRvWk469IRVqsyMOAmj2yZzBXcNj Bfke4x0rRRGKeGe7lsKN8efdkgSOc1Q+71fMOP19r1cfg1bV0l9OnS0IpUjnjIKx g4YBGhNzZ1/DgHu/9Qm9ImKMTeWOtCLW9gbJtSarqj5h -----END CERTIFICATE-----Generated at Sun Jan 25 04:28:58 2026 by rpki-client