This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer File: hQh9CO2zN-4B6xruuBLL7jStjmM.cer (raw, json) Hash identifier: G1eoJYiIJJKkYxUIKsDmU1fMCYPIqjwVQxi/f4PH+0I= Subject key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027474 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 11 Nov 2025 06:31:42 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 154237 IP: 121.0.60.0/23 IP: 2001:df6:21c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160884 (0x27474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 11 06:31:42 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:23:4e:b6:10:a2:e3:3f:30:ec:b0:2a:16: 0e:14:03:e4:31:08:86:89:1c:93:2d:03:b9:f8:64: 98:dd:c4:f4:c7:20:3b:88:e0:c4:71:8d:0e:15:42: b6:e4:3b:e6:19:b9:78:d9:bf:b4:64:03:39:1f:7f: 17:a5:6d:89:d9:a7:e0:87:73:6c:d7:3e:b7:01:c4: 4a:a4:60:22:7a:9e:f0:65:23:a5:04:2b:55:bc:f6: 93:08:d7:80:d4:79:d0:29:0c:56:a2:d2:01:70:07: bb:32:03:56:00:90:49:6d:8e:2d:20:58:30:07:62: ef:a7:f5:77:eb:c5:ac:30:3d:28:d6:0f:87:a1:92: 61:05:e1:b4:54:4c:34:7a:8c:ec:2e:aa:b2:0e:30: fd:df:8c:72:5a:d0:6b:ff:6f:b3:53:77:b1:f1:40: 27:8a:cd:f6:45:53:f2:b3:ec:44:e7:22:7f:02:51: 4d:4d:c1:13:6b:93:66:80:6b:b5:53:6a:11:eb:d3: 16:74:b9:59:62:ec:83:26:2c:4c:52:ce:38:1d:7e: 16:30:55:d8:83:4b:8f:2a:e7:62:c7:ac:0f:be:94: 81:ec:a6:20:9b:98:9c:2a:db:2a:de:7b:6c:15:b5: a7:74:ca:f4:a8:ba:cf:ef:ee:78:0a:c9:33:38:69: 34:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154237 sbgp-ipAddrBlock: critical IPv4: 121.0.60.0/23 IPv6: 2001:df6:21c0::/48 Signature Algorithm: sha256WithRSAEncryption ac:f4:6f:b4:08:c7:f9:5d:5f:7e:93:c4:2b:c7:34:56:96:7f: d8:58:16:e7:c3:6a:ec:75:5a:ea:2e:1c:0b:1d:b4:4d:47:6b: a4:91:60:f3:fd:84:38:f9:dc:47:94:21:a4:d5:c4:76:5f:4b: 71:fc:87:5a:6f:fd:0a:3c:c1:34:73:72:12:28:4e:d9:01:75: 87:09:f8:78:00:79:72:fc:3d:e2:d1:93:06:c7:53:fc:a5:e4: ba:c1:a7:d7:92:0a:82:ac:41:bd:16:73:a5:80:4f:e8:9b:74: e4:52:bd:26:34:31:a8:9e:51:ca:5e:95:57:f8:8e:55:ac:76: 1d:c9:46:fa:8e:5a:fd:2d:61:d8:21:08:8a:2f:32:52:2f:5b: ca:f1:50:be:25:8f:95:01:fb:a9:86:e2:f1:42:89:55:41:d5: 3f:e4:01:4a:60:01:6f:ca:a7:13:7c:13:d9:f9:3d:50:6b:0a: 66:65:b2:bb:a8:bf:80:fe:97:d3:40:8a:68:4c:99:c7:fa:b9: 12:48:c7:90:eb:79:68:6e:92:55:35:ab:4a:fe:e2:7b:48:46: 57:ac:63:38:57:2a:3c:90:e1:77:12:bb:bb:ee:b1:b4:e1:59: 32:cd:72:53:a8:33:9c:f0:f4:73:51:3d:7b:0e:f6:20:df:93: e4:d7:19:f8 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnR0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMTA2MzE0MloXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxREUwMUUxMTAvBgNVBAUTKDg1MDg3RDA4RURCMzM3RUUwMUVCMUFF RUI4MTJDQkVFMzRBRDhFNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEkSNOthCi4z8w7LAqFg4UA+QxCIaJHJMtA7n4ZJjdxPTHIDuI4MRxjQ4VQrbk O+YZuXjZv7RkAzkffxelbYnZp+CHc2zXPrcBxEqkYCJ6nvBlI6UEK1W89pMI14DU edApDFai0gFwB7syA1YAkEltji0gWDAHYu+n9XfrxawwPSjWD4ehkmEF4bRUTDR6 jOwuqrIOMP3fjHJa0Gv/b7NTd7HxQCeKzfZFU/Kz7ETnIn8CUU1NwRNrk2aAa7VT ahHr0xZ0uVli7IMmLExSzjgdfhYwVdiDS48q52LHrA++lIHspiCbmJwq2yree2wV tad0yvSous/v7ngKyTM4aTSNAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUhQh9CO2z N+4B6xruuBLL7jStjmMwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MURFMDFFLzE0NDdDMEQ4QkVDODExRjA4MjczNjYwQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFERTAxRS8xNDQ3QzBEOEJFQzgxMUYwODI3MzY2MEJDNEY5QUUwMi9oUWg5Q08y ek4tNEI2eHJ1dUJMTDdqU3RqbU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlp9MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBeQA8MA8EAgAC MAkDBwAgAQ32IcAwDQYJKoZIhvcNAQELBQADggEBAKz0b7QIx/ldX36TxCvHNFaW f9hYFufDaux1WuouHAsdtE1Ha6SRYPP9hDj53EeUIaTVxHZfS3H8h1pv/Qo8wTRz chIoTtkBdYcJ+HgAeXL8PeLRkwbHU/yl5LrBp9eSCoKsQb0Wc6WAT+ibdORSvSY0 MaieUcpelVf4jlWsdh3JRvqOWv0tYdghCIovMlIvW8rxUL4lj5UB+6mG4vFCiVVB 1T/kAUpgAW/KpxN8E9n5PVBrCmZlsruov4D+l9NAimhMmcf6uRJIx5DreWhuklU1 q0r+4ntIRlesYzhXKjyQ4XcSu7vusbThWTLNclOoM5zw9HNRPXsO9iDfk+TXGfg= -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:54 2025 by rpki-client