This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer File: aBR3td5WajjZsBVtqHq6-p-vhb0.cer (raw, json) Hash identifier: c20VevmLvuq4nJb78keKEX1799HycmH29PnhrPlXf84= Subject key identifier: 68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B87 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 22:30:18 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 136574 IP: 2402:e60::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162695 (0x27b87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 22:30:18 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91972DF, serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:59:de:0e:a6:0e:5b:2c:6c:31:2e:f8:81: 45:7b:f3:eb:95:bf:31:ac:86:16:e9:b2:22:eb:7a: 85:2e:93:53:15:59:b7:bd:2a:a8:df:04:a1:19:20: d8:30:48:8a:5b:ce:96:84:9f:33:a4:43:cf:2e:d7: 02:d2:b4:e9:9a:44:71:34:a0:5a:3f:a5:54:2a:3c: 15:79:bc:89:f7:b9:e0:8b:2c:d0:ed:c9:ef:70:48: 48:27:9c:46:08:8c:34:ee:09:ce:57:37:15:28:d0: f7:6c:a0:f2:31:c0:e3:12:f0:7d:8b:d6:e5:e2:6f: 6f:4b:75:eb:aa:cf:bf:25:bd:b8:ac:f8:74:1d:22: 66:d5:55:95:e6:1c:f3:97:07:74:35:27:89:68:3a: f1:87:4a:f8:51:c0:c0:e5:60:b2:99:31:68:9c:30: 5f:f4:d2:02:5f:fa:1d:2f:37:17:73:91:af:0c:88: 6a:bd:b6:24:00:d6:ed:f2:3b:0d:6d:7d:e7:8b:55: e4:67:14:24:b2:3f:cc:94:e8:a2:e6:5f:8d:9e:c1: 35:80:fb:03:8f:b9:10:65:4b:25:be:8d:a6:0d:e4: 9d:27:b7:87:5a:30:79:31:4f:39:b4:a6:6b:65:50: 11:14:79:5d:f0:dc:91:bf:e2:5e:c5:70:e7:de:0e: f8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 136574 sbgp-ipAddrBlock: critical IPv6: 2402:e60::/32 Signature Algorithm: sha256WithRSAEncryption 57:a4:0f:20:c0:33:4a:02:56:17:f0:22:cb:03:e7:80:6b:c5: 1d:ad:36:08:1a:aa:5c:e4:ab:b2:74:49:4f:0e:69:85:0e:93: 02:71:7a:65:8e:04:a4:0c:36:7a:88:e1:01:8a:c8:10:67:11: 01:ed:c6:74:0f:a8:52:0e:c4:1d:bc:f4:ab:7c:e2:7d:6a:e8: c3:d8:7c:09:8e:d7:29:07:cd:a4:96:0f:2a:9e:b7:f3:da:cf: 88:6d:7f:a2:a9:4e:e5:25:58:ae:46:8c:15:e1:ea:45:18:73: 3e:b8:4a:9a:00:73:47:37:32:fe:e1:d7:bd:c1:e3:77:96:a9: 05:50:21:de:30:b1:97:69:44:77:41:34:c8:eb:80:7f:09:66: 21:31:5d:a9:94:fb:15:43:3f:5d:6f:d6:ce:a9:66:9a:b2:35: 66:62:11:74:ac:f3:17:e0:42:dd:07:f6:e7:5f:f8:e6:36:04: 63:fe:c0:0a:64:93:cd:28:0c:b3:b5:f7:8d:5c:e3:17:bb:11: 05:1b:43:83:03:50:5d:ae:c1:e7:f2:05:f7:6d:92:41:ce:bb: 5b:00:10:71:28:7c:3e:99:d4:b8:4e:f3:ae:7d:80:2c:b8:a9: c0:6f:23:2e:28:22:2d:6e:8d:20:27:e5:e8:7a:76:ad:06:a0: 49:70:e5:50 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAnuHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzIyMzAxOFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTcyREYxMTAvBgNVBAUTKDY4MTQ3N0I1REU1NjZBMzhEOUIwMTU2 REE4N0FCQUZBOUZBRjg1QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5yFneDqYOWyxsMS74gUV78+uVvzGshhbpsiLreoUuk1MVWbe9KqjfBKEZINgw SIpbzpaEnzOkQ88u1wLStOmaRHE0oFo/pVQqPBV5vIn3ueCLLNDtye9wSEgnnEYI jDTuCc5XNxUo0PdsoPIxwOMS8H2L1uXib29Ldeuqz78lvbis+HQdImbVVZXmHPOX B3Q1J4loOvGHSvhRwMDlYLKZMWicMF/00gJf+h0vNxdzka8MiGq9tiQA1u3yOw1t feeLVeRnFCSyP8yU6KLmX42ewTWA+wOPuRBlSyW+jaYN5J0nt4daMHkxTzm0pmtl UBEUeV3w3JG/4l7FcOfeDvjJAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUaBR3td5W ajjZsBVtqHq6+p+vhb0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk3MkRGL0NDNzhCNzYyN0MwQjExRUY4OTRBMjkxOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5NzJERi9DQzc4Qjc2MjdDMEIxMUVGODk0QTI5MTlDNEY5QUUwMi9hQlIzdGQ1 V2FqalpzQlZ0cUhxNi1wLXZoYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhV+MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAIOYDANBgkq hkiG9w0BAQsFAAOCAQEAV6QPIMAzSgJWF/AiywPngGvFHa02CBqqXOSrsnRJTw5p hQ6TAnF6ZY4EpAw2eojhAYrIEGcRAe3GdA+oUg7EHbz0q3zifWrow9h8CY7XKQfN pJYPKp6389rPiG1/oqlO5SVYrkaMFeHqRRhzPrhKmgBzRzcy/uHXvcHjd5apBVAh 3jCxl2lEd0E0yOuAfwlmITFdqZT7FUM/XW/WzqlmmrI1ZmIRdKzzF+BC3Qf251/4 5jYEY/7ACmSTzSgMs7X3jVzjF7sRBRtDgwNQXa7B5/IF922SQc67WwAQcSh8PpnU uE7zrn2ALLipwG8jLigiLW6NICfl6Hp2rQagSXDlUA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:00 2025 by rpki-client