This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer File: PUfmaHu030DFGwOkVZwQyiL2dy8.cer (raw, json) Hash identifier: ag6JDcfs7RZ/c5NzYsfZF+yKwOqijuQ1MrRGqzdJO7g= Subject key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02739E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 06 Nov 2025 16:17:07 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 17435 AS: 55436 IP: 58.28.0.0/16 IP: 118.90.0.0/16 IP: 182.154.0.0/16 IP: 2001:e20::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160670 (0x2739e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 6 16:17:07 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:ae:c6:51:32:e5:65:b6:b0:05:59:23:b2: 50:42:7f:5f:5e:c7:f3:24:74:5b:b8:d8:6d:26:2b: e6:de:67:83:b9:97:07:7f:e7:e3:8c:8b:aa:b0:10: f0:ea:3c:20:02:b4:6f:e2:46:38:4e:35:ca:46:96: 10:22:0b:9f:41:38:21:85:0d:25:e5:58:17:81:50: 09:8c:d3:73:3a:15:44:da:5a:a8:e6:34:30:d9:db: a1:51:5d:7b:53:93:c5:6a:48:6a:42:2d:7b:44:f0: 42:e5:7e:b2:bc:ce:95:6e:fb:ac:33:5e:45:ef:3a: 5c:26:64:ad:27:2a:3d:13:68:df:f2:72:cb:90:4b: 34:97:13:54:2c:1d:1a:43:06:c6:c5:dc:df:1b:ed: 51:3e:a3:43:d9:66:4a:33:11:93:c4:1a:ce:94:b1: 73:35:ca:1f:8c:f0:d3:18:af:8a:72:f6:9d:91:a2: 6c:8c:f5:d9:f4:20:fa:43:cb:95:58:47:09:54:c9: 00:e3:93:61:a8:d3:a4:f1:db:63:d4:19:1a:30:cb: 8e:8d:90:b2:b8:dd:1a:e3:88:3b:e2:c4:f7:88:61: 9c:5a:37:ff:cf:dc:0d:69:13:ef:7b:30:59:25:89: b1:d7:08:a7:30:a7:23:79:a5:94:ed:14:f9:6c:11: 27:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 17435 55436 sbgp-ipAddrBlock: critical IPv4: 58.28.0.0/16 118.90.0.0/16 182.154.0.0/16 IPv6: 2001:e20::/32 Signature Algorithm: sha256WithRSAEncryption 67:ac:d9:cf:43:70:b7:37:e7:e8:1b:2f:8b:23:12:b8:2a:93: 8c:79:07:5c:41:16:38:7d:67:e3:31:3a:a5:aa:0a:ff:f5:0d: e1:5e:ea:8b:a7:9f:10:79:29:bd:9c:9d:c9:24:67:7b:3e:f3: aa:76:c9:07:71:81:82:c4:3b:f2:62:c5:16:92:2c:94:a8:b0: d6:0f:e1:70:45:90:87:62:47:4c:30:3c:3e:5c:74:0f:15:3f: e1:3d:87:0c:4c:22:2c:89:cf:e4:81:20:6f:33:b4:b8:b2:ad: d2:a3:b1:ae:7d:cf:9d:e6:29:47:a1:29:93:b9:a5:57:e2:b8: 56:5b:14:77:40:f4:20:9b:94:db:ae:58:d5:3d:b8:64:e2:ce: 0e:3a:16:3f:2f:0b:f8:54:05:38:a5:f8:7c:fa:d8:f3:14:07: bc:99:94:9d:f6:c1:c2:1d:c1:ff:32:1f:c6:de:87:a9:0f:ca: e2:30:95:05:7e:a4:06:da:1b:fb:7c:fa:a6:2b:ec:53:50:bc: a4:f7:a2:2b:7d:ac:41:3b:a5:de:ff:d2:59:ff:02:29:02:f5: 63:80:79:4a:50:5b:0a:ac:a7:c2:04:be:43:6c:f0:32:ff:89: 3f:e5:fa:e8:f0:85:a7:1d:49:cd:b4:16:f8:8e:96:aa:41:c8: 71:29:26:b5 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIDAnOeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNjE2MTcwN1oXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQUE1QzYxMTAvBgNVBAUTKDNENDdFNjY4N0JCNERGNDBDNTFCMDNB NDU1OUMxMENBMjJGNjc3MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtqa7GUTLlZbawBVkjslBCf19ex/MkdFu42G0mK+beZ4O5lwd/5+OMi6qwEPDq PCACtG/iRjhONcpGlhAiC59BOCGFDSXlWBeBUAmM03M6FUTaWqjmNDDZ26FRXXtT k8VqSGpCLXtE8ELlfrK8zpVu+6wzXkXvOlwmZK0nKj0TaN/ycsuQSzSXE1QsHRpD BsbF3N8b7VE+o0PZZkozEZPEGs6UsXM1yh+M8NMYr4py9p2RomyM9dn0IPpDy5VY RwlUyQDjk2Go06Tx22PUGRowy46NkLK43RrjiDvixPeIYZxaN//P3A1pE+97MFkl ibHXCKcwpyN5pZTtFPlsESfXAgMBAAGjggMrMIIDJzAdBgNVHQ4EFgQUPUfmaHu0 30DFGwOkVZwQyiL2dy8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFBNUM2L0Q1NTUxOUI0NEMzNDExRUVBRUVEQTIyQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBQTVDNi9ENTU1MTlCNDRDMzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1 MDMwREZHd09rVlp3UXlpTDJkeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICRBsCAwDYjDA3BggrBgEFBQcBBwEB/wQoMCYwFQQCAAEwDwMDADocAwMA dloDAwC2mjANBAIAAjAHAwUAIAEOIDANBgkqhkiG9w0BAQsFAAOCAQEAZ6zZz0Nw tzfn6BsviyMSuCqTjHkHXEEWOH1n4zE6paoK//UN4V7qi6efEHkpvZydySRnez7z qnbJB3GBgsQ78mLFFpIslKiw1g/hcEWQh2JHTDA8Plx0DxU/4T2HDEwiLInP5IEg bzO0uLKt0qOxrn3PneYpR6Epk7mlV+K4VlsUd0D0IJuU265Y1T24ZOLODjoWPy8L +FQFOKX4fPrY8xQHvJmUnfbBwh3B/zIfxt6HqQ/K4jCVBX6kBtob+3z6pivsU1C8 pPeiK32sQTul3v/SWf8CKQL1Y4B5SlBbCqynwgS+Q2zwMv+JP+X66PCFpx1JzbQW +I6WqkHIcSkmtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:37 2025 by rpki-client