This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer File: jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer (raw, json) Hash identifier: 9G43W4809mPFdIAvY1WFRBs/HtHGYQspm6SZqV4RE4c= Subject key identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027916 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft caRepository: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 28 Nov 2025 16:43:30 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 9661 AS: 64014 IP: 202.41.194.0/23 IP: 203.29.0.0/24 IP: 2001:df5:cc00::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162070 (0x27916) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 28 16:43:30 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A919DD2D, serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:31:79:c4:ca:0c:74:95:d0:8e:c8:02:d8: 86:4b:96:f6:77:f3:38:f9:2d:78:b4:92:58:a7:9f: 8b:67:7b:86:a3:19:48:25:de:5c:59:bc:a1:ee:3a: ac:b6:ec:54:42:91:17:19:c7:2c:fe:f9:53:9f:97: be:d1:d9:50:b9:9a:04:64:d4:18:2b:53:1c:c9:fe: 07:a0:91:2b:e9:2c:1a:cf:f3:92:0e:81:a8:00:a0: 2d:bf:e2:5f:15:7f:c2:0d:03:53:0c:b3:18:24:1e: 3b:c3:a4:c1:6d:7a:4f:cc:46:8e:c9:e4:56:1a:51: 40:f9:8d:d8:1c:09:f6:73:81:94:bc:e9:96:23:5e: d1:43:fb:b1:c6:b5:80:7b:1c:5e:48:2a:03:2f:5d: 04:91:55:9c:45:c5:6a:1e:87:67:f7:49:20:de:e3: 81:dc:6c:36:63:09:20:e1:98:41:10:7d:3c:96:27: 8c:d0:b5:35:b9:7b:cb:b3:c8:16:04:32:8b:d0:09: 48:ea:1f:46:4c:dd:5f:77:97:1c:77:55:90:82:d8: ce:6d:84:9c:9a:ff:d6:57:66:89:eb:81:3e:38:26: ef:a7:cf:c1:1b:e1:2c:0b:75:43:85:33:49:7d:d7: a3:9b:78:e6:e3:9d:77:8c:68:ae:5f:00:1d:ce:42: c3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9661 64014 sbgp-ipAddrBlock: critical IPv4: 202.41.194.0/23 203.29.0.0/24 IPv6: 2001:df5:cc00::/48 Signature Algorithm: sha256WithRSAEncryption 68:b3:b3:e7:96:ee:05:99:1c:e2:bf:87:38:ee:2d:7b:eb:cd: 35:a2:51:01:d2:ec:b5:84:e9:5f:c3:50:08:ae:61:b9:ff:23: 22:ca:9d:d6:26:60:83:cf:be:d8:60:46:a4:98:a6:c3:ba:5b: 14:d3:d8:a5:a4:9b:69:ef:a4:3f:78:4a:ec:71:8a:72:63:0b: 17:bd:61:d5:b6:6d:7d:d3:bd:02:de:0d:4e:b6:ac:ab:4f:7f: 44:33:70:6a:3f:fd:23:84:91:d6:fa:bd:a0:76:41:ad:9c:59: 1a:bb:12:aa:ec:d7:e8:73:c1:d0:a3:35:e5:05:de:63:67:21: 60:01:3f:52:a5:44:b3:bc:f6:2c:e0:31:66:94:ee:30:30:d1: b3:55:50:4d:8f:be:0f:f6:fe:78:b7:ef:5a:0e:1c:fc:19:7a: e2:04:01:42:74:ec:8b:d8:0c:96:a7:b5:6b:0f:56:98:e7:4e: 3c:b3:13:1f:60:dd:ae:81:79:0e:2b:57:ed:79:e6:73:bb:78: 02:2c:64:7a:41:ad:bf:b0:97:9a:2d:87:31:2d:56:15:71:c5: 52:d2:e2:14:2e:2b:4b:47:ca:ae:c4:f4:1c:7a:6e:f4:f6:61: be:a8:e5:12:04:73:cc:c5:41:58:45:fb:d9:cf:b9:31:65:0c: 69:46:f9:eb -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIDAnkWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyODE2NDMzMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOUREMkQxMTAvBgNVBAUTKDhDRjQyMzk4MEZEM0E3RjY3RUM1RjRB NTQzQTIwM0E1M0UzQ0U2NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl4jF5xMoMdJXQjsgC2IZLlvZ38zj5LXi0klinn4tne4ajGUgl3lxZvKHuOqy2 7FRCkRcZxyz++VOfl77R2VC5mgRk1BgrUxzJ/gegkSvpLBrP85IOgagAoC2/4l8V f8INA1MMsxgkHjvDpMFtek/MRo7J5FYaUUD5jdgcCfZzgZS86ZYjXtFD+7HGtYB7 HF5IKgMvXQSRVZxFxWoeh2f3SSDe44HcbDZjCSDhmEEQfTyWJ4zQtTW5e8uzyBYE MovQCUjqH0ZM3V93lxx3VZCC2M5thJya/9ZXZonrgT44Ju+nz8Eb4SwLdUOFM0l9 16ObeObjnXeMaK5fAB3OQsOxAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQUjPQjmA/T p/Z+xfSlQ6IDpT485nYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlERDJELzlEMTI2OTVDRTcwRTExRTg5QTk2M0QxMUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5REQyRC85RDEyNjk1Q0U3MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFf VHBfWi14ZlNsUTZJRHBUNDg1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICJb0CAwD6DjA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAcopwgME AMsdADAPBAIAAjAJAwcAIAEN9cwAMA0GCSqGSIb3DQEBCwUAA4IBAQBos7Pnlu4F mRziv4c47i176801olEB0uy1hOlfw1AIrmG5/yMiyp3WJmCDz77YYEakmKbDulsU 09ilpJtp76Q/eErscYpyYwsXvWHVtm19070C3g1OtqyrT39EM3BqP/0jhJHW+r2g dkGtnFkauxKq7Nfoc8HQozXlBd5jZyFgAT9SpUSzvPYs4DFmlO4wMNGzVVBNj74P 9v54t+9aDhz8GXriBAFCdOyL2AyWp7VrD1aY5048sxMfYN2ugXkOK1fteeZzu3gC LGR6Qa2/sJeaLYcxLVYVccVS0uIULitLR8quxPQcem709mG+qOUSBHPMxUFYRfvZ z7kxZQxpRvnr -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:35 2025 by rpki-client