This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer File: Pq60tRb3A-pY8W4I2opmdwP7XK4.cer (raw, json) Hash identifier: QPzbs8wR6Et9Pn3qtwwQoVcnelBvKNgkunyykzbeMe4= Subject key identifier: 3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02742B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft caRepository: rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 09 Nov 2025 14:08:54 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 55860 IP: 202.74.39.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160811 (0x2742b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 9 14:08:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A919D109, serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:6e:f2:67:4c:3f:43:e7:0b:62:cc:14:5c: a2:f5:45:e6:28:34:a2:ef:ca:ad:7f:e3:7f:3b:61: e9:4f:bc:dc:04:1d:53:1e:8f:8d:14:c4:bd:53:7b: 57:66:db:4b:10:bc:8f:32:97:bb:71:d4:4b:91:c8: 7e:77:1d:4a:d2:ff:6e:31:f7:36:ca:47:b3:fc:00: a4:68:4d:58:65:60:5d:9b:72:b2:39:c7:b4:fe:91: 01:ec:75:ab:fe:15:06:25:f6:cf:32:4a:e7:76:fa: 71:19:85:f1:61:2b:05:29:9d:86:30:cf:5a:7e:b0: c5:63:91:d2:ed:1f:58:db:f6:c4:ec:3d:c2:20:00: 37:7c:21:f6:f8:b1:d2:2d:c1:36:c9:f2:08:31:36: 6b:c5:b9:af:1f:d2:3b:c7:18:64:46:77:36:ef:04: 79:7e:26:f3:1b:2c:70:58:16:0e:c5:6f:c4:b4:32: 17:5a:5b:f6:0e:9c:fb:cd:56:f0:f7:ef:27:d6:53: ef:85:75:39:94:0b:c5:e1:0e:25:7f:e6:7b:a0:c0: 71:4a:f5:82:b0:b6:88:91:e5:ef:27:84:19:29:77: 88:2b:cc:22:78:46:c5:2c:5e:81:47:d7:d2:79:2d: 5a:4f:0d:3c:2c:7b:33:3b:d7:ca:8b:8b:42:8e:16: 2b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 55860 sbgp-ipAddrBlock: critical IPv4: 202.74.39.0/24 Signature Algorithm: sha256WithRSAEncryption 44:54:cb:56:7c:75:a8:ac:88:85:65:45:9d:82:73:21:1f:79: 3f:6c:b1:a7:39:5c:73:b2:2e:2a:2a:a2:95:46:15:d6:d4:69: 4d:b4:42:41:7e:b8:55:71:29:74:96:59:f6:a7:2a:61:04:28: 1b:f0:94:40:47:a7:85:7c:33:59:a2:8a:26:3c:45:70:89:31: d9:7c:5c:b0:76:e8:ca:3b:97:04:24:eb:3d:04:9d:e5:24:f9: fa:8a:95:1c:dc:77:89:75:9d:8d:05:e8:7d:cd:8b:ae:49:20: a5:8b:b2:a1:f8:94:3c:4e:28:f0:a2:cd:28:0e:95:7d:5d:c8: 11:82:e8:df:10:03:60:f4:24:bd:34:47:fa:d4:f8:7d:fd:18: b7:69:d8:08:a2:e4:35:a7:94:fc:07:78:5a:6f:ed:81:d7:b2: 6f:a4:91:a6:85:a4:ef:d9:6e:de:1a:ac:b0:01:8d:7a:83:c8: 5e:c9:0d:5a:87:ee:3b:69:46:e5:9d:f7:a1:2e:f6:c7:d3:30: 61:0a:75:45:28:6c:4a:d4:65:5d:10:f6:c7:a2:07:7d:bb:ff: 43:f9:a6:9a:cf:d4:47:8d:e7:ba:d5:45:54:09:36:15:35:df: 6a:25:a5:d4:f6:43:c5:ce:66:ab:01:a4:70:0c:fd:ed:30:06: a6:29:a1:59 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnQrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwOTE0MDg1NFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOUQxMDkxMTAvBgNVBAUTKDNFQUVCNEI1MTZGNzAzRUE1OEYxNkUw OERBOEE2Njc3MDNGQjVDQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrKG7yZ0w/Q+cLYswUXKL1ReYoNKLvyq1/4387YelPvNwEHVMej40UxL1Te1dm 20sQvI8yl7tx1EuRyH53HUrS/24x9zbKR7P8AKRoTVhlYF2bcrI5x7T+kQHsdav+ FQYl9s8ySud2+nEZhfFhKwUpnYYwz1p+sMVjkdLtH1jb9sTsPcIgADd8Ifb4sdIt wTbJ8ggxNmvFua8f0jvHGGRGdzbvBHl+JvMbLHBYFg7Fb8S0MhdaW/YOnPvNVvD3 7yfWU++FdTmUC8XhDiV/5nugwHFK9YKwtoiR5e8nhBkpd4grzCJ4RsUsXoFH19J5 LVpPDTwsezM718qLi0KOFiuhAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUPq60tRb3 A+pY8W4I2opmdwP7XK4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlEMTA5L0RBQzY2NkMwNUNFMDExRUVCNkMxQjUxM0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5RDEwOS9EQUM2NjZDMDVDRTAxMUVFQjZDMUI1MTNDNEY5QUUwMi9QcTYwdFJi M0EtcFk4VzRJMm9wbWR3UDdYSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANo0MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAykonMA0GCSqG SIb3DQEBCwUAA4IBAQBEVMtWfHWorIiFZUWdgnMhH3k/bLGnOVxzsi4qKqKVRhXW 1GlNtEJBfrhVcSl0lln2pyphBCgb8JRAR6eFfDNZooomPEVwiTHZfFywdujKO5cE JOs9BJ3lJPn6ipUc3HeJdZ2NBeh9zYuuSSCli7Kh+JQ8Tijwos0oDpV9XcgRgujf EANg9CS9NEf61Ph9/Ri3adgIouQ1p5T8B3hab+2B17JvpJGmhaTv2W7eGqywAY16 g8heyQ1ah+47aUblnfehLvbH0zBhCnVFKGxK1GVdEPbHogd9u/9D+aaaz9RHjee6 1UVUCTYVNd9qJaXU9kPFzmarAaRwDP3tMAamKaFZ -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:49 2025 by rpki-client