This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OkN4D2xDLe5HSoqVaFkCgtvqXbM.cer File: OkN4D2xDLe5HSoqVaFkCgtvqXbM.cer (raw, json) Hash identifier: xH3q1Bkhc0QB1igkc6hVKFlSFEvPJwgwNjCXcVXGWJY= Subject key identifier: 3A:43:78:0F:6C:43:2D:EE:47:4A:8A:95:68:59:02:82:DB:EA:5D:B3 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02795F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/OkN4D2xDLe5HSoqVaFkCgtvqXbM.mft caRepository: rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 30 Nov 2025 14:44:32 +0000 Certificate not after: Mon 30 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 137030 IP: 2405:e2c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162143 (0x2795f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 30 14:44:32 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=A915802B, serialNumber=3A43780F6C432DEE474A8A9568590282DBEA5DB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:ef:5d:cb:c4:06:f5:98:f5:98:52:44:f5: cb:68:ea:8d:72:73:f5:a9:a9:f4:1a:0a:d5:11:34: 38:f7:8e:14:02:04:f6:c7:0f:9e:5f:1c:51:5f:d4: f8:a5:18:99:b7:ee:d0:f8:31:05:b1:9f:1c:5c:c7: f5:df:68:fd:64:0b:e4:8d:70:77:2d:37:94:19:28: cb:a9:54:24:c9:ef:09:ed:a8:e1:e9:8d:73:5a:a1: 95:45:98:bb:79:c7:18:2f:d7:91:89:a7:df:73:3b: eb:8c:8b:4c:7a:dc:28:3f:9e:c4:8b:66:fc:87:e1: ed:cd:c5:35:36:f3:fe:92:14:a8:c3:92:c9:18:56: 81:dc:63:94:86:f1:4e:0c:17:c4:69:ba:32:05:19: dc:d2:ad:b0:51:88:a8:a1:54:aa:88:2f:98:c7:43: af:59:5d:c8:da:4b:f7:4f:b1:b7:fa:d0:78:91:62: 53:d9:54:37:d9:12:e7:fc:13:96:23:f6:59:f5:a9: 97:4f:7d:8b:20:e6:ea:95:75:57:b4:a8:ce:16:41: 0c:19:bb:77:b4:65:4f:29:39:42:12:dc:20:1e:de: c3:05:d5:5a:36:3b:32:8a:5c:51:8d:d4:e9:88:7a: ff:a6:04:f9:b2:ee:e3:ad:bf:81:9a:92:a9:b9:25: e6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:43:78:0F:6C:43:2D:EE:47:4A:8A:95:68:59:02:82:DB:EA:5D:B3 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/OkN4D2xDLe5HSoqVaFkCgtvqXbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137030 sbgp-ipAddrBlock: critical IPv6: 2405:e2c0::/32 Signature Algorithm: sha256WithRSAEncryption 3e:f3:d9:79:b7:39:ba:30:00:e1:f0:83:5f:af:c8:4a:71:2e: 53:1a:a0:7d:89:92:d1:41:92:f9:0b:e9:06:24:85:26:62:c9: f6:5a:9e:64:61:35:c0:2f:e0:57:a9:e1:88:2d:e8:8f:1e:cd: e6:75:86:05:94:b7:b3:5f:76:35:51:16:3c:1a:c8:20:e2:b9: e8:e8:b0:5c:77:9e:28:f0:73:35:41:de:91:6c:7e:75:8d:7b: d9:4c:19:43:34:f6:64:f1:ae:5c:23:98:b6:d4:4a:0f:94:bd: 7e:af:e9:47:2f:7b:8b:6a:07:f5:0f:9e:39:74:40:10:2b:f1: 0e:87:11:12:2d:d3:09:28:f3:05:51:91:8a:fd:fa:b5:cc:58: 93:ba:76:d2:a5:76:07:b0:13:61:e0:ce:be:32:e6:1b:83:c8: e1:8f:29:7f:54:2b:46:e2:ae:1b:1c:94:04:37:82:43:0d:9e: 11:0b:b4:3e:61:5d:d0:68:2f:d0:8a:91:2b:03:08:2a:6c:d9: 7c:a7:11:51:ea:51:7e:17:02:60:ce:ab:67:50:df:1a:ab:31: 30:0e:b6:0f:b1:e6:7d:5a:36:29:c4:fb:f3:cc:23:9a:c7:40: 9b:a5:79:d0:65:e9:dc:51:09:e7:a7:1b:9e:9b:76:ab:89:56: 22:46:66:e1 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAnlfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEzMDE0NDQzMloXDTI2MDMzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTgwMkIxMTAvBgNVBAUTKDNBNDM3ODBGNkM0MzJERUU0NzRBOEE5 NTY4NTkwMjgyREJFQTVEQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCf+9dy8QG9Zj1mFJE9cto6o1yc/WpqfQaCtURNDj3jhQCBPbHD55fHFFf1Pil GJm37tD4MQWxnxxcx/XfaP1kC+SNcHctN5QZKMupVCTJ7wntqOHpjXNaoZVFmLt5 xxgv15GJp99zO+uMi0x63Cg/nsSLZvyH4e3NxTU28/6SFKjDkskYVoHcY5SG8U4M F8RpujIFGdzSrbBRiKihVKqIL5jHQ69ZXcjaS/dPsbf60HiRYlPZVDfZEuf8E5Yj 9ln1qZdPfYsg5uqVdVe0qM4WQQwZu3e0ZU8pOUIS3CAe3sMF1Vo2OzKKXFGN1OmI ev+mBPmy7uOtv4Gakqm5JeafAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUOkN4D2xD Le5HSoqVaFkCgtvqXbMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU4MDJCLzMzMENDM0M0NjA1MDExRUE5NTc3Njc1NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1ODAyQi8zMzBDQzNDNDYwNTAxMUVBOTU3NzY3NTRDNEY5QUUwMi9Pa040RDJ4 RExlNUhTb3FWYUZrQ2d0dnFYYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhdGMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAXiwDANBgkq hkiG9w0BAQsFAAOCAQEAPvPZebc5ujAA4fCDX6/ISnEuUxqgfYmS0UGS+QvpBiSF JmLJ9lqeZGE1wC/gV6nhiC3ojx7N5nWGBZS3s192NVEWPBrIIOK56OiwXHeeKPBz NUHekWx+dY172UwZQzT2ZPGuXCOYttRKD5S9fq/pRy97i2oH9Q+eOXRAECvxDocR Ei3TCSjzBVGRiv36tcxYk7p20qV2B7ATYeDOvjLmG4PI4Y8pf1QrRuKuGxyUBDeC Qw2eEQu0PmFd0Ggv0IqRKwMIKmzZfKcRUepRfhcCYM6rZ1DfGqsxMA62D7HmfVo2 KcT788wjmsdAm6V50GXp3FEJ56cbnpt2q4lWIkZm4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:23 2025 by rpki-client