This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer File: aa41zc5jfrZF61Bl7eEtWOdZkjY.cer (raw, json) Hash identifier: kDBlenPXZCvN50BZn1LjvwdNTNEPct//JA0Gyccppsk= Subject key identifier: 69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028110 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft caRepository: rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 26 Dec 2025 19:33:29 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154456 IP: 2001:df6:8040::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164112 (0x28110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 26 19:33:29 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A911BD6E, serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:84:19:af:0e:7d:45:35:cb:98:e3:4f:59: 7b:65:6b:d1:a8:49:56:b5:10:11:bc:b8:6f:af:b2: 5f:e7:ea:2e:e9:07:6a:0f:6b:a0:54:77:66:83:0e: 19:f2:d0:dc:b7:24:a7:d1:bd:c4:ba:11:ad:85:16: 54:bd:70:24:1f:13:61:8a:b2:6d:c4:30:4f:4b:8d: 5c:0a:ef:86:21:55:ec:c2:4f:f7:4a:01:4a:d7:fa: 1a:28:a9:2e:d4:d2:35:8e:4e:73:7b:36:c5:85:e0: 86:1c:46:25:03:b6:f5:fb:75:a6:34:1a:72:7b:03: 92:1d:ec:cc:ff:28:a5:14:48:f9:a7:12:0d:b4:e4: 15:50:d6:8d:17:89:df:62:9a:cd:a0:81:c5:d1:9c: c5:6e:e1:92:8a:53:a1:bf:28:57:39:74:e9:5e:ed: db:66:50:1f:e4:09:c4:64:b3:2e:2e:7b:3d:02:d2: 35:04:2a:ef:81:f9:d9:10:30:e5:e1:df:5b:16:39: 87:1f:6b:05:b7:50:14:c6:4d:48:cc:75:21:c8:cb: ef:87:84:e9:d4:2e:7e:6c:dc:10:31:5c:c9:71:ac: b1:b9:2f:39:df:56:1d:b0:2a:b6:0a:1f:44:19:08: df:d2:87:ad:0e:79:69:70:eb:3c:bb:80:f4:a4:56: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154456 sbgp-ipAddrBlock: critical IPv6: 2001:df6:8040::/48 Signature Algorithm: sha256WithRSAEncryption 29:bd:32:34:92:1f:35:d8:e8:e7:c0:5a:22:d8:f9:3b:e1:db: 9d:69:be:60:4d:96:87:9f:c1:e7:2d:4f:27:e7:a2:43:5f:24: 5a:0e:9c:b1:ab:1a:e9:52:a8:72:cc:a4:bd:f8:71:51:c4:29: 2e:ff:d5:97:a0:b2:6a:f5:41:88:02:49:ad:08:13:15:c3:a5: b5:98:01:0e:07:ef:53:ad:ce:4e:11:9b:bc:26:3b:a7:ee:9f: 16:c3:2c:d4:55:55:18:84:d1:0e:3c:6c:a4:e6:98:1d:05:fb: 49:ea:aa:3d:ed:bb:ee:db:70:0c:0a:d1:55:51:77:60:11:af: 2c:b9:42:70:3e:38:9e:c6:26:40:49:22:86:6b:35:cb:84:19: 19:66:cc:d1:73:67:d9:26:e2:bb:39:49:c4:3d:0c:a0:7d:a7: 40:39:b9:4b:41:14:ac:62:a9:24:43:38:1b:b6:1a:5a:5d:5f: 9f:06:e3:45:04:ac:5a:26:b6:12:3d:bd:ee:83:80:06:16:cd: 13:fb:c8:5a:cd:52:88:62:75:13:1f:1b:7a:5e:c4:4c:9c:ea: 21:72:00:71:4f:29:4a:60:00:94:00:8a:ea:5c:6d:4d:4e:05: 27:1f:cf:ef:a4:fc:1b:18:78:8e:b6:a5:37:8e:34:08:9d:dd: 6e:15:43:cc -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAoEQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyNjE5MzMyOVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMUJENkUxMTAvBgNVBAUTKDY5QUUzNUNEQ0U2MzdFQjY0NUVCNTA2 NUVERTEyRDU4RTc1OTkyMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn54QZrw59RTXLmONPWXtla9GoSVa1EBG8uG+vsl/n6i7pB2oPa6BUd2aDDhny 0Ny3JKfRvcS6Ea2FFlS9cCQfE2GKsm3EME9LjVwK74YhVezCT/dKAUrX+hooqS7U 0jWOTnN7NsWF4IYcRiUDtvX7daY0GnJ7A5Id7Mz/KKUUSPmnEg205BVQ1o0Xid9i ms2ggcXRnMVu4ZKKU6G/KFc5dOle7dtmUB/kCcRksy4uez0C0jUEKu+B+dkQMOXh 31sWOYcfawW3UBTGTUjMdSHIy++HhOnULn5s3BAxXMlxrLG5LznfVh2wKrYKH0QZ CN/Sh60OeWlw6zy7gPSkVmBfAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUaa41zc5j frZF61Bl7eEtWOdZkjYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFCRDZFL0JGNEYyNDdBRTI5MTExRjA5NkUyN0QxMTQ1NkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExQkQ2RS9CRjRGMjQ3QUUyOTExMUYwOTZFMjdEMTE0NTZGNTZCQy9hYTQxemM1 amZyWkY2MUJsN2VFdFdPZFpralkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAltYMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9oBAMA0G CSqGSIb3DQEBCwUAA4IBAQApvTI0kh812OjnwFoi2Pk74dudab5gTZaHn8HnLU8n 56JDXyRaDpyxqxrpUqhyzKS9+HFRxCku/9WXoLJq9UGIAkmtCBMVw6W1mAEOB+9T rc5OEZu8Jjun7p8WwyzUVVUYhNEOPGyk5pgdBftJ6qo97bvu23AMCtFVUXdgEa8s uUJwPjiexiZASSKGazXLhBkZZszRc2fZJuK7OUnEPQygfadAOblLQRSsYqkkQzgb thpaXV+fBuNFBKxaJrYSPb3ug4AGFs0T+8hazVKIYnUTHxt6XsRMnOohcgBxTylK YACUAIrqXG1NTgUnH8/vpPwbGHiOtqU3jjQInd1uFUPM -----END CERTIFICATE-----Generated at Sun Jan 25 01:12:07 2026 by rpki-client