This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer File: l0tKVlSG4EjQwXaY1yJ2cM88mac.cer (raw, json) Hash identifier: HPXIIMrl+cyeP3Fd5KA0lp7h1BKjlBSA1gcbzhk3FOA= Subject key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02784F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft caRepository: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 26 Nov 2025 15:18:08 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 153396 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161871 (0x2784f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 26 15:18:08 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:97:5f:e6:3b:03:4c:32:fe:f1:02:06:05: a2:2d:fb:3a:64:51:28:6b:5f:6a:79:75:93:63:93: a1:9f:93:be:81:2b:9e:31:47:c0:47:17:3e:8e:9b: ba:82:e1:eb:52:64:36:0a:a4:82:52:3b:e6:54:95: f5:22:1b:4c:31:a4:66:f6:ca:0b:ba:50:9c:81:e8: 9b:1d:88:b3:40:d5:d3:74:28:0d:7a:34:14:b6:b3: 13:33:be:f6:b0:86:9a:55:f0:b9:24:57:5d:f1:88: c0:f8:d2:a1:87:f3:fe:3c:58:6e:bf:57:30:a6:f7: 68:d3:35:eb:f5:c7:48:90:34:12:cf:1b:ed:bc:02: eb:e5:d5:d6:74:3b:4e:3d:5c:17:d3:f5:19:ed:d9: dd:80:e1:fc:aa:63:2e:34:d9:45:05:3d:c0:b6:c0: 21:3c:76:2c:cb:97:3a:e6:9f:83:e9:32:7f:92:0f: dc:ef:a2:fd:fc:04:ba:87:6c:8e:3f:df:92:73:6a: 90:61:a9:ab:27:a1:80:25:86:fa:d5:4d:ef:6d:28: 54:65:b4:eb:bc:0f:1d:07:c4:fd:10:0b:5b:18:87: 70:89:98:40:86:81:5d:c8:16:e3:5c:4a:58:12:a5: aa:89:dc:5a:4c:f3:eb:a8:78:6a:36:7c:aa:e6:17: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153396 Signature Algorithm: sha256WithRSAEncryption 22:05:36:a9:5b:42:b9:49:f9:17:a8:c5:ec:53:81:73:57:d3: 2e:53:bb:0f:7a:df:aa:97:3a:34:df:a6:2c:c0:d5:91:6f:6a: e9:39:9b:0e:5e:14:d0:03:47:74:7d:09:4d:ab:42:f7:8a:08: 39:88:da:40:ee:3c:b2:54:67:bc:0a:fc:3f:0f:05:32:13:2b: ca:8b:ad:b3:48:65:ba:71:25:aa:e0:c4:46:10:82:95:2c:91: 0d:ff:fd:5c:79:b2:43:22:49:4b:5b:10:bc:2e:c2:14:12:c1: c3:0b:5f:1b:e2:83:c5:f2:e3:b5:76:41:8a:f8:fb:d2:85:65: d7:f1:c7:16:ea:f9:da:5d:36:f4:e8:be:b2:18:88:1f:a6:fb: cd:f3:89:bc:26:ad:08:70:07:c4:4a:4d:b2:c1:8c:87:ee:5c: 4e:e6:42:9f:b7:c6:03:9b:26:7e:51:7f:75:51:07:96:f3:53: f7:71:32:1e:fb:fc:30:28:c7:82:0c:46:54:91:fb:1e:dc:2e: 65:5c:08:c3:ae:30:9c:ca:65:16:81:19:a3:bc:a6:de:89:e1: 0d:e1:48:7c:89:5e:90:90:c0:fa:f8:ae:f8:0b:04:f6:f7:57: 81:e4:a0:aa:5a:c6:11:31:f6:0f:a2:99:67:2a:c4:ac:37:77: a6:29:29:3a -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIDAnhPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNjE1MTgwOFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNjA2OUExMTAvBgNVBAUTKDk3NEI0QTU2NTQ4NkUwNDhEMEMxNzY5 OEQ3MjI3NjcwQ0YzQzk5QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsBZdf5jsDTDL+8QIGBaIt+zpkUShrX2p5dZNjk6Gfk76BK54xR8BHFz6Om7qC 4etSZDYKpIJSO+ZUlfUiG0wxpGb2ygu6UJyB6JsdiLNA1dN0KA16NBS2sxMzvvaw hppV8LkkV13xiMD40qGH8/48WG6/VzCm92jTNev1x0iQNBLPG+28Auvl1dZ0O049 XBfT9Rnt2d2A4fyqYy402UUFPcC2wCE8dizLlzrmn4PpMn+SD9zvov38BLqHbI4/ 35JzapBhqasnoYAlhvrVTe9tKFRltOu8Dx0HxP0QC1sYh3CJmECGgV3IFuNcSlgS paqJ3FpM8+uoeGo2fKrmFwrVAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUl0tKVlSG 4EjQwXaY1yJ2cM88macwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTYwNjlBLzM2RDVENjJDOUJGMDExRUY4MUM5MDI2N0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2MDY5QS8zNkQ1RDYyQzlCRjAxMUVGODFDOTAyNjdDNEY5QUUwMi9sMHRLVmxT RzRFalF3WGFZMXlKMmNNODhtYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlc0MA0GCSqGSIb3DQEBCwUAA4IBAQAiBTapW0K5SfkXqMXsU4FzV9Mu U7sPet+qlzo036YswNWRb2rpOZsOXhTQA0d0fQlNq0L3igg5iNpA7jyyVGe8Cvw/ DwUyEyvKi62zSGW6cSWq4MRGEIKVLJEN//1cebJDIklLWxC8LsIUEsHDC18b4oPF 8uO1dkGK+PvShWXX8ccW6vnaXTb06L6yGIgfpvvN84m8Jq0IcAfESk2ywYyH7lxO 5kKft8YDmyZ+UX91UQeW81P3cTIe+/wwKMeCDEZUkfse3C5lXAjDrjCcymUWgRmj vKbeieEN4Uh8iV6QkMD6+K74CwT291eB5KCqWsYRMfYPoplnKsSsN3emKSk6 -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:39 2025 by rpki-client