This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer File: cXLtDPRHBezrGWHROgV-z_MHyG8.cer (raw, json) Hash identifier: X5mlc+he3qF9iokuY8Kb4L4L/qAxonGeoH0Bhzps3gg= Subject key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B50 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft caRepository: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 14:58:50 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 142294 IP: 2001:df4:6c40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162640 (0x27b50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 14:58:50 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:58:3a:8c:21:04:af:f0:7c:4c:f6:b7:20: 78:9c:41:fe:ec:ec:2c:fd:a7:80:07:4c:c0:dd:fa: 7c:c3:5b:d8:ce:94:e0:90:e3:b0:e0:e1:47:dd:f2: 64:fa:6f:89:99:39:db:42:40:ed:65:e5:00:d6:cc: c2:21:77:6b:72:74:d0:2a:9d:49:23:93:a0:cc:59: 43:56:d3:f9:28:01:e6:2d:30:9a:b3:bc:19:41:12: c9:df:06:05:12:c1:a3:14:76:4e:25:6f:22:c3:ed: 9f:86:1a:43:8b:41:5d:af:73:e4:e7:8b:99:53:9e: 1d:0d:41:e1:97:cc:eb:27:88:b8:c0:7c:2b:a2:18: 95:a6:aa:be:61:d3:cf:8e:ec:90:c0:ae:a4:67:c7: 56:81:11:84:6a:07:e9:ea:44:d0:47:5d:97:1c:87: d2:1b:8c:38:a2:05:92:1a:7d:a8:e4:22:78:94:fc: 4c:fd:db:71:62:b5:50:47:6f:c1:90:0e:55:e5:3b: 61:b3:12:37:6c:68:93:71:f5:7b:77:11:3b:5d:18: d2:d7:3b:2c:1c:65:43:db:d5:f1:08:ca:bd:cc:ec: 40:81:bd:c2:19:c2:da:33:e2:1f:21:cc:75:cc:5e: c7:e7:8b:78:82:11:4c:12:56:c7:97:2c:6a:dd:e1: d9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 142294 sbgp-ipAddrBlock: critical IPv6: 2001:df4:6c40::/48 Signature Algorithm: sha256WithRSAEncryption 95:41:13:cf:ca:b0:ef:ec:38:85:c6:c8:6e:cf:e3:fc:33:5e: 06:85:3b:f6:74:e6:75:e9:b2:fd:a1:98:44:29:1f:d8:c5:23: ba:ef:f0:c2:1c:32:4e:11:66:a9:78:f9:3b:ba:7a:d5:9b:42: 42:6a:c8:9e:02:a3:08:53:6f:ed:6c:c8:1c:5c:4d:22:c5:93: 44:0b:90:b4:f8:41:49:27:d5:e3:65:8e:f6:a5:c1:f6:e1:16: 0f:b9:81:af:b3:81:e9:0d:8a:7d:cc:1c:2d:bf:e4:35:e2:97: 40:0f:5a:e9:74:4f:e5:63:a7:74:c3:77:22:72:77:9d:f6:5e: 77:a3:92:cc:8d:24:2a:61:3a:0c:e5:40:9e:10:6a:2b:b1:0b: 8d:71:e3:1c:95:79:78:4e:ba:21:c3:14:75:5a:39:06:4c:2f: cd:6c:32:b3:75:3d:cb:d6:03:3a:f4:5f:04:e3:c5:44:4f:99: 93:8d:8a:91:d1:b4:02:d9:29:af:5e:76:ae:95:1b:fa:fd:33: 2b:64:dd:05:e0:c2:05:06:5e:d3:2a:02:1a:4f:b6:f6:e2:9d: c1:32:1e:c7:25:87:f0:7b:a3:21:25:0d:2a:7d:d4:ad:a3:fc: d0:da:39:c7:7a:af:9a:72:52:42:94:1c:3f:30:38:a5:cb:ee: 1e:4f:75:cf -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAntQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzE0NTg1MFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxM0I3QzcxMTAvBgNVBAUTKDcxNzJFRDBDRjQ0NzA1RUNFQjE5NjFE MTNBMDU3RUNGRjMwN0M4NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBLFg6jCEEr/B8TPa3IHicQf7s7Cz9p4AHTMDd+nzDW9jOlOCQ47Dg4Ufd8mT6 b4mZOdtCQO1l5QDWzMIhd2tydNAqnUkjk6DMWUNW0/koAeYtMJqzvBlBEsnfBgUS waMUdk4lbyLD7Z+GGkOLQV2vc+Tni5lTnh0NQeGXzOsniLjAfCuiGJWmqr5h08+O 7JDArqRnx1aBEYRqB+nqRNBHXZcch9IbjDiiBZIafajkIniU/Ez923FitVBHb8GQ DlXlO2GzEjdsaJNx9Xt3ETtdGNLXOywcZUPb1fEIyr3M7ECBvcIZwtoz4h8hzHXM Xsfni3iCEUwSVseXLGrd4dnJAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUcXLtDPRH BezrGWHROgV+z/MHyG8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNCN0M3L0FBMkE3ODRDOUQ5QjExRUY4NjA1MDQ2OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzQjdDNy9BQTJBNzg0QzlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBS SEJlenJHV0hST2dWLXpfTUh5RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAivWMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9GxAMA0G CSqGSIb3DQEBCwUAA4IBAQCVQRPPyrDv7DiFxshuz+P8M14GhTv2dOZ16bL9oZhE KR/YxSO67/DCHDJOEWapePk7unrVm0JCasieAqMIU2/tbMgcXE0ixZNEC5C0+EFJ J9XjZY72pcH24RYPuYGvs4HpDYp9zBwtv+Q14pdAD1rpdE/lY6d0w3cicned9l53 o5LMjSQqYToM5UCeEGorsQuNceMclXl4TrohwxR1WjkGTC/NbDKzdT3L1gM69F8E 48VET5mTjYqR0bQC2SmvXnaulRv6/TMrZN0F4MIFBl7TKgIaT7b24p3BMh7HJYfw e6MhJQ0qfdSto/zQ2jnHeq+aclJClBw/MDily+4eT3XP -----END CERTIFICATE-----Generated at Sat Dec 6 14:20:22 2025 by rpki-client