This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer File: Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer (raw, json) Hash identifier: 3/JTvnyEvlNkOwacwX1Fpmmst7UucXgwAJvPUCk0Cj0= Subject key identifier: 67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C2F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 11:50:43 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154408 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162863 (0x27c2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 5 11:50:43 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91253B9, serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:56:c4:bb:51:11:b6:94:49:2d:7a:e7:9c:03: 5f:25:a9:41:0e:e3:09:5e:b5:e0:34:c3:3f:36:65: 17:82:1a:6a:0d:e9:56:c5:db:29:18:16:e5:07:a6: 91:60:89:d3:9c:95:c5:1f:15:93:22:a9:7f:ab:d6: bd:91:00:b2:e7:7e:99:10:73:b7:97:8c:e9:08:4b: db:b7:0c:5a:f9:a5:10:87:fb:d5:86:e4:da:66:49: c4:65:c9:4a:77:01:8a:d6:02:56:9f:51:37:6c:26: a2:a2:26:88:0c:13:c9:5b:d9:d9:49:7f:00:65:78: 0a:c1:21:31:48:c4:40:55:27:a0:3d:5d:bf:2a:9c: a1:c0:cd:db:fc:ea:37:79:13:b0:e4:36:c5:b1:0b: 5b:10:a1:72:bf:f7:6e:6e:21:16:d0:2d:76:88:31: 38:f9:9e:e9:d7:1e:fc:5d:f5:a0:e4:24:b3:f6:da: 14:eb:e1:6d:b8:31:ec:e9:97:04:5f:a9:fd:36:7b: 8b:1d:9c:9b:1b:b0:74:c4:50:de:d0:21:63:a7:77: d0:19:34:f9:81:8a:ca:8d:44:70:28:fb:6b:0c:5e: 07:11:72:92:dd:42:6f:69:eb:4f:d8:ed:0f:0a:dd: 72:11:fe:14:7d:41:f7:df:f1:f2:2c:ee:6e:7f:5b: e0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154408 Signature Algorithm: sha256WithRSAEncryption a9:ac:bc:90:f8:04:4d:72:3c:ba:38:45:a6:26:a8:7b:ae:40: 03:6a:df:b2:a2:62:08:74:51:52:8b:ba:a2:7f:e6:4e:10:3d: ee:0a:33:3c:3c:a6:af:b0:bc:26:18:23:bd:c2:02:d7:c1:44: 13:11:0d:db:cf:53:18:52:d6:36:5c:7a:01:e8:10:d8:71:93: 54:5b:f0:ec:52:77:26:62:98:e4:a8:e3:4c:c2:38:93:e1:50: 84:4e:79:32:fb:e1:32:4e:5c:ea:4c:8c:08:c9:41:71:a2:52: f5:1f:19:66:3a:a0:df:b1:55:e4:78:ac:22:6e:2c:23:b3:02: 6d:dc:ef:d1:7d:4c:62:76:7e:03:72:e2:6b:4e:e7:bd:bb:7f: d7:a2:58:35:5d:d7:a3:c0:1d:e0:eb:a9:c7:43:0a:28:3d:22: 91:97:32:b3:e2:23:04:d1:77:07:c7:ba:ab:c9:b4:32:36:6b: c1:8e:af:f8:4c:5e:67:76:bf:44:31:8c:9e:7a:c4:ee:f9:db: 63:42:5c:5d:cf:4c:6a:f0:64:d6:10:11:dd:e0:61:f0:f4:12: 1b:4b:2d:2e:56:32:2d:5c:ea:ec:e8:58:f0:17:b2:9b:21:28: fd:c0:67:3f:98:b4:32:9b:b9:96:96:25:f7:d4:85:23:93:c9: fd:eb:78:da -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIDAnwvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNTExNTA0M1oXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMjUzQjkxMTAvBgNVBAUTKDY3NEI4RDA2MDEzNEVDM0QxODY4RDA1 NDBGN0NEODRGMTRCOUM5NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKVsS7URG2lEkteuecA18lqUEO4wleteA0wz82ZReCGmoN6VbF2ykYFuUHppFg idOclcUfFZMiqX+r1r2RALLnfpkQc7eXjOkIS9u3DFr5pRCH+9WG5NpmScRlyUp3 AYrWAlafUTdsJqKiJogME8lb2dlJfwBleArBITFIxEBVJ6A9Xb8qnKHAzdv86jd5 E7DkNsWxC1sQoXK/925uIRbQLXaIMTj5nunXHvxd9aDkJLP22hTr4W24MezplwRf qf02e4sdnJsbsHTEUN7QIWOnd9AZNPmBisqNRHAo+2sMXgcRcpLdQm9p60/Y7Q8K 3XIR/hR9Qfff8fIs7m5/W+CpAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUZ0uNBgE0 7D0YaNBUD3zYTxS5yVkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI1M0I5LzlFQUZGQjgwRDFEMDExRjA5NDhERDM0MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyNTNCOS85RUFGRkI4MEQxRDAxMUYwOTQ4REQzNDFDNEY5QUUwMi9aMHVOQmdF MDdEMFlhTkJVRDN6WVR4UzV5VmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlsoMA0GCSqGSIb3DQEBCwUAA4IBAQCprLyQ+ARNcjy6OEWmJqh7rkAD at+yomIIdFFSi7qif+ZOED3uCjM8PKavsLwmGCO9wgLXwUQTEQ3bz1MYUtY2XHoB 6BDYcZNUW/DsUncmYpjkqONMwjiT4VCETnky++EyTlzqTIwIyUFxolL1HxlmOqDf sVXkeKwibiwjswJt3O/RfUxidn4DcuJrTue9u3/Xolg1XdejwB3g66nHQwooPSKR lzKz4iME0XcHx7qrybQyNmvBjq/4TF5ndr9EMYyeesTu+dtjQlxdz0xq8GTWEBHd 4GHw9BIbSy0uVjItXOrs6FjwF7KbISj9wGc/mLQym7mWliX31IUjk8n963ja -----END CERTIFICATE-----Generated at Sat Dec 6 14:16:17 2025 by rpki-client