This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer File: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer (raw, json) Hash identifier: R3mQCCDaKtFS9Td3NMOmuo63Neo7lUNHQnGRQpMCnhI= Subject key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02757C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 16 Nov 2025 12:24:57 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 59268 IP: 49.128.64.0/19 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161148 (0x2757c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 16 12:24:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:d1:b4:26:c2:15:47:72:d4:b1:9a:6e:7e: 5f:46:ed:d5:d8:5a:79:8e:5f:22:b2:54:6e:32:2d: 5c:8a:4e:e9:4a:e6:b1:ab:aa:07:6e:39:d6:f5:6f: c9:c9:72:71:f4:f0:d1:3c:14:cf:6a:44:88:92:13: b4:e7:aa:88:3d:1a:e7:2d:ca:d4:a6:24:44:5f:87: ec:a3:ec:12:3e:e3:b4:bc:94:52:af:f7:b7:9f:de: 0a:48:a6:dd:9f:e4:72:d4:a0:87:b3:bf:94:d0:c3: 73:89:a4:35:b6:7b:e5:8f:6b:74:7f:49:89:bb:24: 84:9e:ff:de:2f:bc:f0:bf:d3:ae:8b:cb:f0:c4:0c: fd:ba:23:80:b3:07:3e:72:9a:a7:77:ba:8d:da:13: 46:df:b2:93:47:fb:77:6e:59:f3:7b:7a:5b:9f:94: 79:82:21:86:da:b9:d0:5b:06:8a:74:cb:54:5f:bd: bc:f2:12:6b:75:c4:6a:3f:15:23:ef:2c:6c:68:03: c1:23:22:ef:25:0d:ef:22:fd:07:6c:97:8f:bd:9a: 4b:dc:59:5b:5a:f0:64:98:04:6c:9b:24:a6:7e:29: f6:d7:94:e8:80:67:45:e4:34:21:32:0d:8f:e3:09: 40:b9:15:b0:b6:52:de:86:25:42:15:22:31:19:7a: 22:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59268 sbgp-ipAddrBlock: critical IPv4: 49.128.64.0/19 Signature Algorithm: sha256WithRSAEncryption 8c:63:71:bf:e4:89:e6:79:e8:49:20:09:c9:49:ea:c0:e4:f0: 25:95:09:28:1e:24:5b:22:05:4e:29:4f:e4:78:8c:72:91:44: 02:42:b3:34:0f:75:b1:7d:01:6d:fe:3e:0d:dd:a5:5e:6d:05: 9f:af:df:99:8f:d8:60:70:7d:99:01:07:0a:36:67:ce:83:47: 2f:ba:6c:0e:66:7c:65:0e:7c:f5:92:55:da:99:31:e0:d1:b8: 73:5a:be:98:31:8e:12:dc:cc:e7:2e:04:cb:26:87:ec:22:e7: 9c:69:a9:4c:67:bf:e7:f0:37:76:e5:bf:ac:6a:fd:58:3d:e3: f5:47:cd:90:c1:f0:d5:77:ce:c3:d7:62:6e:83:ec:30:b3:5a: f2:14:e2:37:00:9b:35:29:5e:ad:9d:9c:35:ce:2d:bf:ea:d3: 47:ac:9c:b2:bf:54:91:fe:f8:29:5d:fa:3a:9c:32:81:b1:5e: ec:b9:59:6a:83:68:59:8d:d3:26:3a:df:9f:9e:0a:36:51:2f: d1:02:fb:f6:f8:ff:e1:18:af:18:3b:83:66:5f:31:97:82:31: a5:55:7d:ed:af:0d:ee:70:d2:98:a5:9a:8d:43:ad:d6:82:95: f6:3b:4e:4f:f5:2a:7e:11:bf:a5:b7:0d:a4:0a:03:3c:a0:18: 8d:39:2f:20 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnV8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNjEyMjQ1N1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENG QjdBM0Y4MzNGQkI0NkI4OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrr9G0JsIVR3LUsZpufl9G7dXYWnmOXyKyVG4yLVyKTulK5rGrqgduOdb1b8nJ cnH08NE8FM9qRIiSE7Tnqog9GuctytSmJERfh+yj7BI+47S8lFKv97ef3gpIpt2f 5HLUoIezv5TQw3OJpDW2e+WPa3R/SYm7JISe/94vvPC/066Ly/DEDP26I4CzBz5y mqd3uo3aE0bfspNH+3duWfN7eluflHmCIYbaudBbBop0y1RfvbzyEmt1xGo/FSPv LGxoA8EjIu8lDe8i/Qdsl4+9mkvcWVta8GSYBGybJKZ+KfbXlOiAZ0XkNCEyDY/j CUC5FbC2Ut6GJUIVIjEZeiLbAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUQ+HoxCYc 4H1Pjkz7ej+DP7tGuIwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE4RDBGLzdEMjI3M0I0QTY0NjExRUFBRjlFOTE2MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExOEQwRi83RDIyNzNCNEE2NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZ YzRIMVBqa3o3ZWotRFA3dEd1SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAOeEMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFMYBAMA0GCSqG SIb3DQEBCwUAA4IBAQCMY3G/5InmeehJIAnJSerA5PAllQkoHiRbIgVOKU/keIxy kUQCQrM0D3WxfQFt/j4N3aVebQWfr9+Zj9hgcH2ZAQcKNmfOg0cvumwOZnxlDnz1 klXamTHg0bhzWr6YMY4S3MznLgTLJofsIuecaalMZ7/n8Dd25b+sav1YPeP1R82Q wfDVd87D12Jug+wws1ryFOI3AJs1KV6tnZw1zi2/6tNHrJyyv1SR/vgpXfo6nDKB sV7suVlqg2hZjdMmOt+fngo2US/RAvv2+P/hGK8YO4NmXzGXgjGlVX3trw3ucNKY pZqNQ63WgpX2O05P9Sp+Eb+ltw2kCgM8oBiNOS8g -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:29 2025 by rpki-client