This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/puZHuaRPqqc-u4IEBQzGTMpFmOo.cer File: puZHuaRPqqc-u4IEBQzGTMpFmOo.cer (raw, json) Hash identifier: mfC0ujRGotmjQOHht7oJzFdE6btWw4UUCL57txBN4gw= Subject key identifier: A6:E6:47:B9:A4:4F:AA:A7:3E:BB:82:04:05:0C:C6:4C:CA:45:98:EA Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027661 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 17:58:22 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 153352 IP: 2001:df4:5b40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161377 (0x27661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 19 17:58:22 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91C5319, serialNumber=A6E647B9A44FAAA73EBB8204050CC64CCA4598EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b1:47:04:3f:08:36:ce:b0:f5:a1:7d:b3:55: 67:4b:57:81:a2:eb:7f:cf:f2:e7:49:54:1a:b0:85: 67:cb:2b:ae:8a:ff:c1:35:02:9e:92:1c:af:bf:3d: 46:1f:83:90:cc:da:43:2e:03:b6:74:2e:b6:58:5e: b3:20:30:63:b7:1c:72:97:01:1b:1f:75:31:1a:7c: ae:05:23:dc:73:b6:3b:c5:ae:56:82:bf:bb:b1:fa: 9a:2c:98:d4:2d:56:97:cd:56:d7:d0:77:0e:49:a5: c6:b3:1f:ce:82:42:e5:2f:2d:09:f1:b9:da:4f:e1: 9f:3a:73:1c:c9:c8:18:64:5d:12:5d:01:2d:e7:7d: e7:3d:99:ca:7c:27:54:2f:b2:7a:03:f2:a7:b9:c8: 4a:f6:da:de:17:18:f3:2c:d0:82:5b:2f:3e:f0:c2: b9:fe:1f:08:ef:50:18:08:31:c1:9d:ab:8f:4f:fc: b7:7d:3d:73:56:2e:ba:ef:e1:ef:b1:dd:36:16:a5: f8:2a:d3:b7:35:97:38:bf:89:82:27:ac:fc:56:cc: 2d:6c:2b:de:02:a4:93:48:2a:d3:b2:87:93:63:7b: 32:23:9b:d0:b8:c4:f2:23:14:23:6a:48:d1:4f:dd: fc:fa:1e:be:91:7c:ca:01:09:fc:e7:73:d7:3a:b4: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E6:47:B9:A4:4F:AA:A7:3E:BB:82:04:05:0C:C6:4C:CA:45:98:EA X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C5319/025D7B5C8C2D11EF8122EC11C4F9AE02/puZHuaRPqqc-u4IEBQzGTMpFmOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153352 sbgp-ipAddrBlock: critical IPv6: 2001:df4:5b40::/48 Signature Algorithm: sha256WithRSAEncryption 95:97:3f:4d:47:9e:df:17:27:17:d8:34:be:f4:5b:88:10:e1: 91:e0:eb:e3:6b:a7:5e:98:8a:a7:24:e3:53:9a:0b:21:7f:d8: de:87:96:ec:a8:8a:13:cb:53:93:95:f8:67:d2:e8:bf:0e:1d: 98:79:53:f9:61:74:21:68:d0:38:54:c4:79:a6:b4:78:8d:e9: ca:0b:d1:ff:a0:65:19:52:a5:b1:60:6d:c3:0d:22:b6:e1:89: da:4c:a8:83:f0:1d:98:57:70:53:d0:43:c7:c4:da:ba:ff:30: 27:c3:96:a9:0c:33:24:b0:f5:56:93:92:7f:d4:8a:f8:1b:57: be:b9:04:95:b3:ad:a4:f3:8d:f6:cb:a4:36:3e:21:ca:85:84: 77:f1:30:44:b2:e7:2e:a0:1d:0b:41:8b:a2:58:c1:dd:34:45: f0:26:96:ae:e5:7a:47:6a:87:e3:7c:9e:e1:d4:b2:15:6e:73: a1:41:c0:f9:5f:4a:8a:a0:4e:79:a8:20:d4:e4:10:ff:ef:c1: 7a:59:5d:15:8b:43:81:e7:90:f3:51:4c:8b:46:51:3c:c0:e5: 28:25:b7:9d:57:5c:87:a6:08:3d:1b:07:03:0d:2c:bd:71:5d: e9:60:46:1b:d7:77:2b:94:b7:08:9d:66:9d:d9:27:01:8f:09: 4b:60:b7:c6 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAnZhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExOTE3NTgyMloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzUzMTkxMTAvBgNVBAUTKEE2RTY0N0I5QTQ0RkFBQTczRUJCODIw NDA1MENDNjRDQ0E0NTk4RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQsUcEPwg2zrD1oX2zVWdLV4Gi63/P8udJVBqwhWfLK66K/8E1Ap6SHK+/PUYf g5DM2kMuA7Z0LrZYXrMgMGO3HHKXARsfdTEafK4FI9xztjvFrlaCv7ux+posmNQt VpfNVtfQdw5JpcazH86CQuUvLQnxudpP4Z86cxzJyBhkXRJdAS3nfec9mcp8J1Qv snoD8qe5yEr22t4XGPMs0IJbLz7wwrn+HwjvUBgIMcGdq49P/Ld9PXNWLrrv4e+x 3TYWpfgq07c1lzi/iYInrPxWzC1sK94CpJNIKtOyh5NjezIjm9C4xPIjFCNqSNFP 3fz6Hr6RfMoBCfznc9c6tJBvAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUpuZHuaRP qqc+u4IEBQzGTMpFmOowHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM1MzE5LzAyNUQ3QjVDOEMyRDExRUY4MTIyRUMxMUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDNTMxOS8wMjVEN0I1QzhDMkQxMUVGODEyMkVDMTFDNEY5QUUwMi9wdVpIdWFS UHFxYy11NElFQlF6R1RNcEZtT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlcIMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9FtAMA0G CSqGSIb3DQEBCwUAA4IBAQCVlz9NR57fFycX2DS+9FuIEOGR4Ovja6demIqnJONT mgshf9jeh5bsqIoTy1OTlfhn0ui/Dh2YeVP5YXQhaNA4VMR5prR4jenKC9H/oGUZ UqWxYG3DDSK24YnaTKiD8B2YV3BT0EPHxNq6/zAnw5apDDMksPVWk5J/1Ir4G1e+ uQSVs62k8432y6Q2PiHKhYR38TBEsucuoB0LQYuiWMHdNEXwJpau5XpHaofjfJ7h 1LIVbnOhQcD5X0qKoE55qCDU5BD/78F6WV0Vi0OB55DzUUyLRlE8wOUoJbedV1yH pgg9GwcDDSy9cV3pYEYb13crlLcInWad2ScBjwlLYLfG -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:05 2025 by rpki-client