This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer (raw, json) Hash identifier: ydzr5QEKf37lqYZ/WUefIpwSdnw00/moWeBs5XwYdN8= Subject key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027432 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 09 Nov 2025 15:22:32 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 38266 AS: 45271 AS: 55410 AS: 55644 AS: 133666 AS: 134071 AS: 134927 IP: 1.38.0.0/15 IP: 1.187.0.0/16 IP: 27.97.0.0/16 IP: 36.255.200.0/22 IP: 42.104.0.0/13 IP: 43.245.88.0/22 IP: 49.14.0.0/15 IP: 103.9.72.0/22 IP: 103.29.44.0/22 IP: 106.66.0.0/15 IP: 106.76.0.0/14 IP: 112.79.0.0/16 IP: 112.110.0.0/16 IP: 114.31.128.0/18 IP: 115.69.128.0/19 IP: 118.185.0.0/16 IP: 122.15.0.0/16 IP: 123.63.0.0/16 IP: 124.247.192.0/18 IP: 182.19.0.0/17 IP: 203.88.0.0/19 IP: 223.196.0.0 -- 223.196.159.255 IP: 223.196.200.0 -- 223.196.255.255 IP: 2400:5200::/32 IP: 2400:c700::/32 IP: 2402:3a80::/32 IP: 2402:8100::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160818 (0x27432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 9 15:22:32 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:98:48:f6:8e:f6:ce:83:e9:18:da:d2:42: 24:95:6e:47:6d:dd:fe:a9:87:a2:be:1e:50:45:8c: 22:a1:d3:07:ee:7f:66:9c:f6:01:94:d8:ca:04:5c: 66:3b:43:68:89:69:0b:bf:5f:89:87:82:c1:9d:a8: 29:a3:87:a5:65:52:d1:ba:65:43:06:f3:58:cd:e0: d1:b3:42:f7:47:47:ba:87:e4:88:b2:00:86:f4:c9: 77:72:a7:48:a9:38:13:14:38:f2:93:51:c5:44:3c: 38:5c:eb:7a:bb:84:1a:38:fd:35:d2:98:b2:6e:31: 08:df:3f:df:04:5a:7e:f5:1a:ac:a2:f0:9b:3b:d7: ae:15:79:d1:8c:0f:38:89:69:c4:6f:03:10:09:d8: 20:25:49:08:24:d9:99:dc:28:50:14:59:71:5c:8c: 8a:29:56:c7:50:bd:a2:fc:38:c5:c8:c4:8c:9b:58: 40:1e:54:9a:66:c3:e8:9a:7e:80:16:e4:70:06:83: 3d:bd:35:fb:ec:ae:b2:6b:2d:cd:f7:94:a1:87:87: bb:f1:af:51:b5:b3:89:0b:b9:af:6b:19:c4:aa:87: e9:c7:d3:0d:20:51:4b:ad:dd:e5:85:88:a7:d5:44: 46:4c:f9:bf:e9:93:c6:17:e7:42:db:a9:22:99:53: b7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38266 45271 55410 55644 133666 134071 134927 sbgp-ipAddrBlock: critical IPv4: 1.38.0.0/15 1.187.0.0/16 27.97.0.0/16 36.255.200.0/22 42.104.0.0/13 43.245.88.0/22 49.14.0.0/15 103.9.72.0/22 103.29.44.0/22 106.66.0.0/15 106.76.0.0/14 112.79.0.0/16 112.110.0.0/16 114.31.128.0/18 115.69.128.0/19 118.185.0.0/16 122.15.0.0/16 123.63.0.0/16 124.247.192.0/18 182.19.0.0/17 203.88.0.0/19 223.196.0.0-223.196.159.255 223.196.200.0-223.196.255.255 IPv6: 2400:5200::/32 2400:c700::/32 2402:3a80::/32 2402:8100::/32 Signature Algorithm: sha256WithRSAEncryption b8:8c:f4:06:74:86:3b:db:c5:28:02:fb:56:de:87:80:0f:b0: 8b:04:50:37:ce:41:9b:e6:c8:55:89:ed:bc:da:fe:d6:b6:3e: d5:2d:e9:3a:2e:02:78:76:48:14:5b:e1:ad:00:72:b7:28:8f: 3b:f6:71:a8:17:0a:e2:c6:53:33:15:6c:08:ed:8e:20:41:56: c9:56:7c:db:ea:d3:c9:27:93:35:89:e4:0e:b7:cc:90:de:a0: fa:ba:29:9a:b1:01:1c:94:14:d6:05:3c:2b:42:5d:35:bd:22: 8f:48:0f:f5:ec:74:af:18:b5:03:78:71:d0:f6:ec:2f:76:d7: ae:99:42:32:b6:04:f5:2a:c0:43:49:77:f3:6e:4e:ad:04:ba: 9d:64:26:50:b9:1b:ff:ac:00:c0:dd:94:5f:77:5f:02:07:df: 5b:f5:43:69:dd:7d:86:f2:36:71:2c:22:49:8b:eb:ac:9d:e1: 0c:4c:d8:17:07:5d:37:d1:fb:dc:f4:f0:64:0d:83:ef:a9:87: 1f:e5:bb:fe:34:df:a6:c0:df:a8:7a:a6:53:65:65:69:ef:14: dd:9c:27:be:1d:5c:46:f8:63:e9:dc:23:34:80:09:16:69:98: f7:b4:3a:fd:21:ea:80:bd:94:de:d0:b5:22:c6:ef:17:a4:16: ae:12:b0:61 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIDAnQyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwOTE1MjIzMloXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQ0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVG RTQ5MTkwOUM3RDc0MTQ3RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFxJhI9o72zoPpGNrSQiSVbkdt3f6ph6K+HlBFjCKh0wfuf2ac9gGU2MoEXGY7 Q2iJaQu/X4mHgsGdqCmjh6VlUtG6ZUMG81jN4NGzQvdHR7qH5IiyAIb0yXdyp0ip OBMUOPKTUcVEPDhc63q7hBo4/TXSmLJuMQjfP98EWn71Gqyi8Js7164VedGMDziJ acRvAxAJ2CAlSQgk2ZncKFAUWXFcjIopVsdQvaL8OMXIxIybWEAeVJpmw+iafoAW 5HAGgz29NfvsrrJrLc33lKGHh7vxr1G1s4kLua9rGcSqh+nH0w0gUUut3eWFiKfV REZM+b/pk8YX50LbqSKZU7d1AgMBAAGjggPcMIID2DAdBgNVHQ4EFgQUVrmD5GvL oRX/ImX+SRkJx9dBR/MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNEMzlEL0RFN0QyRjk0NEU3NjExRUNBNTcyMEI3OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDRDM5RC9ERTdEMkY5NDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2 TG9SWF9JbVgtU1JrSng5ZEJSX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOAYIKwYBBQUHAQgBAf8EKTAn oCUwIwIDAJV6AgMAsNcCAwDYcgIDANlcAgMCCiICAwILtwIDAg8PMIHNBggrBgEF BQcBBwEB/wSBvTCBujCBkwQCAAEwgYwDAwEBJgMDAAG7AwMAG2EDBAIk/8gDAwMq aAMEAiv1WAMDATEOAwQCZwlIAwQCZx0sAwMBakIDAwJqTAMDAHBPAwMAcG4DBAZy H4ADBAVzRYADAwB2uQMDAHoPAwMAez8DBAZ898ADBAe2EwADBAXLWAAwCwMDAt/E AwQF38SAMAsDBAPfxMgDAwDfxDAiBAIAAjAcAwUAJABSAAMFACQAxwADBQAkAjqA AwUAJAKBADANBgkqhkiG9w0BAQsFAAOCAQEAuIz0BnSGO9vFKAL7Vt6HgA+wiwRQ N85Bm+bIVYntvNr+1rY+1S3pOi4CeHZIFFvhrQBytyiPO/ZxqBcK4sZTMxVsCO2O IEFWyVZ82+rTySeTNYnkDrfMkN6g+ropmrEBHJQU1gU8K0JdNb0ij0gP9ex0rxi1 A3hx0PbsL3bXrplCMrYE9SrAQ0l3825OrQS6nWQmULkb/6wAwN2UX3dfAgffW/VD ad19hvI2cSwiSYvrrJ3hDEzYFwddN9H73PTwZA2D76mHH+W7/jTfpsDfqHqmU2Vl ae8U3Zwnvh1cRvhj6dwjNIAJFmmY97Q6/SHqgL2U3tC1IsbvF6QWrhKwYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:18 2025 by rpki-client