This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer (raw, json) Hash identifier: VDijIjk5jUlzxC4ICFAp6BKneEhwZzwhwWihfj9WisU= Subject key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02738E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft caRepository: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 06 Nov 2025 14:29:03 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 203.28.167.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160654 (0x2738e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 6 14:29:03 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:ef:10:f0:0b:db:16:94:21:61:9b:2b:9c: e3:7d:8a:f5:a2:fd:bc:6c:74:9c:9d:b3:92:3c:ec: ad:a3:85:54:0c:92:4d:b3:c6:5d:b3:c7:52:9b:6b: 04:ef:46:bf:08:4e:dc:00:3b:f5:9d:96:02:29:92: 08:44:03:9d:df:51:ee:00:8a:20:67:e6:11:e9:d0: 82:7c:a8:3a:4a:79:5a:eb:74:8b:78:d7:91:62:7c: 92:a6:12:4b:99:aa:dc:13:1e:41:a3:8c:82:e8:19: fa:08:29:d9:97:05:cd:8c:52:1f:4a:86:2a:0b:84: 61:7a:30:d3:6a:fa:e9:b6:3c:27:eb:34:f7:1b:1e: 21:49:f0:f1:21:ab:d0:33:9a:22:50:69:ff:2e:56: 47:6d:6c:4b:29:c7:1d:89:8e:4d:dc:f1:7b:24:36: 14:ce:7b:3d:12:fd:fd:03:ef:70:6e:81:b5:7f:43: 90:4f:7d:38:d1:9b:1d:78:53:44:e8:73:31:3f:e2: d1:2d:79:8c:90:38:ea:82:a3:26:81:b8:46:64:1a: 23:2b:08:e9:ba:5b:dd:0a:3d:89:a8:89:4e:43:a8: a1:39:13:ba:b9:12:b3:a8:e7:5f:be:df:a0:38:49: 81:aa:70:7c:b8:80:59:97:1e:94:9a:01:ab:59:7a: 48:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.28.167.0/24 Signature Algorithm: sha256WithRSAEncryption 05:a5:23:e8:2e:b7:bc:69:17:e6:17:b5:92:3e:c0:9f:e2:81: b1:3b:9e:95:04:7b:e8:2b:e8:f1:21:f9:42:5c:83:24:cd:e6: 86:98:b3:d4:e2:05:e1:41:db:06:75:57:88:6d:66:9a:07:2f: 28:43:d4:2c:8b:b4:d9:e3:c3:a2:6e:35:be:e8:dc:f8:bb:7d: 8a:2e:c1:ff:ab:d0:54:3d:9c:de:49:76:5d:ad:b3:8b:96:d1: 4a:3d:13:52:19:05:9f:9f:8f:b5:56:f4:91:3e:da:a8:77:5c: c3:ef:6a:5f:a2:09:ee:97:34:10:54:c4:8b:54:38:46:87:0e: 88:98:fe:f7:2a:28:c1:c8:6e:be:87:19:52:b2:f0:1f:76:5f: 73:f2:d7:8a:eb:da:22:f2:26:89:49:7f:30:58:dd:72:42:c4: d7:90:fb:66:fd:83:30:65:1a:50:58:f9:1d:ac:3b:3a:d0:8f: b7:f8:57:50:3d:16:a4:f0:a1:91:41:80:8e:a4:3c:14:5e:c6: bc:d2:5d:d2:77:e6:4a:23:e8:d9:2a:01:04:63:99:e7:e6:d4: 7d:f8:b3:6c:43:5d:13:f5:57:9f:8e:9c:32:ff:c8:6b:3f:42: 23:cb:f5:da:a8:55:ad:9b:53:b5:15:7c:78:ad:0d:0d:9b:e6: 82:e1:8c:b1 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAnOOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNjE0MjkwM1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNkREQjQxMTAvBgNVBAUTKDJBNDc3NTM3RjMyM0VGQjU5REJEOERC RUIzQUZBQjFGMTU4MkY1NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBGO8Q8AvbFpQhYZsrnON9ivWi/bxsdJyds5I87K2jhVQMkk2zxl2zx1KbawTv Rr8ITtwAO/WdlgIpkghEA53fUe4AiiBn5hHp0IJ8qDpKeVrrdIt415FifJKmEkuZ qtwTHkGjjILoGfoIKdmXBc2MUh9KhioLhGF6MNNq+um2PCfrNPcbHiFJ8PEhq9Az miJQaf8uVkdtbEspxx2Jjk3c8XskNhTOez0S/f0D73BugbV/Q5BPfTjRmx14U0To czE/4tEteYyQOOqCoyaBuEZkGiMrCOm6W90KPYmoiU5DqKE5E7q5ErOo51++36A4 SYGqcHy4gFmXHpSaAatZekh/AgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUKkd1N/Mj 77WdvY2+s6+rHxWC9UYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZEREI0L0E2MDA4MzE2QjkzMjExRUJCOTVEMDYzQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2RERCNC9BNjAwODMxNkI5MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9N ajc3V2R2WTItczYtckh4V0M5VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBADLHKcwDQYJKoZIhvcNAQELBQADggEBAAWlI+gut7xpF+YXtZI+ wJ/igbE7npUEe+gr6PEh+UJcgyTN5oaYs9TiBeFB2wZ1V4htZpoHLyhD1CyLtNnj w6JuNb7o3Pi7fYouwf+r0FQ9nN5Jdl2ts4uW0Uo9E1IZBZ+fj7VW9JE+2qh3XMPv al+iCe6XNBBUxItUOEaHDoiY/vcqKMHIbr6HGVKy8B92X3Py14rr2iLyJolJfzBY 3XJCxNeQ+2b9gzBlGlBY+R2sOzrQj7f4V1A9FqTwoZFBgI6kPBRexrzSXdJ35koj 6NkqAQRjmefm1H34s2xDXRP1V5+OnDL/yGs/QiPL9dqoVa2bU7UVfHitDQ2b5oLh jLE= -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:29 2025 by rpki-client