This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer File: KaAJAT90Md42nADKtUcWypNFJtM.cer (raw, json) Hash identifier: LKqaJyUCNQS/re39jAPxG4koYOSMJPIqV/a/XJtowdo= Subject key identifier: 29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02764C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft caRepository: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 14:05:47 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 153341 IP: 2001:df4:4ec0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161356 (0x2764c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 19 14:05:47 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91651CF, serialNumber=29A009013F7431DE369C00CAB54716CA934526D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:61:14:9f:e6:bd:ea:ba:ec:bf:4e:6c:61:9f: 24:32:4e:1c:c9:ae:40:73:a8:c1:37:23:bd:1c:a7: 2e:d0:47:85:31:c3:e5:10:17:87:25:d5:92:9e:fb: cf:73:a7:1c:5b:e8:e4:39:04:4f:7d:16:45:9e:d9: 9f:b5:76:15:17:3c:0b:dd:31:b0:59:64:61:5a:86: 33:a0:cd:dd:4b:c8:66:51:3a:8e:9b:f8:15:7c:78: b8:a3:77:9d:3e:c3:61:9a:b5:61:74:70:be:bc:b8: b6:68:cf:59:32:70:9c:ff:e2:ee:ef:5e:c3:71:78: 9e:60:4a:49:38:9f:16:dd:5d:ad:e0:c6:b1:67:5e: 84:98:d7:44:cb:8c:1b:52:53:52:a8:40:a6:91:9c: 75:0f:a8:03:a7:de:e1:da:10:62:1c:21:fa:8b:a5: b5:a8:4d:ac:4e:cc:f0:ac:ad:5b:55:b0:70:37:cc: 91:bd:6f:eb:eb:c9:0e:ff:f7:17:fe:34:ed:bb:2a: 01:bd:46:2c:8e:07:31:00:3d:13:9b:20:22:c5:de: e5:a8:a9:70:c4:03:07:e8:a9:37:09:ff:f6:18:82: 7c:71:45:66:cb:7d:53:b9:0e:41:3d:cd:36:4b:84: 3e:99:be:48:c1:75:53:3c:87:63:73:2f:58:12:d0: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153341 sbgp-ipAddrBlock: critical IPv6: 2001:df4:4ec0::/48 Signature Algorithm: sha256WithRSAEncryption a2:92:bf:e4:d0:f4:98:df:95:59:2a:d7:a6:4c:38:86:f2:38: ee:02:04:c1:bc:68:5b:32:7c:19:d2:86:8b:6f:ec:9b:77:df: fe:8a:3c:f5:83:a0:b0:0a:47:23:6c:9e:6a:1c:57:e4:37:64: ea:e8:9b:95:1c:30:ad:ac:4e:e9:c9:a1:2f:cf:7f:87:3e:ce: 4a:ac:07:24:cb:4b:5d:ec:d3:54:97:f2:a5:71:f9:78:49:c1: a4:f1:1c:2e:f2:19:51:0b:e7:9f:14:eb:98:77:90:d2:99:a1: ce:68:b3:7e:ba:49:2b:58:f4:1d:69:56:b0:de:18:05:19:d8: ac:cd:e1:c0:70:42:28:59:f8:25:6f:bb:26:b7:73:b1:10:82: b0:da:44:5c:40:cb:7b:2e:07:7e:e1:12:2e:b2:4a:10:9f:e5: 4f:0d:31:c2:22:51:61:c6:82:bd:13:d2:b6:17:c3:4d:38:4f: 9f:80:b8:28:d5:50:c0:2e:67:e1:41:2e:44:ce:7f:d0:54:16: ed:7e:f5:8c:25:d8:b0:cb:31:1d:3e:cb:41:04:ba:af:b9:1a: 10:da:50:67:b2:c6:d7:58:ea:f6:1f:8d:40:75:2e:df:f9:f8: 8d:a4:5b:d3:f5:38:ef:a7:20:1d:10:be:89:52:b1:bd:b9:96: 03:dc:9d:f9 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAnZMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExOTE0MDU0N1oXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNjUxQ0YxMTAvBgNVBAUTKDI5QTAwOTAxM0Y3NDMxREUzNjlDMDBD QUI1NDcxNkNBOTM0NTI2RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrYRSf5r3quuy/TmxhnyQyThzJrkBzqME3I70cpy7QR4Uxw+UQF4cl1ZKe+89z pxxb6OQ5BE99FkWe2Z+1dhUXPAvdMbBZZGFahjOgzd1LyGZROo6b+BV8eLijd50+ w2GatWF0cL68uLZoz1kycJz/4u7vXsNxeJ5gSkk4nxbdXa3gxrFnXoSY10TLjBtS U1KoQKaRnHUPqAOn3uHaEGIcIfqLpbWoTaxOzPCsrVtVsHA3zJG9b+vryQ7/9xf+ NO27KgG9RiyOBzEAPRObICLF3uWoqXDEAwfoqTcJ//YYgnxxRWbLfVO5DkE9zTZL hD6ZvkjBdVM8h2NzL1gS0Gq1AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUKaAJAT90 Md42nADKtUcWypNFJtMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY1MUNGLzMwNDM2MzVDODZENzExRUY4NTRERDQ3QkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2NTFDRi8zMDQzNjM1Qzg2RDcxMUVGODU0REQ0N0JDNEY5QUUwMi9LYUFKQVQ5 ME1kNDJuQURLdFVjV3lwTkZKdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlb9MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9E7AMA0G CSqGSIb3DQEBCwUAA4IBAQCikr/k0PSY35VZKtemTDiG8jjuAgTBvGhbMnwZ0oaL b+ybd9/+ijz1g6CwCkcjbJ5qHFfkN2Tq6JuVHDCtrE7pyaEvz3+HPs5KrAcky0td 7NNUl/Klcfl4ScGk8Rwu8hlRC+efFOuYd5DSmaHOaLN+ukkrWPQdaVaw3hgFGdis zeHAcEIoWfglb7smt3OxEIKw2kRcQMt7Lgd+4RIuskoQn+VPDTHCIlFhxoK9E9K2 F8NNOE+fgLgo1VDALmfhQS5Ezn/QVBbtfvWMJdiwyzEdPstBBLqvuRoQ2lBnssbX WOr2H41AdS7f+fiNpFvT9TjvpyAdEL6JUrG9uZYD3J35 -----END CERTIFICATE-----Generated at Sat Dec 6 12:37:08 2025 by rpki-client