This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer File: MnO_dM_TfcKwgKpPGtntXtY-YyA.cer (raw, json) Hash identifier: Er+Dxxvk1xKRnGZpiQM54QFiKyhCwmi/Q34New7MvAw= Subject key identifier: 32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027AAA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft caRepository: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 13:36:54 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 153474 IP: 2001:df4:b7c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162474 (0x27aaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 13:36:54 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A912E3C7, serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:c5:9a:cd:7e:0e:d1:1e:9c:c2:47:4e:88: d0:ea:67:35:c4:65:97:fd:e5:92:17:3b:02:d8:e5: 6d:b1:e1:e4:c4:a6:84:dd:ee:92:99:8a:dd:97:da: 26:d3:34:13:1e:dc:41:e1:e0:37:32:b7:da:6e:2b: 71:48:15:3d:d8:bb:a3:a0:cc:3a:2f:06:c8:e6:b1: 9c:f9:c9:70:e1:f6:d7:11:fc:7e:29:4b:45:90:2c: d7:25:91:ef:ec:b9:85:96:0e:9b:38:08:a9:01:aa: f4:14:db:9c:1d:f3:59:6a:87:c5:5e:b8:09:0e:87: bd:ac:38:37:24:4d:76:b8:2f:bf:c7:e1:74:d5:90: 98:af:65:22:e2:57:a4:42:88:20:71:43:8b:3e:1f: 8d:ec:bd:32:da:10:79:67:c3:0a:34:b4:37:2b:23: 70:2f:52:67:aa:db:26:52:13:dd:df:4d:74:5e:c7: 31:76:28:e0:b2:22:df:f5:cd:3e:75:68:b1:d3:c8: 95:0e:8e:b4:5d:41:15:61:c1:33:26:fa:9d:77:ee: 6e:13:2f:bd:0b:ac:d7:85:51:a1:b9:a4:42:a2:8c: 10:aa:75:0b:91:4a:a0:74:07:fe:5e:55:60:c6:6a: ce:06:25:11:6b:09:e8:04:d5:33:d1:e7:00:81:f2: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153474 sbgp-ipAddrBlock: critical IPv6: 2001:df4:b7c0::/48 Signature Algorithm: sha256WithRSAEncryption 08:40:36:d5:40:7c:47:b1:1b:c1:40:8a:74:74:48:e5:65:0d: ee:18:f0:59:df:e3:2a:d3:6a:d2:50:1f:cb:42:5f:20:40:05: db:41:73:b7:55:0f:44:f9:80:e4:e9:77:5a:08:9c:d1:a1:c3: 19:ca:dd:ac:09:d5:9d:00:9e:b8:e6:c6:b9:a3:e0:86:27:eb: 96:bf:1d:9b:42:db:cb:b0:fc:8b:f9:33:07:95:10:29:88:24: 47:39:c1:1d:1b:dd:cc:49:aa:c4:f0:64:e4:2f:12:e8:e8:98: ed:de:b6:9c:f5:bc:42:ab:71:b3:00:86:d7:a1:db:f9:05:6b: 09:85:f0:86:3b:3b:96:47:ac:ac:72:47:e9:77:d3:92:28:29: 1e:76:07:f1:21:fa:60:b4:67:40:42:42:bf:bb:8e:70:b9:a0: e4:51:86:66:03:37:c4:35:0c:3a:d7:ce:42:d4:22:c3:c8:a5: 97:58:6f:8c:a3:7d:fb:8d:22:a3:3d:7a:cd:87:4b:1d:74:57: 17:73:45:2b:3d:d7:11:42:d1:cc:4e:d9:75:ab:85:a8:f9:24: d7:47:3a:a1:f7:2b:cc:06:18:99:24:be:8b:96:d7:62:b1:20: 85:d0:97:85:82:6c:a8:96:5e:9f:7b:44:36:86:c1:a7:a1:14: 45:23:39:19 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAnqqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjEzMzY1NFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxMkUzQzcxMTAvBgNVBAUTKDMyNzNCRjc0Q0ZEMzdEQzJCMDgwQUE0 RjFBRDlFRDVFRDYzRTYzMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHJ8WazX4O0R6cwkdOiNDqZzXEZZf95ZIXOwLY5W2x4eTEpoTd7pKZit2X2ibT NBMe3EHh4Dcyt9puK3FIFT3Yu6OgzDovBsjmsZz5yXDh9tcR/H4pS0WQLNclke/s uYWWDps4CKkBqvQU25wd81lqh8VeuAkOh72sODckTXa4L7/H4XTVkJivZSLiV6RC iCBxQ4s+H43svTLaEHlnwwo0tDcrI3AvUmeq2yZSE93fTXRexzF2KOCyIt/1zT51 aLHTyJUOjrRdQRVhwTMm+p137m4TL70LrNeFUaG5pEKijBCqdQuRSqB0B/5eVWDG as4GJRFrCegE1TPR5wCB8vpVAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUMnO/dM/T fcKwgKpPGtntXtY+YyAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJFM0M3LzhFNjA4QThBQjI2NzExRUZBNTY1QTg0OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyRTNDNy84RTYwOEE4QUIyNjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9Nbk9fZE1f VGZjS3dnS3BQR3RudFh0WS1ZeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAleCMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9LfAMA0G CSqGSIb3DQEBCwUAA4IBAQAIQDbVQHxHsRvBQIp0dEjlZQ3uGPBZ3+Mq02rSUB/L Ql8gQAXbQXO3VQ9E+YDk6XdaCJzRocMZyt2sCdWdAJ645sa5o+CGJ+uWvx2bQtvL sPyL+TMHlRApiCRHOcEdG93MSarE8GTkLxLo6Jjt3rac9bxCq3GzAIbXodv5BWsJ hfCGOzuWR6ysckfpd9OSKCkedgfxIfpgtGdAQkK/u45wuaDkUYZmAzfENQw6185C 1CLDyKWXWG+Mo337jSKjPXrNh0sddFcXc0UrPdcRQtHMTtl1q4Wo+STXRzqh9yvM BhiZJL6LltdisSCF0JeFgmyoll6fe0Q2hsGnoRRFIzkZ -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:39 2025 by rpki-client