This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer File: Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer (raw, json) Hash identifier: cYOhde4bvITGULNvBCu6KST02UwZtMXZJfNdKAtMUAM= Subject key identifier: 43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028172 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 07:50:16 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 137430 IP: 2402:40e0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164210 (0x28172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 29 07:50:16 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91988EB, serialNumber=43EAF30C230C6EEE6E354DC03772A6EE53D50685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:07:26:b6:11:31:e0:ef:ab:12:8c:b5:76:bc: 8a:cc:47:6a:87:d3:20:48:51:73:1e:3f:9f:94:dd: f6:7e:f4:36:dd:25:d6:4a:50:e9:38:16:9d:d3:2a: 4f:d0:37:46:4e:21:16:cd:bf:ab:ec:f9:0c:35:0e: 16:56:9d:d0:3b:13:c7:42:ea:9e:c1:96:01:9f:ee: e5:d9:89:bc:49:06:12:3f:e0:eb:70:48:e8:63:5d: c3:f1:04:53:0e:5d:47:b6:ca:e9:a3:19:28:b4:b3: 21:e4:19:12:77:41:0e:3b:63:e0:dd:fd:4a:79:6a: f0:b4:7c:d5:72:f9:88:ea:24:42:03:f5:18:65:14: e8:33:82:c7:8c:5a:c7:04:ca:66:b2:67:0a:64:ec: 1f:36:39:da:fa:77:40:f2:6b:ea:87:3e:e9:e5:4c: 97:0f:09:75:09:fc:07:06:53:ee:d6:dc:97:a7:91: b8:0f:47:9b:68:9a:99:1f:48:af:62:97:9d:34:de: 09:bc:26:50:ed:22:6d:71:d4:b3:43:da:3a:29:7a: 62:55:3b:81:77:e0:76:f4:9c:f1:9f:39:53:d8:de: a5:93:f6:6c:dd:c8:61:b5:c4:18:23:c0:95:09:21: 65:af:1e:34:b4:c2:0c:15:a3:19:24:42:50:33:39: a4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137430 sbgp-ipAddrBlock: critical IPv6: 2402:40e0::/32 Signature Algorithm: sha256WithRSAEncryption b0:85:ae:8c:3a:d9:0c:d5:7f:0a:0e:86:df:9a:9d:a5:cd:8d: e0:8a:99:6a:92:65:c2:ea:40:6e:f2:6e:91:70:76:60:79:78: b0:24:70:46:4e:a0:39:ea:2d:9f:62:65:e4:04:20:7f:1f:08: 2e:52:e0:be:2c:b4:69:2f:63:62:16:e6:e6:8a:38:f3:02:85: ca:3a:cc:2b:75:90:99:a9:64:92:f2:f2:bf:ec:5c:bc:91:8d: c3:64:0a:ce:c2:16:e0:78:d5:dd:e9:0b:49:c8:6a:67:ad:be: 64:29:fb:b9:1b:6f:a8:c0:1a:6c:de:38:0b:ec:03:3b:8d:eb: c3:39:3f:32:5c:98:41:96:34:8c:e4:1d:60:52:ce:99:2e:45: a7:9a:a7:a2:fd:bf:3c:e1:d3:48:dc:cb:30:4d:c8:ed:30:d9: cf:f9:c9:2e:d5:58:f3:95:36:4b:98:9d:e1:50:29:bc:85:92: 64:6e:b0:87:61:5b:8f:b7:fa:9d:94:90:d1:05:14:a4:f4:d7: 64:06:5b:be:74:a1:aa:b6:6b:6c:95:84:8e:de:2e:46:fc:7e: f9:6a:45:ea:3f:37:cb:7d:14:66:84:2d:14:a6:7a:ba:bd:22: f0:89:dc:8e:fd:eb:1e:14:ce:2d:5d:6d:22:c3:04:9f:8a:2c: 68:05:c2:f4 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAoFyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyOTA3NTAxNloXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxOTg4RUIxMTAvBgNVBAUTKDQzRUFGMzBDMjMwQzZFRUU2RTM1NERD MDM3NzJBNkVFNTNENTA2ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuBya2ETHg76sSjLV2vIrMR2qH0yBIUXMeP5+U3fZ+9DbdJdZKUOk4Fp3TKk/Q N0ZOIRbNv6vs+Qw1DhZWndA7E8dC6p7BlgGf7uXZibxJBhI/4OtwSOhjXcPxBFMO XUe2yumjGSi0syHkGRJ3QQ47Y+Dd/Up5avC0fNVy+YjqJEID9RhlFOgzgseMWscE ymayZwpk7B82Odr6d0Dya+qHPunlTJcPCXUJ/AcGU+7W3JenkbgPR5tompkfSK9i l5003gm8JlDtIm1x1LND2jopemJVO4F34Hb0nPGfOVPY3qWT9mzdyGG1xBgjwJUJ IWWvHjS0wgwVoxkkQlAzOaRdAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUQ+rzDCMM bu5uNU3AN3Km7lPVBoUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk4OEVCLzAxOEUxRjZDRTQ4QjExRjA4M0QxMUU2QjQ0NkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5ODhFQi8wMThFMUY2Q0U0OEIxMUYwODNEMTFFNkI0NDZGNTZCQy9RLXJ6RENN TWJ1NXVOVTNBTjNLbTdsUFZCb1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhjWMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAJA4DANBgkq hkiG9w0BAQsFAAOCAQEAsIWujDrZDNV/Cg6G35qdpc2N4IqZapJlwupAbvJukXB2 YHl4sCRwRk6gOeotn2Jl5AQgfx8ILlLgviy0aS9jYhbm5oo48wKFyjrMK3WQmalk kvLyv+xcvJGNw2QKzsIW4HjV3ekLSchqZ62+ZCn7uRtvqMAabN44C+wDO43rwzk/ MlyYQZY0jOQdYFLOmS5Fp5qnov2/POHTSNzLME3I7TDZz/nJLtVY85U2S5id4VAp vIWSZG6wh2Fbj7f6nZSQ0QUUpPTXZAZbvnShqrZrbJWEjt4uRvx++WpF6j83y30U ZoQtFKZ6ur0i8Incjv3rHhTOLV1tIsMEn4osaAXC9A== -----END CERTIFICATE-----Generated at Sun Jan 25 01:11:54 2026 by rpki-client