This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer (raw, json) Hash identifier: kFqf7meKyBSGZ53HYB9LvAqpRhidSTxo9mILyn0ksEY= Subject key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A41 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft caRepository: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 21:09:14 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 114.142.136.0/21 IP: 121.91.104.0/21 IP: 124.197.56.0/21 IP: 2400:3160::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162369 (0x27a41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 21:09:14 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:8e:53:f6:34:b0:40:f1:7e:1f:e7:b5:4c: 5f:a7:93:36:59:46:fc:cd:dc:74:73:1f:1f:fe:eb: 7b:9d:45:6f:7f:ca:f7:96:09:ba:7b:c7:4d:07:45: 45:99:90:62:ae:62:78:d4:69:04:67:9f:d9:3d:4a: df:d3:54:18:93:7b:69:2b:95:8f:0e:60:3d:c1:30: 86:80:df:6d:b8:51:d7:78:3d:d0:e8:c3:97:40:b3: ce:7c:51:00:e7:f2:5b:f2:30:b4:46:3b:3e:8d:9c: 49:8f:74:a0:01:39:3e:fb:9c:06:f4:aa:5e:72:d4: cb:27:41:4b:27:d1:8c:c8:39:22:b3:1f:10:09:1d: 01:36:42:e4:42:ff:73:8c:ff:f6:2e:8e:9a:05:35: 41:b9:58:c9:b8:72:09:01:93:e8:e3:ab:0d:21:18: 0a:f8:a6:77:41:d5:4e:47:73:4a:e6:18:53:99:0e: 15:c1:f1:80:c6:8c:f6:b4:53:26:65:d2:8c:92:97: 0c:03:a1:e8:15:92:fb:87:bc:24:5c:a0:d7:eb:11: 15:05:33:da:15:d3:6b:f8:cc:2f:28:14:26:28:ea: 60:96:60:04:04:69:1e:79:87:24:f2:1b:19:8e:0c: 11:d1:f5:79:e6:ab:b3:80:03:7e:f4:56:7f:46:c7: f9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.142.136.0/21 121.91.104.0/21 124.197.56.0/21 IPv6: 2400:3160::/32 Signature Algorithm: sha256WithRSAEncryption 49:11:7e:3f:80:69:5b:75:aa:26:24:e0:bb:0a:56:3c:5d:e1: 37:e2:42:ef:ae:7a:e3:65:07:ca:51:c4:99:4b:a8:0d:9d:ce: 0f:2b:0e:a9:60:0d:11:e5:6e:ad:a3:bf:40:85:0f:0f:8b:82: 3d:8a:74:a6:7e:b8:3b:5f:4d:ad:23:28:14:17:5c:ba:0b:19: ef:81:72:3f:bd:7f:83:39:03:7b:cf:e4:08:2d:1d:10:f9:3c: 8d:87:eb:55:8e:1d:e6:67:f5:38:4f:f7:37:52:2c:5e:c1:e5: 21:8b:b1:5e:fc:72:66:29:a9:e0:29:04:f0:bd:3f:20:b7:b9: b4:8f:74:26:82:5e:fc:2b:04:d3:13:af:e7:58:82:4e:f6:97: d2:63:d5:94:28:8a:22:ec:fd:28:5b:e1:ac:c9:1c:16:b9:89: c3:33:b4:fe:22:9e:65:0a:ad:07:3e:e0:9f:3d:76:26:db:58: 45:70:ac:19:61:ba:ea:7a:98:7a:87:fd:99:e0:09:5b:80:77: cb:9b:e1:43:1f:30:73:48:af:10:b7:a2:89:1a:cc:8e:35:7e: 03:26:56:69:55:1b:14:fd:a2:d6:17:65:36:13:4f:85:38:97: 44:c9:ca:bd:3a:20:7b:e7:3f:8f:f6:98:af:fd:34:dd:ca:5d: 0f:75:68:2d -----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgIDAnpBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTIxMDkxNFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxOUEzRjAxMTAvBgNVBAUTKEZFMDVFRkI3MDEyNUQ1MjA0NzZGNjNC QzYwOUY1NTREQzQ5QUM1OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8y45T9jSwQPF+H+e1TF+nkzZZRvzN3HRzHx/+63udRW9/yveWCbp7x00HRUWZ kGKuYnjUaQRnn9k9St/TVBiTe2krlY8OYD3BMIaA3224Udd4PdDow5dAs858UQDn 8lvyMLRGOz6NnEmPdKABOT77nAb0ql5y1MsnQUsn0YzIOSKzHxAJHQE2QuRC/3OM //YujpoFNUG5WMm4cgkBk+jjqw0hGAr4pndB1U5Hc0rmGFOZDhXB8YDGjPa0UyZl 0oySlwwDoegVkvuHvCRcoNfrERUFM9oV02v4zC8oFCYo6mCWYAQEaR55hyTyGxmO DBHR9Xnmq7OAA370Vn9Gx/k/AgMBAAGjggMOMIIDCjAdBgNVHQ4EFgQU/gXvtwEl 1SBHb2O8YJ9VTcSaxZwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlBM0YwL0YzQzJBOTIyMkI4QTExRUVBREQyMjEwQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5QTNGMC9GM0MyQTkyMjJCOEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdF bDFTQkhiMk84WUo5VlRjU2F4WncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8EKzAp MBgEAgABMBIDBANyjogDBAN5W2gDBAN8xTgwDQQCAAIwBwMFACQAMWAwDQYJKoZI hvcNAQELBQADggEBAEkRfj+AaVt1qiYk4LsKVjxd4TfiQu+ueuNlB8pRxJlLqA2d zg8rDqlgDRHlbq2jv0CFDw+Lgj2KdKZ+uDtfTa0jKBQXXLoLGe+Bcj+9f4M5A3vP 5AgtHRD5PI2H61WOHeZn9ThP9zdSLF7B5SGLsV78cmYpqeApBPC9PyC3ubSPdCaC XvwrBNMTr+dYgk72l9Jj1ZQoiiLs/Shb4azJHBa5icMztP4inmUKrQc+4J89dibb WEVwrBlhuup6mHqH/ZngCVuAd8ub4UMfMHNIrxC3ookazI41fgMmVmlVGxT9otYX ZTYTT4U4l0TJyr06IHvnP4/2mK/9NN3KXQ91aC0= -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:15 2025 by rpki-client