This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer File: eHDyQLxFFuOanCWVjPl7GUvnZWc.cer (raw, json) Hash identifier: D4E3uiseOEpdUeC16/ADTOS2hZe4UbVtcGpS6ySNLx8= Subject key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027657 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 16:00:33 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 9729 IP: 202.85.128.0/18 IP: 203.194.128.0/17 IP: 210.184.96.0 -- 210.184.255.255 IP: 2403:2400::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161367 (0x27657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 19 16:00:33 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:c7:4d:8d:77:4d:da:1f:3d:03:4b:6c:6b: 13:23:4b:81:70:dd:94:8e:52:71:fe:9c:94:8b:28: e2:a8:0b:7a:09:d5:d7:15:78:e2:e9:63:37:14:d9: 8a:98:5c:a2:56:9f:43:96:e4:1a:d3:d9:d8:1c:2f: 4d:bb:ec:d3:fd:47:92:19:4c:8c:55:8d:89:b9:6c: 57:5c:8a:93:00:c7:47:c0:73:d0:9e:97:d9:a7:ae: 6c:34:7a:55:82:a9:03:96:3f:f3:5a:7a:42:f2:15: 94:5c:c9:e0:8c:60:93:c9:12:b9:40:1a:05:d8:c0: b9:62:a0:01:b9:1e:a5:bd:02:5b:1b:b9:8d:1c:cc: d9:73:11:74:23:52:b4:c0:5b:f8:a7:11:c8:c9:48: 4c:6d:5c:cb:cb:d0:39:c7:61:a5:32:b2:ae:20:90: 80:fb:9f:3b:a9:8b:41:72:b1:85:23:2f:5d:08:82: 3b:e2:a6:e2:b1:f1:37:ef:31:9d:93:ad:63:f2:25: 6e:76:3c:7b:65:44:89:5e:93:2e:a4:a4:d7:c4:cf: 8e:1f:81:bb:5a:91:d7:07:94:57:2b:65:7a:e9:d7: d7:32:8d:f3:c8:2e:ba:ea:16:5f:4e:b3:32:0d:4a: 84:50:23:d4:53:88:fe:21:e5:59:ff:31:97:34:12: 3e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9729 sbgp-ipAddrBlock: critical IPv4: 202.85.128.0/18 203.194.128.0/17 210.184.96.0-210.184.255.255 IPv6: 2403:2400::/32 Signature Algorithm: sha256WithRSAEncryption 17:01:30:87:85:48:b7:57:cb:2d:c2:57:88:44:e2:20:31:48: 0c:6a:69:4a:fe:98:e1:7d:db:a6:1b:93:a9:0c:c9:fb:76:3c: 3a:54:91:17:9a:11:64:08:64:55:bd:4f:2b:f1:61:0b:c4:ef: 92:3c:71:8b:5f:a1:59:51:28:c3:c5:ab:65:97:26:85:d6:01: 71:70:8c:43:8f:1e:00:7d:e3:98:d7:0f:5d:85:4c:ee:a0:96: 82:75:b1:d1:1e:c8:dd:33:ae:0e:94:db:eb:64:e0:34:85:52: 9a:6d:19:fa:60:58:1d:40:cd:2b:1e:fe:e2:9a:a5:53:7f:f5: f8:8c:2e:cd:96:b2:05:e0:3d:1a:74:41:fc:16:93:4a:2f:fc: 4e:ae:3b:10:f8:a6:34:a0:3b:74:d1:88:0d:91:99:69:cb:23: eb:a4:40:8f:c3:e0:aa:39:e8:c6:58:6d:88:8c:b7:e0:3f:aa: 10:5e:1b:fe:7e:44:bd:4b:ae:26:d7:29:63:74:6e:85:00:4c: d1:18:22:b6:d1:fb:9f:e7:8a:84:d5:6c:d7:bd:5a:67:db:5b: fd:f6:74:30:23:a3:3e:bb:08:43:c6:74:d8:f9:5c:5e:97:92: b6:6b:f9:e8:2d:fc:78:ec:e8:c9:e8:e6:c4:d8:c9:9a:9b:9d: 4b:76:72:01 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIDAnZXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExOTE2MDAzM1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQTA5QkYxMTAvBgNVBAUTKDc4NzBGMjQwQkM0NTE2RTM5QTlDMjU5 NThDRjk3QjE5NEJFNzY1NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUUcdNjXdN2h89A0tsaxMjS4Fw3ZSOUnH+nJSLKOKoC3oJ1dcVeOLpYzcU2YqY XKJWn0OW5BrT2dgcL0277NP9R5IZTIxVjYm5bFdcipMAx0fAc9Cel9mnrmw0elWC qQOWP/NaekLyFZRcyeCMYJPJErlAGgXYwLlioAG5HqW9AlsbuY0czNlzEXQjUrTA W/inEcjJSExtXMvL0DnHYaUysq4gkID7nzupi0FysYUjL10IgjvipuKx8TfvMZ2T rWPyJW52PHtlRIleky6kpNfEz44fgbtakdcHlFcrZXrp19cyjfPILrrqFl9OszIN SoRQI9RTiP4h5Vn/MZc0Ej5HAgMBAAGjggMwMIIDLDAdBgNVHQ4EFgQUeHDyQLxF FuOanCWVjPl7GUvnZWcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUEwOUJGL0QxM0RBMUQ0MkRGQzExRUFCQzFCNkI4MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBMDlCRi9EMTNEQTFENDJERkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4 RkZ1T2FuQ1dWalBsN0dVdm5aV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICJgEwQQYIKwYBBQUHAQcBAf8EMjAwMB8EAgABMBkDBAbKVYADBAfLwoAw CwMEBdK4YAMDANK4MA0EAgACMAcDBQAkAyQAMA0GCSqGSIb3DQEBCwUAA4IBAQAX ATCHhUi3V8stwleIROIgMUgMamlK/pjhfdumG5OpDMn7djw6VJEXmhFkCGRVvU8r 8WELxO+SPHGLX6FZUSjDxatllyaF1gFxcIxDjx4AfeOY1w9dhUzuoJaCdbHRHsjd M64OlNvrZOA0hVKabRn6YFgdQM0rHv7imqVTf/X4jC7NlrIF4D0adEH8FpNKL/xO rjsQ+KY0oDt00YgNkZlpyyPrpECPw+CqOejGWG2IjLfgP6oQXhv+fkS9S64m1ylj dG6FAEzRGCK20fuf54qE1WzXvVpn21v99nQwI6M+uwhDxnTY+Vxel5K2a/noLfx4 7OjJ6ObE2Mmam51LdnIB -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:04 2025 by rpki-client