This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer File: hemZwivuAcMmTT0iZ1ghCS__0Cw.cer (raw, json) Hash identifier: k+cXCP4Ruyr1UdMmTr6jPS+JJdq9MR4+2kZExsExdF4= Subject key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027892 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 04:04:47 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 18397 IP: 202.8.92.0/24 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161938 (0x27892) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 27 04:04:47 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91AC132, serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:47:66:61:a8:c4:71:79:6f:0a:8a:eb:16: 08:46:7c:b9:90:52:72:d1:e6:b0:c7:79:51:3c:bf: 3f:15:ae:5a:64:61:55:03:5f:65:50:68:7e:a9:c2: 1e:2a:54:a4:d9:c5:5b:f2:e4:5d:f0:40:a5:01:5a: dd:08:66:c5:5c:3c:ad:03:21:d9:60:7b:81:73:47: 27:fb:51:74:c9:14:d7:1c:e4:cc:b8:ff:27:6c:ea: 53:6e:e8:92:f3:ed:fa:4c:dd:04:04:e2:67:82:4e: 84:19:8c:03:7d:9a:11:9f:1c:55:6e:77:d9:1b:67: b8:75:03:12:c7:b1:ac:2c:8f:fa:df:32:ab:2e:58: 6b:19:e7:53:c8:04:03:7d:e3:77:32:91:2c:39:5a: aa:81:8f:19:ac:36:00:63:be:05:6e:0c:75:c0:bc: 34:7a:4f:d8:bf:8b:f5:4a:cb:bc:ef:02:c8:c4:49: 90:e0:34:d2:9b:09:59:83:b9:c0:5a:5e:eb:ed:e5: d0:d7:35:dc:61:65:9a:ac:95:2a:41:75:9f:d1:50: 6c:63:8c:be:57:aa:be:e0:be:a1:7b:c9:24:36:f9: c5:91:95:24:ff:98:1f:8c:d7:04:0e:34:8a:87:68: b7:16:f2:11:0f:4f:83:e6:98:65:89:61:1d:5d:b1: a2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 18397 sbgp-ipAddrBlock: critical IPv4: 202.8.92.0/24 Signature Algorithm: sha256WithRSAEncryption d3:8c:b8:e8:33:09:d8:b1:7e:2a:dd:21:04:2a:a5:d1:c4:4a: 5b:3e:08:8f:e4:c4:e6:14:38:66:c9:4f:4c:dc:0c:71:13:78: 72:fb:1b:ca:47:48:44:f0:38:4d:86:d3:a7:a3:22:67:7c:7f: cb:42:d9:35:2d:58:f3:75:51:50:2b:9b:51:dd:5f:24:1d:2c: 6c:15:16:58:22:15:7c:5b:cb:a6:51:fe:15:fa:ab:f5:33:e6: 4d:77:35:b1:0b:b9:3f:ed:2b:28:4a:c6:d1:59:67:d8:4d:6d: f1:93:6a:65:65:f7:46:68:bc:ec:a7:5b:91:75:b9:58:42:c8: cc:d5:4e:0b:f4:3a:e1:3c:b5:85:c6:ea:d9:67:da:21:68:6f: 8b:76:17:78:5b:59:a4:c9:da:e1:52:87:f3:06:39:2d:6c:bc: 5b:2c:99:a5:f0:df:58:14:f4:6a:b8:0f:e7:b0:07:e1:06:4c: f5:15:ef:83:7f:44:2d:b0:47:0b:42:d8:7d:d4:02:a2:4e:2a: 7e:7a:a8:62:da:a9:d8:da:c9:23:97:4d:8f:0c:d1:13:47:c6: bd:9a:f4:b3:1b:77:f6:af:92:57:4b:4e:3f:4a:29:ce:74:eb: 52:2e:7d:92:b9:b5:b1:25:0c:60:1f:71:33:3b:12:18:ff:38: 6b:46:a4:64 -----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgIDAniSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNzA0MDQ0N1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQUMxMzIxMTAvBgNVBAUTKDg1RTk5OUMyMkJFRTAxQzMyNjREM0Qy MjY3NTgyMTA5MkZGRkQwMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtfEdmYajEcXlvCorrFghGfLmQUnLR5rDHeVE8vz8VrlpkYVUDX2VQaH6pwh4q VKTZxVvy5F3wQKUBWt0IZsVcPK0DIdlge4FzRyf7UXTJFNcc5My4/yds6lNu6JLz 7fpM3QQE4meCToQZjAN9mhGfHFVud9kbZ7h1AxLHsawsj/rfMqsuWGsZ51PIBAN9 43cykSw5WqqBjxmsNgBjvgVuDHXAvDR6T9i/i/VKy7zvAsjESZDgNNKbCVmDucBa Xuvt5dDXNdxhZZqslSpBdZ/RUGxjjL5Xqr7gvqF7ySQ2+cWRlST/mB+M1wQONIqH aLcW8hEPT4PmmGWJYR1dsaJpAgMBAAGjggMOMIIDCjAdBgNVHQ4EFgQUhemZwivu AcMmTT0iZ1ghCS//0CwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFDMTMyL0M0RkExNEY4QjgwQzExRUY4NEZBM0UzNUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBQzEzMi9DNEZBMTRGOEI4MEMxMUVGODRGQTNFMzVDNEY5QUUwMi9oZW1ad2l2 dUFjTW1UVDBpWjFnaENTX18wQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICR90wHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCFwwDQYJKoZI hvcNAQELBQADggEBANOMuOgzCdixfirdIQQqpdHESls+CI/kxOYUOGbJT0zcDHET eHL7G8pHSETwOE2G06ejImd8f8tC2TUtWPN1UVArm1HdXyQdLGwVFlgiFXxby6ZR /hX6q/Uz5k13NbELuT/tKyhKxtFZZ9hNbfGTamVl90ZovOynW5F1uVhCyMzVTgv0 OuE8tYXG6tln2iFob4t2F3hbWaTJ2uFSh/MGOS1svFssmaXw31gU9Gq4D+ewB+EG TPUV74N/RC2wRwtC2H3UAqJOKn56qGLaqdjaySOXTY8M0RNHxr2a9LMbd/avkldL Tj9KKc5061IufZK5tbElDGAfcTM7Ehj/OGtGpGQ= -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:55 2025 by rpki-client