This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer File: NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer (raw, json) Hash identifier: w9pUO5mnqwalkWLrfVF7y+cvoYilLRuIy9NcOLr5Lk8= Subject key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02749C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 11 Nov 2025 17:33:35 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 4773 AS: 9481 AS: 132915 IP: 27.104.0.0/16 IP: 43.245.104.0/22 IP: 49.245.0.0/16 IP: 103.1.136.0/22 IP: 112.199.128.0/17 IP: 116.197.192.0/18 IP: 119.56.0.0/17 IP: 124.197.64.0/18 IP: 124.246.64.0/18 IP: 175.156.0.0/16 IP: 180.129.0.0/17 IP: 202.65.240.0/21 IP: 2401:7400::/31 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160924 (0x2749c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 11 17:33:35 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:0b:0e:4e:ec:7e:d1:b7:8c:84:14:ce:03: b3:09:3d:e8:54:6b:37:fe:b8:c1:02:50:e1:d0:62: 21:8c:49:43:42:67:91:99:3b:72:de:02:77:68:1c: fa:b3:b4:7c:37:57:05:16:71:2e:40:4f:e7:29:f4: 73:f4:5c:59:47:59:14:ee:27:44:5d:b6:da:97:33: 8e:a6:06:d4:37:b5:62:17:6d:da:f0:11:3b:04:3d: ca:cd:6c:bf:db:1a:46:e5:2b:4c:3b:20:59:5d:5f: 3c:a9:ab:3b:0e:d9:be:70:c5:b6:aa:fd:d4:6d:51: 3b:34:fe:39:45:a0:b8:8d:69:79:46:85:cf:ed:b1: 19:1d:a8:53:82:10:99:e2:b3:f1:9c:73:94:78:7f: d7:be:cf:c4:80:08:13:05:fa:aa:d0:93:68:f0:58: 34:55:da:1f:52:03:1c:a8:2e:b8:da:61:47:b3:1c: dd:5c:e2:c5:43:f6:8d:dc:6e:a4:03:07:97:97:4c: 30:0b:fb:f2:50:ab:31:71:ce:7c:a7:a5:82:3d:94: 6e:c4:cb:9e:72:d9:db:0f:23:a0:d1:76:d8:2b:24: 06:56:69:b1:1d:10:d5:0e:ee:84:12:17:b1:c7:c4: 7b:3f:47:a3:5e:7c:a3:bc:63:c2:ff:37:b3:03:16: ab:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 4773 9481 132915 sbgp-ipAddrBlock: critical IPv4: 27.104.0.0/16 43.245.104.0/22 49.245.0.0/16 103.1.136.0/22 112.199.128.0/17 116.197.192.0/18 119.56.0.0/17 124.197.64.0/18 124.246.64.0/18 175.156.0.0/16 180.129.0.0/17 202.65.240.0/21 IPv6: 2401:7400::/31 Signature Algorithm: sha256WithRSAEncryption 1c:b3:b6:04:2b:00:36:dc:30:ee:d8:40:af:48:8e:7d:08:07: f0:e9:d0:7c:05:5f:d4:02:82:4d:4f:ed:20:f1:c2:9c:8a:70: d0:0a:72:e7:56:de:99:1f:24:13:32:f0:c0:09:22:d4:7d:ee: c6:a5:cb:c1:e4:2a:b3:1d:e8:ab:55:20:87:66:36:bf:35:e8: 6a:f4:92:b3:b1:90:b8:22:86:ae:4d:f0:24:d1:f1:24:38:06: 36:8d:54:3e:26:23:e3:6e:28:84:75:1b:58:e7:7f:ef:af:c6: 02:5d:36:96:2e:77:0b:f5:b0:c7:4a:dc:56:8a:d5:d0:3d:64: 97:a7:fc:0b:c1:c5:9b:1d:1e:e4:b0:f7:bb:cd:07:3b:98:ba: fd:07:05:86:d0:86:00:ff:6d:2f:ae:aa:e8:70:00:94:82:ec: e8:eb:4f:85:fb:47:be:aa:95:9a:22:80:b1:29:cd:28:8b:a1: fe:0f:e0:25:04:46:42:d2:2e:62:f2:24:fd:44:a3:48:5f:01: 8c:4c:be:7a:f0:b5:15:5d:e5:a3:e1:75:cc:12:cb:83:93:89: 93:65:5b:51:3c:61:85:63:3e:5b:dc:d6:a2:2a:33:85:61:0e: 77:a0:fa:e5:85:96:17:ba:86:03:b6:d6:b4:48:c4:09:b6:7a: c0:2c:a7:3c -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIDAnScMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMTE3MzMzNVoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxREU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZC RUExNzVFOERFODJCRDQzOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4HgsOTux+0beMhBTOA7MJPehUazf+uMECUOHQYiGMSUNCZ5GZO3LeAndoHPqz tHw3VwUWcS5AT+cp9HP0XFlHWRTuJ0RdttqXM46mBtQ3tWIXbdrwETsEPcrNbL/b GkblK0w7IFldXzypqzsO2b5wxbaq/dRtUTs0/jlFoLiNaXlGhc/tsRkdqFOCEJni s/Gcc5R4f9e+z8SACBMF+qrQk2jwWDRV2h9SAxyoLrjaYUezHN1c4sVD9o3cbqQD B5eXTDAL+/JQqzFxznynpYI9lG7Ey55y2dsPI6DRdtgrJAZWabEdENUO7oQSF7HH xHs/R6NefKO8Y8L/N7MDFquhAgMBAAGjggNlMIIDYTAdBgNVHQ4EFgQUNxJzz9jC yQi2kda+oXXo3oK9Q5owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURFN0RFL0NFRTNENzE4MDRFMTExRTk4RUE3RDg3MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFERTdERS9DRUUzRDcxODA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlq Q3lRaTJrZGEtb1hYbzNvSzlRNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQgBAf8EEzAR oA8wDQICEqUCAiUJAgMCBzMwbQYIKwYBBQUHAQcBAf8EXjBcMEsEAgABMEUDAwAb aAMEAiv1aAMDADH1AwQCZwGIAwQHcMeAAwQGdMXAAwQHdzgAAwQGfMVAAwQGfPZA AwMAr5wDBAe0gQADBAPKQfAwDQQCAAIwBwMFASQBdAAwDQYJKoZIhvcNAQELBQAD ggEBAByztgQrADbcMO7YQK9Ijn0IB/Dp0HwFX9QCgk1P7SDxwpyKcNAKcudW3pkf JBMy8MAJItR97saly8HkKrMd6KtVIIdmNr816Gr0krOxkLgihq5N8CTR8SQ4BjaN VD4mI+NuKIR1G1jnf++vxgJdNpYudwv1sMdK3FaK1dA9ZJen/AvBxZsdHuSw97vN BzuYuv0HBYbQhgD/bS+uquhwAJSC7OjrT4X7R76qlZoigLEpzSiLof4P4CUERkLS LmLyJP1Eo0hfAYxMvnrwtRVd5aPhdcwSy4OTiZNlW1E8YYVjPlvc1qIqM4VhDneg +uWFlhe6hgO21rRIxAm2esAspzw= -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:55 2025 by rpki-client