This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer File: NGwg84nbntxqG_L0AxqaFwO-h-E.cer (raw, json) Hash identifier: GIWQeChD9FmK93+jx8A5rcRI+SU45shlfb0pHxWRk6Q= Subject key identifier: 34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0277C1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft caRepository: rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 08:05:46 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 24090 IP: 202.170.48.0/20 IP: 2402:2200::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161729 (0x277c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 08:05:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A914E928, serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2b:c3:6a:7d:5c:4a:6c:d7:2f:b0:a0:90:b8: 92:cb:d3:04:df:3d:77:d3:f4:2c:d9:26:6e:e6:b0: 94:05:9d:90:68:14:3e:aa:4c:9f:a4:26:e9:a8:8c: 9d:8f:a0:10:64:02:90:16:30:6e:be:3c:48:28:56: 26:25:ea:85:f5:fc:e5:ce:6d:37:23:02:31:45:ba: 92:4f:00:61:62:f2:46:8c:4e:bd:b8:e5:07:e4:70: 18:86:49:a0:bc:ce:47:85:f1:4a:dc:26:da:2d:11: 82:42:de:f4:6f:28:78:60:78:d1:b7:d8:22:9f:e4: 95:2c:40:b9:6a:8e:5a:9e:dd:ff:d3:4a:bf:a8:9a: b8:7b:3f:c0:d1:90:75:46:68:2e:ef:62:9e:89:e5: a2:e8:8e:36:88:a6:a7:71:d1:e2:2e:8c:24:eb:01: 6f:c2:8a:8c:15:90:d0:0d:9b:39:06:f0:92:22:fa: ee:db:c6:dd:00:4e:67:ab:df:75:ce:d5:73:4e:ef: 35:e7:d8:a5:48:d2:c3:50:01:10:16:f8:9e:18:bd: 83:c2:7a:1e:06:13:6e:44:99:c7:4e:08:6e:88:c5: cb:e5:5f:c3:89:71:b9:0a:c1:8a:7c:d4:52:7f:06: 5e:b0:fe:44:13:77:48:fb:6a:ce:0c:ef:4e:2c:6d: 98:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24090 sbgp-ipAddrBlock: critical IPv4: 202.170.48.0/20 IPv6: 2402:2200::/32 Signature Algorithm: sha256WithRSAEncryption 97:3b:f6:39:d5:35:e6:c0:15:29:57:d5:ec:85:5e:6c:e3:f7: 6a:08:be:b3:8c:b0:91:c8:7c:17:10:35:ba:5c:a9:2a:a9:20: ce:08:4a:0e:77:b3:eb:cd:8b:98:14:39:30:d8:09:1c:52:a9: a0:70:6c:6d:c2:5f:bf:92:5c:d4:20:2b:dd:a5:4c:6d:86:42: af:54:34:d5:f3:0b:29:3e:ad:56:16:a4:8b:98:fa:02:6a:61: d0:b6:cc:25:bc:fe:4d:76:af:40:8a:d7:6f:8b:95:b5:46:7a: 6a:5a:e7:0a:0b:61:71:91:cb:aa:76:bf:f9:66:19:b4:17:b9: 41:8f:4c:91:1d:bc:fe:ac:dc:84:b8:fd:a2:36:18:60:cb:74: 27:a7:0d:96:19:07:f7:63:39:73:c6:08:23:f4:5b:5a:1e:44: 76:db:0d:32:72:cd:34:47:fe:b0:7f:92:28:60:09:cf:87:c6: 82:b9:63:45:11:41:42:af:10:d2:3a:3d:b8:d6:57:5b:d6:2a: d5:34:66:70:6b:0e:87:cc:e9:3d:fd:27:18:2e:25:1c:13:8b: 07:00:ca:b9:02:50:60:0c:e2:c9:1b:10:28:74:93:1e:51:74: 20:33:7a:11:2e:84:b3:ab:29:bd:8d:52:b9:e4:4a:8d:24:1c: d5:c3:f4:09 -----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgIDAnfBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTA4MDU0NloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNEU5MjgxMTAvBgNVBAUTKDM0NkMyMEYzODlEQjlFREM2QTFCRjJG NDAzMUE5QTE3MDNCRTg3RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxK8NqfVxKbNcvsKCQuJLL0wTfPXfT9CzZJm7msJQFnZBoFD6qTJ+kJumojJ2P oBBkApAWMG6+PEgoViYl6oX1/OXObTcjAjFFupJPAGFi8kaMTr245QfkcBiGSaC8 zkeF8UrcJtotEYJC3vRvKHhgeNG32CKf5JUsQLlqjlqe3f/TSr+omrh7P8DRkHVG aC7vYp6J5aLojjaIpqdx0eIujCTrAW/CiowVkNANmzkG8JIi+u7bxt0ATmer33XO 1XNO7zXn2KVI0sNQARAW+J4YvYPCeh4GE25EmcdOCG6IxcvlX8OJcbkKwYp81FJ/ Bl6w/kQTd0j7as4M704sbZgnAgMBAAGjggMdMIIDGTAdBgNVHQ4EFgQUNGwg84nb ntxqG/L0AxqaFwO+h+EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRFOTI4Lzg5QTYwQTBDQzlENTExRjA4OTdGREQ0RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0RTkyOC84OUE2MEEwQ0M5RDUxMUYwODk3RkRENEZDNEY5QUUwMi9OR3dnODRu Ym50eHFHX0wwQXhxYUZ3Ty1oLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICXhowLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBATKqjAwDQQCAAIw BwMFACQCIgAwDQYJKoZIhvcNAQELBQADggEBAJc79jnVNebAFSlX1eyFXmzj92oI vrOMsJHIfBcQNbpcqSqpIM4ISg53s+vNi5gUOTDYCRxSqaBwbG3CX7+SXNQgK92l TG2GQq9UNNXzCyk+rVYWpIuY+gJqYdC2zCW8/k12r0CK12+LlbVGempa5woLYXGR y6p2v/lmGbQXuUGPTJEdvP6s3IS4/aI2GGDLdCenDZYZB/djOXPGCCP0W1oeRHbb DTJyzTRH/rB/kihgCc+HxoK5Y0URQUKvENI6PbjWV1vWKtU0ZnBrDofM6T39Jxgu JRwTiwcAyrkCUGAM4skbECh0kx5RdCAzehEuhLOrKb2NUrnkSo0kHNXD9Ak= -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:57 2025 by rpki-client