This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer File: Xb7wLCg84I1tzonzkSoMMKcBkMg.cer (raw, json) Hash identifier: 8vyDy38oZI8UgyZenkB0T45uHaikMII57TQW3oZndRc= Subject key identifier: 5D:BE:F0:2C:28:3C:E0:8D:6D:CE:89:F3:91:2A:0C:30:A7:01:90:C8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02744D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 10 Nov 2025 10:43:00 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 133439 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160845 (0x2744d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 10 10:43:00 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E3E8B, serialNumber=5DBEF02C283CE08D6DCE89F3912A0C30A70190C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:cb:6a:93:cb:30:b6:6c:bb:4e:51:56:e8: 30:2d:7b:7d:5c:00:e7:97:7a:bb:08:1b:c3:6d:aa: 1e:fd:5b:6d:97:e3:9c:aa:04:72:ed:2f:03:61:ac: 29:9a:30:0b:1d:ba:ba:39:70:fd:33:6b:95:1d:5d: f5:c8:db:49:43:d2:b0:a0:f0:57:4b:a5:11:35:92: 8d:be:db:3d:e6:1a:9c:ba:1a:a3:6f:e7:b9:13:ca: ff:9a:c4:59:a9:3d:da:d6:8f:d1:14:38:58:b2:02: f6:d1:6d:cd:f8:30:a7:b5:e8:0e:7c:1a:0f:49:c1: d1:39:95:61:7b:b5:6a:1c:28:31:c8:5b:34:03:78: 39:95:fe:7e:6b:d2:eb:c0:2e:3b:fc:95:4e:cc:8d: 20:34:75:76:a2:88:b3:40:dc:1e:19:a2:6f:bc:1a: 88:ea:51:80:3d:da:57:96:5b:5b:cf:d2:12:b5:44: 7d:c6:90:80:97:f7:f9:5f:b3:9a:52:91:ed:a4:59: 07:23:32:4e:b0:71:c4:95:7c:df:ca:67:aa:2f:23: 53:dd:a0:1d:10:51:64:ea:fc:67:7a:c0:11:23:17: 1b:1b:ad:62:61:5e:e6:52:ec:32:ff:31:64:d2:fe: 6a:80:5d:77:ce:0f:ba:8b:15:3b:e6:cd:82:f0:ce: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BE:F0:2C:28:3C:E0:8D:6D:CE:89:F3:91:2A:0C:30:A7:01:90:C8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133439 Signature Algorithm: sha256WithRSAEncryption 8e:66:95:73:71:af:21:2a:a3:e8:36:e4:4a:a3:16:db:db:ba: a6:76:cb:40:01:00:d3:0d:d4:ea:e1:27:65:ae:af:be:51:c5: 26:5c:ea:03:a2:e2:b1:5d:89:df:9d:b9:6f:ac:55:9f:d9:9a: ac:ef:da:0e:90:28:ff:9c:f1:a4:28:93:c6:b5:6f:74:f1:ff: 7d:de:15:75:83:bc:31:94:da:11:9f:98:84:3c:35:ac:e3:7d: b2:e4:49:a3:ae:59:ec:f5:d1:ba:63:03:c7:05:e0:ce:94:1c: 07:e1:ff:7f:a4:c6:cb:f2:44:fb:c2:1d:d0:7c:da:19:22:95: ea:45:ac:22:04:0a:69:f6:ec:2f:f8:8a:ec:f4:5c:f3:06:f7: 2a:3d:d3:7d:2c:f1:a4:98:2e:d7:3a:1a:20:49:76:11:77:a7: 72:20:35:d8:10:f6:dd:13:9b:44:45:50:19:21:b5:37:6e:3a: de:94:b9:e0:5b:28:be:a8:99:42:05:fd:7b:46:33:cf:c5:4a: ab:e0:50:b8:de:69:26:ea:7b:33:b0:46:8b:87:d5:ea:02:43: 8b:c0:a0:e9:c7:f8:84:e4:e1:3e:fd:02:57:29:d8:f5:27:bf: 01:f3:23:0e:e2:8a:fe:07:13:7f:19:ed:fd:25:80:a5:cf:21: 80:c2:70:70 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIDAnRNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMDEwNDMwMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTNFOEIxMTAvBgNVBAUTKDVEQkVGMDJDMjgzQ0UwOEQ2RENFODlG MzkxMkEwQzMwQTcwMTkwQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS18tqk8swtmy7TlFW6DAte31cAOeXersIG8Ntqh79W22X45yqBHLtLwNhrCma MAsduro5cP0za5UdXfXI20lD0rCg8FdLpRE1ko2+2z3mGpy6GqNv57kTyv+axFmp PdrWj9EUOFiyAvbRbc34MKe16A58Gg9JwdE5lWF7tWocKDHIWzQDeDmV/n5r0uvA Ljv8lU7MjSA0dXaiiLNA3B4Zom+8GojqUYA92leWW1vP0hK1RH3GkICX9/lfs5pS ke2kWQcjMk6wccSVfN/KZ6ovI1PdoB0QUWTq/Gd6wBEjFxsbrWJhXuZS7DL/MWTS /mqAXXfOD7qLFTvmzYLwznMnAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUXb7wLCg8 4I1tzonzkSoMMKcBkMgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUzRThCLzA0REUyQjkyQkUyMjExRjBCMzhEQjUxOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFM0U4Qi8wNERFMkI5MkJFMjIxMUYwQjM4REI1MTlDNEY5QUUwMi9YYjd3TENn ODRJMXR6b256a1NvTU1LY0JrTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAgk/MA0GCSqGSIb3DQEBCwUAA4IBAQCOZpVzca8hKqPoNuRKoxbb27qm dstAAQDTDdTq4Sdlrq++UcUmXOoDouKxXYnfnblvrFWf2Zqs79oOkCj/nPGkKJPG tW908f993hV1g7wxlNoRn5iEPDWs432y5Emjrlns9dG6YwPHBeDOlBwH4f9/pMbL 8kT7wh3QfNoZIpXqRawiBApp9uwv+Irs9FzzBvcqPdN9LPGkmC7XOhogSXYRd6dy IDXYEPbdE5tERVAZIbU3bjrelLngWyi+qJlCBf17RjPPxUqr4FC43mkm6nszsEaL h9XqAkOLwKDpx/iE5OE+/QJXKdj1J78B8yMO4or+BxN/Ge39JYClzyGAwnBw -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:30 2025 by rpki-client