This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer File: cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer (raw, json) Hash identifier: j9BChBKc7d4wA0r9UafvF+OmWO3VqTtUp2Fwq5cy998= Subject key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027990 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft caRepository: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 30 Nov 2025 19:34:49 +0000 Certificate not after: Mon 30 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 55745 AS: 132404 AS: 133174 IP: 117.55.196.0/23 IP: 2400:5180::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162192 (0x27990) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 30 19:34:49 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=A913CA4B, serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:2a:74:b1:a5:fd:9e:97:5e:a9:78:ad:46: ca:f9:92:b8:5f:08:e6:66:36:63:8d:3e:69:82:2c: 81:62:84:66:43:65:3e:fa:44:ec:23:16:01:1a:51: b6:8e:78:f1:07:d1:90:fb:1c:f1:8f:fa:49:ac:c5: 00:dc:26:05:2c:63:fc:78:10:47:45:b9:90:b7:62: 5c:92:e5:9b:d9:95:8e:7c:08:69:12:aa:39:d3:22: 31:be:2e:0d:13:d8:a8:76:47:e7:5e:7c:4e:1d:a7: c4:80:32:9d:56:a6:4a:fa:e9:64:80:aa:ee:0a:83: 88:4c:a2:de:2c:27:57:fc:3a:06:5f:85:64:03:52: 79:27:89:6a:e6:ad:dc:2d:a3:e1:f6:a0:f7:52:c6: 93:19:1f:96:0e:de:f2:6b:43:a1:9f:9f:f0:ea:12: a9:77:7c:dc:a9:37:1d:e8:f2:e4:71:98:61:1c:ee: 55:23:6b:ec:48:da:f3:68:02:32:a9:8c:c5:15:ea: cf:92:d6:23:b9:94:51:40:6a:18:3b:ef:d6:ec:d9: a3:ab:1e:19:c8:a7:0a:89:38:a4:c5:16:1d:e6:6b: 84:f0:0c:e8:a0:f5:be:20:06:1a:74:d6:91:22:fd: da:7a:ec:96:3d:1f:6c:11:19:2c:1d:93:63:7d:8c: 6c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 55745 132404 133174 sbgp-ipAddrBlock: critical IPv4: 117.55.196.0/23 IPv6: 2400:5180::/32 Signature Algorithm: sha256WithRSAEncryption 31:a9:a6:b6:bc:ab:13:76:db:e9:14:39:27:02:18:a2:43:49: d9:8c:d1:3a:97:5e:e4:ea:af:d4:b4:39:6c:04:a5:13:a4:00: 50:8d:69:f2:e1:13:e3:86:89:f1:e3:6c:80:17:ba:96:e3:bd: 85:7c:23:95:27:29:d3:51:46:9d:48:e7:ac:92:fb:8e:71:87: 84:a4:13:b6:a7:9b:87:e6:4b:52:bf:b5:a8:99:c4:a3:e9:e2: bf:56:46:04:dd:f3:47:48:ca:85:6f:b2:0e:66:a3:b4:c3:55: 58:40:01:0d:74:a3:a8:98:b2:07:25:e2:c9:8c:fb:39:35:ab: 37:ac:26:84:70:77:e5:e6:c8:00:98:9a:02:2f:f7:62:ba:2a: b6:51:fe:f5:bf:08:1a:5b:35:ed:5b:7d:a2:49:88:e5:02:92: 2f:25:39:e3:a8:e8:40:2e:3f:ce:7d:bf:f6:55:5a:a4:63:56: a4:38:d0:e3:ab:e3:69:8b:f0:69:51:1e:3e:58:c2:92:e1:45: b2:b8:aa:12:0e:51:c9:af:0b:2d:95:21:0c:9b:22:d1:b9:82: 68:ea:33:47:ea:60:b4:c5:ce:c9:7b:96:aa:50:04:7b:5b:a3: 46:f5:6f:95:ff:8b:15:a5:e5:90:a5:03:23:01:fc:c2:ac:37: a0:75:aa:a8 -----BEGIN CERTIFICATE----- MIIGMzCCBRugAwIBAgIDAnmQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEzMDE5MzQ0OVoXDTI2MDMzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxM0NBNEIxMTAvBgNVBAUTKDcwOTIxMENGNzYxRUM2N0ZCMzk0RUE1 ODk2QTVDNjQ3QjMwNUVFRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/+Cp0saX9npdeqXitRsr5krhfCOZmNmONPmmCLIFihGZDZT76ROwjFgEaUbaO ePEH0ZD7HPGP+kmsxQDcJgUsY/x4EEdFuZC3YlyS5ZvZlY58CGkSqjnTIjG+Lg0T 2Kh2R+defE4dp8SAMp1Wpkr66WSAqu4Kg4hMot4sJ1f8OgZfhWQDUnkniWrmrdwt o+H2oPdSxpMZH5YO3vJrQ6Gfn/DqEql3fNypNx3o8uRxmGEc7lUja+xI2vNoAjKp jMUV6s+S1iO5lFFAahg779bs2aOrHhnIpwqJOKTFFh3ma4TwDOig9b4gBhp01pEi /dp67JY9H2wRGSwdk2N9jGzTAgMBAAGjggMoMIIDJDAdBgNVHQ4EFgQUcJIQz3Ye xn+zlOpYlqXGR7MF7vEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNDQTRCL0RDMkYwNDMyQkY4MDExRUE5NkZFNEE2OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzQ0E0Qi9EQzJGMDQzMkJGODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZ ZXhuLXpsT3BZbHFYR1I3TUY3dkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDANnBAgMCBTQCAwIINjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME AXU3xDANBAIAAjAHAwUAJABRgDANBgkqhkiG9w0BAQsFAAOCAQEAMammtryrE3bb 6RQ5JwIYokNJ2YzROpde5Oqv1LQ5bASlE6QAUI1p8uET44aJ8eNsgBe6luO9hXwj lScp01FGnUjnrJL7jnGHhKQTtqebh+ZLUr+1qJnEo+niv1ZGBN3zR0jKhW+yDmaj tMNVWEABDXSjqJiyByXiyYz7OTWrN6wmhHB35ebIAJiaAi/3YroqtlH+9b8IGls1 7Vt9okmI5QKSLyU546joQC4/zn2/9lVapGNWpDjQ46vjaYvwaVEePljCkuFFsriq Eg5Rya8LLZUhDJsi0bmCaOozR+pgtMXOyXuWqlAEe1ujRvVvlf+LFaXlkKUDIwH8 wqw3oHWqqA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:22 2025 by rpki-client