This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer File: Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer (raw, json) Hash identifier: 1FNoOc5CEunYMrNmiWaMG/IvGxU6om+Hn+KXUx/+IDQ= Subject key identifier: 5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027609 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft caRepository: rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 17:20:00 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 153384 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161289 (0x27609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 18 17:20:00 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A918DAC5, serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:52:f4:48:c0:10:00:e1:ec:26:1a:fb:93:1c: 22:68:25:a8:03:c4:b4:68:f0:45:c7:e5:58:75:aa: 17:59:d5:e9:0e:19:d9:ae:83:a3:3a:4b:83:52:aa: 0e:48:b0:28:d0:51:ca:86:88:9f:8f:0a:7d:5c:fb: 19:25:e6:85:42:ea:b4:62:45:32:b9:b0:d2:55:e8: 46:33:7f:69:9e:b4:72:c9:19:8b:3a:f3:47:45:c0: 21:53:38:e8:bb:09:57:2d:2f:54:6e:67:98:af:77: 6f:31:a7:6f:37:79:04:36:88:87:61:e9:37:98:7a: fd:60:f5:99:ff:e3:d2:51:d2:e3:5f:cf:e3:40:5f: 47:c3:a4:80:7a:a0:5c:8f:08:11:95:e7:36:96:75: c6:42:3c:65:eb:dd:7c:49:d8:2e:ef:f1:32:53:e0: 85:30:97:44:cf:58:26:65:bf:e7:79:91:fa:14:f7: 54:ca:5e:7e:a2:9c:7b:5e:00:4f:16:ea:ba:0b:df: 05:82:b7:da:8a:70:77:87:c8:38:02:bb:d6:e4:b8: 69:42:5b:b8:42:77:d2:3b:4d:8a:ba:ac:c7:42:d4: da:78:db:e1:23:16:74:cd:1e:b3:c7:f6:f4:92:63: d3:3e:2f:f7:9c:14:ee:32:7c:b3:41:68:8c:10:52: 73:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153384 Signature Algorithm: sha256WithRSAEncryption 84:71:03:7c:ac:19:8a:b4:b3:aa:7e:f9:3b:e9:bf:d9:51:5b: c1:ff:63:6e:59:f5:56:82:f5:7b:83:fb:06:af:fe:58:b7:a5: ad:12:10:38:93:8a:4b:67:6a:60:fa:1e:44:52:1e:45:25:b7: 6c:11:ee:bf:b8:d0:2c:3c:b8:86:4c:13:e9:20:97:43:d9:ce: de:04:ef:4d:40:78:b2:0e:14:29:ec:2b:b0:36:62:ae:13:94: 6c:1b:6e:7a:6c:38:b0:34:67:9b:91:74:25:bd:17:d8:8f:49: 93:ec:17:d7:91:f3:de:c6:d7:d8:51:ba:dc:55:7e:9d:0b:fa: 9d:22:81:6f:06:7c:66:c2:bd:64:e7:b2:0b:23:bb:bf:f5:41: d2:20:eb:b4:ec:ce:32:8a:c8:8a:eb:41:af:85:ad:05:35:b7: 75:04:4d:ea:7d:3d:92:e1:26:09:7e:1f:e5:76:21:89:89:4f: d1:e7:23:09:d0:17:a5:ae:a2:03:0d:38:50:1f:8e:5d:20:78: a1:5a:17:fa:18:bc:8c:e8:b1:95:f9:b8:63:94:01:b3:14:ab: 28:bb:4c:88:1f:05:2a:3b:e0:61:83:c1:ad:4e:45:e1:ef:32: f1:05:3a:d5:70:5f:36:c0:5f:4b:ab:de:ce:e0:b9:f4:bb:3d: 3c:87:0c:95 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIDAnYJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExODE3MjAwMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOERBQzUxMTAvBgNVBAUTKDVBRUQwNUE2NDI3NjQxMDgxQUZDRTg0 RjY5NzI1RUM4NTZBMEE0RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2UvRIwBAA4ewmGvuTHCJoJagDxLRo8EXH5Vh1qhdZ1ekOGdmug6M6S4NSqg5I sCjQUcqGiJ+PCn1c+xkl5oVC6rRiRTK5sNJV6EYzf2metHLJGYs680dFwCFTOOi7 CVctL1RuZ5ivd28xp283eQQ2iIdh6TeYev1g9Zn/49JR0uNfz+NAX0fDpIB6oFyP CBGV5zaWdcZCPGXr3XxJ2C7v8TJT4IUwl0TPWCZlv+d5kfoU91TKXn6inHteAE8W 6roL3wWCt9qKcHeHyDgCu9bkuGlCW7hCd9I7TYq6rMdC1Np42+EjFnTNHrPH9vSS Y9M+L/ecFO4yfLNBaIwQUnMFAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUWu0FpkJ2 QQga/OhPaXJeyFagpOswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThEQUM1L0NCOUFENUY2QUJEQTExRUZBMUMxNEU3NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4REFDNS9DQjlBRDVGNkFCREExMUVGQTFDMTRFNzZDNEY5QUUwMi9XdTBGcGtK MlFRZ2FfT2hQYVhKZXlGYWdwT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlcoMA0GCSqGSIb3DQEBCwUAA4IBAQCEcQN8rBmKtLOqfvk76b/ZUVvB /2NuWfVWgvV7g/sGr/5Yt6WtEhA4k4pLZ2pg+h5EUh5FJbdsEe6/uNAsPLiGTBPp IJdD2c7eBO9NQHiyDhQp7CuwNmKuE5RsG256bDiwNGebkXQlvRfYj0mT7BfXkfPe xtfYUbrcVX6dC/qdIoFvBnxmwr1k57ILI7u/9UHSIOu07M4yisiK60Gvha0FNbd1 BE3qfT2S4SYJfh/ldiGJiU/R5yMJ0BelrqIDDThQH45dIHihWhf6GLyM6LGV+bhj lAGzFKsou0yIHwUqO+Bhg8GtTkXh7zLxBTrVcF82wF9Lq97O4Ln0uz08hwyV -----END CERTIFICATE-----Generated at Sat Dec 6 09:36:15 2025 by rpki-client