This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer File: cNLQaRmVfGqmdxz1Xblvx-_niaA.cer (raw, json) Hash identifier: u3nH8Qk54TF7BwCFEeKUKBPqm7ovkUqeVmbmpxXUYlM= Subject key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027C23 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft caRepository: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 05 Dec 2025 05:04:32 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 9750 IP: 202.14.16.0/20 IP: 202.36.8.0/21 IP: 203.16.136.0/21 IP: 2404:f3c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162851 (0x27c23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 5 05:04:32 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:32:74:a9:d9:4f:48:1e:13:8d:ff:ba:81: 42:c9:86:63:78:87:9c:6f:ef:9e:6e:18:ab:fa:d1: 42:31:c7:47:6c:47:22:21:25:f3:d6:47:22:e6:41: 10:13:c8:1f:af:08:83:67:a5:06:c5:00:93:6f:62: 45:ed:7d:c7:88:79:34:49:c9:be:8f:b6:12:78:0c: 52:a8:99:89:2d:b8:0c:68:da:9a:5d:99:e2:1c:6b: f5:9a:f9:8e:07:7f:79:e3:f9:5b:a0:da:a1:71:cf: 43:93:b8:01:78:65:ae:17:ed:94:6c:ac:d6:c2:60: ab:dc:93:cd:a5:0f:84:0d:96:65:77:9f:d9:ad:82: e4:66:cc:30:7a:25:b4:d1:ad:ec:d3:e8:74:16:31: dd:75:03:c1:29:36:f9:f9:e8:34:fa:a1:9d:96:e7: 58:fc:3a:37:23:ff:fb:59:1a:90:61:ba:cc:97:62: 78:0e:6f:d8:9e:80:f2:61:47:56:4e:de:0d:4a:75: 02:de:94:b8:cd:cb:68:c0:e1:bc:f4:e2:e0:75:cc: 60:4b:35:62:4e:df:c0:5b:14:b3:b7:65:92:06:61: c4:4a:e1:a4:cb:41:55:fe:68:d5:39:29:41:6c:a7: fe:8e:b0:d2:47:e3:7b:cc:c8:96:96:bd:19:e6:25: 6b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9750 sbgp-ipAddrBlock: critical IPv4: 202.14.16.0/20 202.36.8.0/21 203.16.136.0/21 IPv6: 2404:f3c0::/32 Signature Algorithm: sha256WithRSAEncryption 8f:f0:a1:99:54:85:c1:d2:57:9c:62:2c:f1:c8:4c:9d:e7:c1: 4a:5d:c0:ec:98:f6:aa:23:ab:65:c8:6e:90:d2:db:36:e5:8e: 2e:b3:fd:e4:01:1b:92:bc:b1:99:28:92:ee:6a:d2:cf:a8:13: 62:74:f9:1f:89:5e:8a:a4:cd:d7:4c:45:74:79:38:d3:af:0f: 24:71:3d:a1:f6:1a:83:ae:da:9b:f0:07:ea:90:2a:89:b7:07: a3:5c:3d:0f:5a:e3:f5:d8:50:ec:9c:66:e0:ec:8a:b7:82:a6: 8f:8b:39:8c:5a:24:28:2f:b7:4e:d6:20:f2:81:f5:8c:d5:4a: c4:5c:01:85:88:29:d3:98:86:26:b1:d7:07:54:36:b3:52:6b: e3:3a:af:6d:c0:cf:7f:41:97:d3:a3:bd:9b:dc:b6:09:b1:aa: 54:27:92:13:e3:8c:f0:b5:29:f2:c2:ea:cb:8f:51:a2:0a:0c: a6:11:14:f0:9e:ce:f0:79:d4:33:31:c8:02:af:de:5b:f9:70: 32:52:a7:e0:7a:ce:62:31:43:54:03:3f:84:1a:de:60:d0:37: 64:4e:1b:1c:a0:c7:3c:89:17:d3:b4:33:7f:4f:97:39:03:5c: 7c:c8:fc:b3:6e:bb:13:46:b3:f8:c6:97:5d:bc:c7:bd:10:26: 48:cb:43:5b -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIDAnwjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNTA1MDQzMloXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNG NTVEQjk2RkM3RUZFNzg5QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAODJ0qdlPSB4Tjf+6gULJhmN4h5xv755uGKv60UIxx0dsRyIhJfPWRyLmQRAT yB+vCINnpQbFAJNvYkXtfceIeTRJyb6PthJ4DFKomYktuAxo2ppdmeIca/Wa+Y4H f3nj+Vug2qFxz0OTuAF4Za4X7ZRsrNbCYKvck82lD4QNlmV3n9mtguRmzDB6JbTR rezT6HQWMd11A8EpNvn56DT6oZ2W51j8Ojcj//tZGpBhusyXYngOb9iegPJhR1ZO 3g1KdQLelLjNy2jA4bz04uB1zGBLNWJO38BbFLO3ZZIGYcRK4aTLQVX+aNU5KUFs p/6OsNJH43vMyJaWvRnmJWvPAgMBAAGjggMpMIIDJTAdBgNVHQ4EFgQUcNLQaRmV fGqmdxz1Xblvx+/niaAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQ4QjE5LzExMDMwQUY0ODU1NjExRUM5QUI4MkUyMUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJt VmZHcW1keHoxWGJsdngtX25pYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICJhYwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBATKDhADBAPKJAgD BAPLEIgwDQQCAAIwBwMFACQE88AwDQYJKoZIhvcNAQELBQADggEBAI/woZlUhcHS V5xiLPHITJ3nwUpdwOyY9qojq2XIbpDS2zblji6z/eQBG5K8sZkoku5q0s+oE2J0 +R+JXoqkzddMRXR5ONOvDyRxPaH2GoOu2pvwB+qQKom3B6NcPQ9a4/XYUOycZuDs ireCpo+LOYxaJCgvt07WIPKB9YzVSsRcAYWIKdOYhiax1wdUNrNSa+M6r23Az39B l9OjvZvctgmxqlQnkhPjjPC1KfLC6suPUaIKDKYRFPCezvB51DMxyAKv3lv5cDJS p+B6zmIxQ1QDP4Qa3mDQN2ROGxygxzyJF9O0M39PlzkDXHzI/LNuuxNGs/jGl128 x70QJkjLQ1s= -----END CERTIFICATE-----Generated at Sat Dec 6 10:46:33 2025 by rpki-client