This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuogEr2z5hGaWu-_Zs7rOLWTHek.cer File: NuogEr2z5hGaWu-_Zs7rOLWTHek.cer (raw, json) Hash identifier: I7z61raBAWt3Y1EkXVTK8axfSQgWSESwwyWjAEgeUFU= Subject key identifier: 36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0280D3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft caRepository: rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 25 Dec 2025 04:01:07 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 133851 IP: 2001:df6:5340::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164051 (0x280d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 25 04:01:07 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A914BE8E, serialNumber=36EA2012BDB3E6119A5AEFBF66CEEB38B5931DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:19:50:f2:45:9c:f5:48:7c:92:20:22:f4:54: 3a:0f:a3:ce:0d:af:83:de:23:0f:cc:66:86:8b:6b: 3b:3c:8f:2f:25:0d:ef:02:6c:50:6e:13:38:3a:07: 13:cb:5b:3e:5c:65:5d:28:34:42:72:8d:7c:e0:2f: a1:4f:dd:82:a3:a3:91:7a:6e:25:d0:fb:e5:2a:70: 80:aa:2a:9c:b7:9c:17:f6:c7:16:c5:e6:d9:93:21: 14:b5:f5:34:43:dd:96:10:f6:69:23:79:36:8d:d1: e8:e7:36:7d:13:b2:71:09:19:4c:7a:2c:31:fe:1d: 78:cf:5c:ce:02:4e:b5:d1:49:8a:57:9d:bf:31:63: 68:a4:1b:08:0a:55:54:44:6e:04:69:bb:1a:a7:27: a0:14:a5:12:7e:9d:57:c9:9a:20:72:b2:f7:bd:16: 92:c3:fb:69:1e:90:5c:c5:b6:27:f8:6b:bf:11:76: ec:2c:95:d2:88:01:cd:3a:fd:23:00:12:38:65:5e: 4a:07:42:d6:16:ac:98:f6:2b:be:f6:5d:9d:fb:24: 75:4b:3a:bd:59:d5:3f:f6:9c:81:5a:4f:36:76:6c: 69:26:c3:9f:55:64:c6:19:2d:46:69:01:05:71:2a: 7a:bb:d1:38:4d:06:e5:c2:c6:79:dc:d3:5e:c4:ea: 2a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EA:20:12:BD:B3:E6:11:9A:5A:EF:BF:66:CE:EB:38:B5:93:1D:E9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/546193ECE14611F09164E0A8716F56BC/NuogEr2z5hGaWu-_Zs7rOLWTHek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133851 sbgp-ipAddrBlock: critical IPv6: 2001:df6:5340::/48 Signature Algorithm: sha256WithRSAEncryption ce:01:ab:bb:64:d7:31:2a:06:b9:0e:c3:d7:c0:b9:37:2b:8b: 16:69:0a:a0:a1:99:5f:24:86:c7:9b:b2:13:df:f0:79:a0:f6: d9:a8:91:58:d8:1f:22:b7:da:fd:d3:4b:5a:d1:09:8d:4a:a5: 60:f6:79:c1:9d:82:1f:b7:1e:5c:a0:7f:d9:b3:fe:e0:d1:68: b3:a1:d4:80:06:58:0c:2f:76:cf:c1:fe:98:f2:83:ae:34:72: 6b:87:1a:e9:b0:82:ef:a6:93:48:d7:cb:66:cd:b7:a9:f6:57: f4:d4:c5:56:ba:52:d5:f3:22:71:89:5f:39:bb:93:14:d4:39: 41:e9:ce:29:5c:91:47:c3:e1:d4:70:b8:b3:76:24:0a:84:78: a4:d9:d4:52:fd:7d:3c:08:18:37:da:86:64:a6:60:be:3e:ca: fd:dd:fb:0e:28:57:b2:31:54:10:e7:6a:37:37:6e:10:9b:52: dc:16:31:92:a7:91:b1:05:5b:3f:67:f4:d4:c0:24:53:40:4b: ed:7a:8e:6a:41:0c:2b:76:e8:63:97:09:bf:57:f7:b7:30:af: 11:90:26:b3:88:64:96:39:23:c3:b3:3d:88:f4:00:f6:35:13: 31:d1:72:f3:cb:53:38:d7:12:46:8b:4e:c2:4b:c0:75:50:53: f0:0e:72:28 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAoDTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyNTA0MDEwN1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNEJFOEUxMTAvBgNVBAUTKDM2RUEyMDEyQkRCM0U2MTE5QTVBRUZC RjY2Q0VFQjM4QjU5MzFERTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCGVDyRZz1SHySICL0VDoPo84Nr4PeIw/MZoaLazs8jy8lDe8CbFBuEzg6BxPL Wz5cZV0oNEJyjXzgL6FP3YKjo5F6biXQ++UqcICqKpy3nBf2xxbF5tmTIRS19TRD 3ZYQ9mkjeTaN0ejnNn0TsnEJGUx6LDH+HXjPXM4CTrXRSYpXnb8xY2ikGwgKVVRE bgRpuxqnJ6AUpRJ+nVfJmiBysve9FpLD+2kekFzFtif4a78RduwsldKIAc06/SMA EjhlXkoHQtYWrJj2K772XZ37JHVLOr1Z1T/2nIFaTzZ2bGkmw59VZMYZLUZpAQVx Knq70ThNBuXCxnnc017E6irnAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUNuogEr2z 5hGaWu+/Zs7rOLWTHekwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRCRThFLzU0NjE5M0VDRTE0NjExRjA5MTY0RTBBODcxNkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0QkU4RS81NDYxOTNFQ0UxNDYxMUYwOTE2NEUwQTg3MTZGNTZCQy9OdW9nRXIy ejVoR2FXdS1fWnM3ck9MV1RIZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgrbMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9lNAMA0G CSqGSIb3DQEBCwUAA4IBAQDOAau7ZNcxKga5DsPXwLk3K4sWaQqgoZlfJIbHm7IT 3/B5oPbZqJFY2B8it9r900ta0QmNSqVg9nnBnYIftx5coH/Zs/7g0WizodSABlgM L3bPwf6Y8oOuNHJrhxrpsILvppNI18tmzbep9lf01MVWulLV8yJxiV85u5MU1DlB 6c4pXJFHw+HUcLizdiQKhHik2dRS/X08CBg32oZkpmC+Psr93fsOKFeyMVQQ52o3 N24Qm1LcFjGSp5GxBVs/Z/TUwCRTQEvteo5qQQwrduhjlwm/V/e3MK8RkCaziGSW OSPDsz2I9AD2NRMx0XLzy1M41xJGi07CS8B1UFPwDnIo -----END CERTIFICATE-----Generated at Sun Jan 25 01:12:00 2026 by rpki-client