This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer (raw, json) Hash identifier: jzdka3atgi0/xL8ofomd3TW6nGUgo7i8kmHaJUx8SMc= Subject key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C36 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft caRepository: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 12:42:04 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 9328 AS: 10203 AS: 17545 AS: 17562 AS: 38078 AS: 58735 AS: 133321 AS: 134948 AS: 136460 AS: 137395 IP: 150.173.0.0/16 IP: 202.137.200.0/21 IP: 202.160.96.0/20 IP: 203.89.192.0/18 IP: 203.214.160.0 -- 203.214.255.255 IP: 218.100.1.0/24 IP: 2404:c400::/32 IP: 2406:900::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162870 (0x27c36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 5 12:42:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a2:9c:29:71:f3:f8:57:97:75:f9:af:66:66: 5f:d4:b2:19:e5:88:d8:43:fb:19:3c:3f:25:eb:4d: b5:41:a9:05:6d:a0:a2:9d:60:aa:aa:02:e1:e1:2c: 43:88:26:d3:a0:82:94:9b:2a:26:16:4c:c0:e7:66: 0a:20:21:cd:30:40:27:13:9e:41:19:91:ed:68:ab: b9:de:57:2f:f6:f1:a7:79:ef:71:09:bf:d0:bf:97: a8:0e:7a:ec:58:0c:6d:cf:06:c3:63:8b:13:0d:63: c4:e1:e9:3d:48:9c:3a:ff:75:51:36:da:e8:0c:a5: 21:53:25:14:7d:33:88:37:da:3e:12:1a:6e:02:2b: 40:40:32:dd:c6:50:ea:f3:c9:0b:98:7a:57:a8:e0: c9:20:e6:da:e1:67:3b:39:87:5e:53:3e:2c:06:f9: c7:eb:32:b3:89:20:18:dc:84:22:47:8e:9a:15:26: 82:2a:3c:9b:f0:22:6d:55:4c:75:b4:4d:c6:08:96: 3c:39:d0:3d:55:c8:f2:7b:be:4b:9c:de:be:e1:e0: 19:17:22:54:46:88:8f:0e:d4:15:20:f4:00:68:6f: d8:e2:d9:9a:c0:23:ef:c5:47:67:e6:a0:2a:d0:99: 89:16:b3:1e:e3:3a:33:00:87:9a:c0:b6:4b:3e:70: 47:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9328 10203 17545 17562 38078 58735 133321 134948 136460 137395 sbgp-ipAddrBlock: critical IPv4: 150.173.0.0/16 202.137.200.0/21 202.160.96.0/20 203.89.192.0/18 203.214.160.0-203.214.255.255 218.100.1.0/24 IPv6: 2404:c400::/32 2406:900::/32 Signature Algorithm: sha256WithRSAEncryption 7b:b7:e3:05:e2:e9:10:62:bd:b8:43:c8:63:c0:ff:65:e1:62: 13:bb:fc:8e:72:63:c4:45:ac:7e:a1:78:e5:31:c7:2a:cf:9a: 5f:0a:bf:5f:80:2d:cf:17:ac:dc:c1:e2:46:18:37:70:28:ee: af:56:1c:fd:75:63:af:ae:ef:f4:a4:2c:89:6a:38:a3:9a:57: c2:d0:65:5f:c3:e5:10:f5:c1:a8:b0:f9:51:a1:21:76:c5:7b: fc:5a:d5:54:4e:f1:53:77:48:eb:05:3b:1e:de:36:6e:59:02: df:b3:72:a1:66:b7:68:62:a0:18:dd:87:fe:85:91:9f:ea:f1: 44:6c:c1:b8:1e:45:19:92:f1:82:57:74:76:c4:d0:2c:ad:6e: 91:5e:d8:b3:33:d0:2c:1c:03:a5:c5:44:ed:e5:8b:39:54:f5: f1:39:91:c8:89:e6:89:7d:21:2a:32:ee:63:e6:66:fe:04:28: 47:1b:81:28:9a:66:4e:af:2b:38:2b:a3:92:7d:9f:a3:63:be: 37:a0:0c:ce:cf:11:b5:f6:14:ab:d5:16:42:76:04:a9:94:26: 11:e3:27:86:dc:59:52:5f:df:5a:07:db:55:ac:7d:66:e6:36: 24:09:ab:75:fa:a1:c9:e1:b8:44:39:ac:ba:34:39:06:bf:59: b6:18:4b:4a -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIDAnw2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNTEyNDIwNFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThC OTY0QzMyRENCMThCODAzNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqopwpcfP4V5d1+a9mZl/UshnliNhD+xk8PyXrTbVBqQVtoKKdYKqqAuHhLEOI JtOggpSbKiYWTMDnZgogIc0wQCcTnkEZke1oq7neVy/28ad573EJv9C/l6gOeuxY DG3PBsNjixMNY8Th6T1InDr/dVE22ugMpSFTJRR9M4g32j4SGm4CK0BAMt3GUOrz yQuYeleo4Mkg5trhZzs5h15TPiwG+cfrMrOJIBjchCJHjpoVJoIqPJvwIm1VTHW0 TcYIljw50D1VyPJ7vkuc3r7h4BkXIlRGiI8O1BUg9ABob9ji2ZrAI+/FR2fmoCrQ mYkWsx7jOjMAh5rAtks+cEeXAgMBAAGjggNyMIIDbjAdBgNVHQ4EFgQULoy7jCYA xqCYyVi5ZMMtyxi4A1wwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFFOUI2Lzc5MThDQjBDN0ZGNTExRUQ5RUQ0NjQxREM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExRTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZ QXhxQ1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQgBAf8ENDAy oDAwLgICJHACAifbAgJEiQICRJoCAwCUvgIDAOVvAgMCCMkCAwIPJAIDAhUMAgMC GLMwWQYIKwYBBQUHAQcBAf8ESjBIMDAEAgABMCoDAwCWrQMEA8qJyAMEBMqgYAME BstZwDALAwQFy9agAwMAy9YDBADaZAEwFAQCAAIwDgMFACQExAADBQAkBgkAMA0G CSqGSIb3DQEBCwUAA4IBAQB7t+MF4ukQYr24Q8hjwP9l4WITu/yOcmPERax+oXjl Mccqz5pfCr9fgC3PF6zcweJGGDdwKO6vVhz9dWOvru/0pCyJajijmlfC0GVfw+UQ 9cGosPlRoSF2xXv8WtVUTvFTd0jrBTse3jZuWQLfs3KhZrdoYqAY3Yf+hZGf6vFE bMG4HkUZkvGCV3R2xNAsrW6RXtizM9AsHAOlxUTt5Ys5VPXxOZHIieaJfSEqMu5j 5mb+BChHG4EommZOrys4K6OSfZ+jY743oAzOzxG19hSr1RZCdgSplCYR4yeG3FlS X99aB9tVrH1m5jYkCat1+qHJ4bhEOay6NDkGv1m2GEtK -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:22 2025 by rpki-client