This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer File: MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer (raw, json) Hash identifier: U4058v4Kj/wkyH2zV4J5lyYmVkABa3zGMl+9nzORvic= Subject key identifier: 30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02745A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 10 Nov 2025 14:56:54 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 152110 IP: 27.124.70.0/23 IP: 2001:df3:23c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160858 (0x2745a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 10 14:56:54 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91B9EC7, serialNumber=306E34FA84DA090C6001B35464BB8C426357D928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:3f:5d:0e:e5:96:ae:a5:8f:b9:9e:1b:be: 8f:57:41:61:fa:90:41:7e:9c:c1:fc:61:a6:51:3e: 5e:1f:97:77:a4:af:94:54:ed:95:7c:c5:30:db:72: fd:7b:64:20:fe:05:d1:7c:59:2a:a4:2f:68:a0:0d: f3:0c:5e:7b:6e:25:33:7a:eb:62:a8:45:1b:b4:37: b7:42:df:2f:94:20:7f:cb:4a:2b:d8:1d:70:c5:18: e8:b9:a9:b1:b2:19:62:82:0c:10:43:bb:91:5a:66: d7:9b:92:49:4a:e4:74:fc:80:5a:9b:8d:30:c9:68: 15:b9:66:b9:ff:3b:b8:24:84:f3:54:a2:d8:62:be: 37:a0:81:6f:e0:ea:76:b6:3a:7d:51:bd:ec:09:d5: 8f:f8:e8:ce:fc:15:29:25:9f:00:77:e4:c1:54:48: b4:0f:eb:09:d3:41:8d:5b:49:b0:0f:64:41:a4:aa: f6:e1:60:ad:91:28:a9:67:d8:63:ae:0f:1d:cf:a6: 96:a7:56:de:a8:15:27:ff:15:00:92:cf:86:23:52: d0:ed:89:90:ab:5a:91:a0:b3:1d:ff:78:53:32:8e: d3:58:7d:90:13:02:7d:09:93:d7:fe:0f:0c:0e:32: d8:cd:71:74:29:8f:d7:60:84:7a:3a:5d:cd:89:ae: 2c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 152110 sbgp-ipAddrBlock: critical IPv4: 27.124.70.0/23 IPv6: 2001:df3:23c0::/48 Signature Algorithm: sha256WithRSAEncryption 2b:ce:7f:97:bf:e3:c0:53:6f:3e:de:07:31:4d:b4:6b:d7:d5: ea:02:d6:4d:d5:9d:82:b5:05:48:cd:c5:31:eb:64:17:c8:24: e3:82:8f:91:9f:b4:2a:35:c0:18:ad:df:96:66:1a:3c:a1:56: 21:88:44:54:80:dd:ca:4e:f5:8f:28:ed:cc:52:07:17:8b:64: e3:03:cb:b9:82:ae:aa:35:16:7d:b3:2f:5a:e0:77:65:bf:04: e7:60:55:d8:fc:b9:ae:fd:2f:9e:41:1d:4f:06:d6:c1:49:bf: 69:b7:02:05:bf:ee:f0:f0:bf:2e:50:5f:2e:27:5b:b9:91:5b: 84:1b:75:2b:6e:1d:ff:9c:42:7d:88:1b:e8:12:b8:ca:b6:25: ce:92:f0:a1:ee:7c:f2:86:79:d9:af:38:3f:34:c9:4b:21:52: 97:2e:a9:dc:21:ec:69:92:2f:04:8b:f4:23:a4:ce:8f:48:67: 94:bd:56:3c:4c:b8:21:a0:11:e1:c0:71:2e:d8:d0:08:6a:88: 31:93:58:ab:a7:91:cb:3e:af:8d:4c:f9:9f:4f:6e:ee:66:73: 66:63:35:77:e0:fe:10:25:e7:36:c7:39:34:fb:25:88:5a:88: 2a:1d:eb:be:69:3d:98:33:99:6f:cf:6a:73:06:ad:3e:06:47: f7:46:40:95 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnRaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMDE0NTY1NFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjlFQzcxMTAvBgNVBAUTKDMwNkUzNEZBODREQTA5MEM2MDAxQjM1 NDY0QkI4QzQyNjM1N0Q5MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC29z9dDuWWrqWPuZ4bvo9XQWH6kEF+nMH8YaZRPl4fl3ekr5RU7ZV8xTDbcv17 ZCD+BdF8WSqkL2igDfMMXntuJTN662KoRRu0N7dC3y+UIH/LSivYHXDFGOi5qbGy GWKCDBBDu5FaZtebkklK5HT8gFqbjTDJaBW5Zrn/O7gkhPNUothivjeggW/g6na2 On1RvewJ1Y/46M78FSklnwB35MFUSLQP6wnTQY1bSbAPZEGkqvbhYK2RKKln2GOu Dx3PppanVt6oFSf/FQCSz4YjUtDtiZCrWpGgsx3/eFMyjtNYfZATAn0Jk9f+DwwO MtjNcXQpj9dghHo6Xc2JrixvAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUMG40+oTa CQxgAbNUZLuMQmNX2SgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUI5RUM3L0U2M0YyRjhBODJBMzExRUU5QjExNzM1N0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCOUVDNy9FNjNGMkY4QTgyQTMxMUVFOUIxMTczNTdDNEY5QUUwMi9NRzQwLW9U YUNReGdBYk5VWkx1TVFtTlgyU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlIuMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBG3xGMA8EAgAC MAkDBwAgAQ3zI8AwDQYJKoZIhvcNAQELBQADggEBACvOf5e/48BTbz7eBzFNtGvX 1eoC1k3VnYK1BUjNxTHrZBfIJOOCj5GftCo1wBit35ZmGjyhViGIRFSA3cpO9Y8o 7cxSBxeLZOMDy7mCrqo1Fn2zL1rgd2W/BOdgVdj8ua79L55BHU8G1sFJv2m3AgW/ 7vDwvy5QXy4nW7mRW4QbdStuHf+cQn2IG+gSuMq2Jc6S8KHufPKGedmvOD80yUsh Upcuqdwh7GmSLwSL9COkzo9IZ5S9VjxMuCGgEeHAcS7Y0AhqiDGTWKunkcs+r41M +Z9Pbu5mc2ZjNXfg/hAl5zbHOTT7JYhaiCod675pPZgzmW/PanMGrT4GR/dGQJU= -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:32 2025 by rpki-client