This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer File: adr8x94-0cCfTDZqTKThf_sRqEk.cer (raw, json) Hash identifier: Bshsb+LFsgYE7Cifd8YZCWeQcx4Bh4KNQ7GtJJsrBhY= Subject key identifier: 69:DA:FC:C7:DE:3E:D1:C0:9F:4C:36:6A:4C:A4:E1:7F:FB:11:A8:49 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0277F9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 18:12:46 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 153338 IP: 2001:df4:4dc0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161785 (0x277f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 18:12:46 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91879AC, serialNumber=69DAFCC7DE3ED1C09F4C366A4CA4E17FFB11A849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:16:f6:e0:7c:07:d0:0c:4a:46:8e:42:c7:08: a5:f2:5c:b2:c6:60:bd:b5:c0:96:47:71:e4:e9:6d: 47:2e:cf:a6:4d:cb:4b:cc:45:eb:4f:95:04:d5:fe: 26:a9:1e:4a:6c:5b:c7:b1:27:e6:46:80:4f:5f:ce: a4:b1:25:0d:e6:51:65:7e:87:7b:15:e3:d1:c3:33: 27:d9:3f:df:e1:e6:11:fd:a8:d4:79:c7:15:87:67: 4e:0c:b6:ba:e9:31:45:f9:08:c0:47:ca:2a:64:a7: 28:ec:d2:d0:51:f9:60:89:74:be:92:33:0b:9b:13: a4:95:fc:3a:93:3a:e8:4b:08:53:33:d1:36:c0:59: fd:e5:d1:68:68:0e:31:7a:76:3e:02:8e:e8:77:e9: a5:dd:99:11:87:16:11:d7:2f:5d:79:fa:b7:c7:7f: 98:1e:88:76:bf:7d:cf:ea:17:c2:75:d0:ee:08:5c: fd:1b:db:e8:0e:59:02:37:52:24:35:d5:e6:3a:7b: 72:fa:86:c5:cd:38:df:e6:8e:7b:8d:a4:0d:ec:1c: f0:ed:01:36:62:c3:07:1c:9f:b2:ea:92:e0:64:3b: ae:b5:b3:c0:93:73:67:df:78:bc:f4:09:83:e9:8b: dc:24:6c:b9:ba:2f:41:9f:27:fc:ea:d1:4b:b8:7e: 5b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DA:FC:C7:DE:3E:D1:C0:9F:4C:36:6A:4C:A4:E1:7F:FB:11:A8:49 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153338 sbgp-ipAddrBlock: critical IPv6: 2001:df4:4dc0::/48 Signature Algorithm: sha256WithRSAEncryption ab:e4:79:74:cd:5c:07:70:6e:3c:cf:f2:28:33:12:bf:ed:1f: a7:b1:d9:44:19:26:fb:8d:6e:c0:40:18:b7:23:6e:ab:e9:15: 45:51:ba:27:50:15:f6:05:46:73:34:8b:cf:dd:c5:bd:89:1a: be:08:4f:8e:6c:d0:90:4d:8d:f0:ae:e1:96:9c:c3:43:26:58: 7a:2a:ec:17:1d:35:2e:68:79:9d:5b:3a:3f:22:25:0b:e2:78: 4e:24:9b:56:04:db:96:bf:c4:78:9e:40:9d:ce:3f:c4:e0:a4: 30:64:27:3c:05:7b:c7:f9:09:6d:d5:e2:f7:9a:6a:0b:9c:80: 9b:25:5d:ad:43:05:44:70:ab:41:62:cc:03:d8:fe:2e:cd:b8: ef:e4:fb:17:76:a8:3b:91:71:e7:83:15:1b:d2:88:e5:a0:cd: ef:a2:a3:0b:07:bc:20:52:f6:36:00:8f:b0:ae:13:5f:63:17: 53:91:fd:23:dd:19:84:06:77:e8:e8:c4:bc:0d:35:0d:55:d6: f0:2e:a2:dc:8f:c2:4b:4e:14:09:75:d3:9c:7b:91:65:d5:bb: 1a:48:e9:b7:55:04:23:23:9a:05:50:73:e0:ab:e4:fa:62:18: d8:36:2c:7c:ae:10:a3:98:7c:fe:be:2b:c6:7e:10:ef:23:54: 75:f8:26:35 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAnf5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTE4MTI0NloXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxODc5QUMxMTAvBgNVBAUTKDY5REFGQ0M3REUzRUQxQzA5RjRDMzY2 QTRDQTRFMTdGRkIxMUE4NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLFvbgfAfQDEpGjkLHCKXyXLLGYL21wJZHceTpbUcuz6ZNy0vMRetPlQTV/iap HkpsW8exJ+ZGgE9fzqSxJQ3mUWV+h3sV49HDMyfZP9/h5hH9qNR5xxWHZ04Mtrrp MUX5CMBHyipkpyjs0tBR+WCJdL6SMwubE6SV/DqTOuhLCFMz0TbAWf3l0WhoDjF6 dj4Cjuh36aXdmRGHFhHXL115+rfHf5geiHa/fc/qF8J10O4IXP0b2+gOWQI3UiQ1 1eY6e3L6hsXNON/mjnuNpA3sHPDtATZiwwccn7LqkuBkO661s8CTc2ffeLz0CYPp i9wkbLm6L0GfJ/zq0Uu4flszAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUadr8x94+ 0cCfTDZqTKThf/sRqEkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg3OUFDLzY4Rjc5MjJDQTgwMTExRUZBNDA2NzUzQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4NzlBQy82OEY3OTIyQ0E4MDExMUVGQTQwNjc1M0JDNEY5QUUwMi9hZHI4eDk0 LTBjQ2ZURFpxVEtUaGZfc1JxRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlb6MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9E3AMA0G CSqGSIb3DQEBCwUAA4IBAQCr5Hl0zVwHcG48z/IoMxK/7R+nsdlEGSb7jW7AQBi3 I26r6RVFUbonUBX2BUZzNIvP3cW9iRq+CE+ObNCQTY3wruGWnMNDJlh6KuwXHTUu aHmdWzo/IiUL4nhOJJtWBNuWv8R4nkCdzj/E4KQwZCc8BXvH+Qlt1eL3mmoLnICb JV2tQwVEcKtBYswD2P4uzbjv5PsXdqg7kXHngxUb0ojloM3voqMLB7wgUvY2AI+w rhNfYxdTkf0j3RmEBnfo6MS8DTUNVdbwLqLcj8JLThQJddOce5Fl1bsaSOm3VQQj I5oFUHPgq+T6YhjYNix8rhCjmHz+vivGfhDvI1R1+CY1 -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:56 2025 by rpki-client