This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer File: r-cn5CCdzfgnYldLXjPICDeHoY8.cer (raw, json) Hash identifier: z3RG8uU1AdQeLdo7PgAMC3+WZICnlasP9KMQdBOK9kU= Subject key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0274FD Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft caRepository: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 13 Nov 2025 13:55:18 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 24392 IP: 202.179.64.0/19 IP: 2407:5c00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161021 (0x274fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 13 13:55:18 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:b1:93:d8:2a:4e:58:25:fd:93:21:f8:f5: 80:8b:09:93:5a:d5:26:ca:a5:aa:af:1e:d8:91:65: f4:f2:58:55:9c:81:0e:7d:d8:03:bc:6b:b5:c5:61: 56:37:f9:a4:bf:40:ea:09:57:35:b4:ae:63:f9:91: 84:e2:f6:71:d2:07:4b:a1:80:c0:a4:10:13:2f:25: 0d:6d:36:51:bd:71:cd:25:b0:06:59:93:2d:d4:bd: d9:e9:03:66:b0:30:fe:40:b4:73:8b:6c:27:d9:90: 27:3b:82:de:df:fc:0c:bc:ca:1e:76:f1:f4:d0:6a: 3e:33:45:3b:5c:27:80:b8:dc:9e:b9:44:a8:d6:4c: 72:43:bf:57:6d:bc:a6:e6:01:bd:f6:e8:e3:d2:ba: 41:0c:23:31:74:86:07:87:40:e8:d9:a0:8c:03:d2: 9c:74:c1:17:09:37:6a:42:13:0b:0e:8c:d3:22:0e: fc:c1:e3:b3:79:ff:15:0f:3b:38:30:ec:36:d7:d5: 0b:d6:ed:32:41:67:af:f4:b4:2b:e1:9a:42:fc:c9: 14:88:7f:61:7a:53:80:cb:08:21:28:c8:24:17:7c: 3c:3f:f5:29:cf:16:64:27:f2:7b:16:87:7f:e1:37: c8:a1:26:fd:f9:30:80:a5:be:d3:2a:77:09:87:68: 38:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24392 sbgp-ipAddrBlock: critical IPv4: 202.179.64.0/19 IPv6: 2407:5c00::/32 Signature Algorithm: sha256WithRSAEncryption 03:41:12:fc:82:25:86:1e:17:85:ac:25:1d:10:c9:a6:21:09: f3:0b:6a:89:4e:d1:ab:a0:e4:22:5a:6a:e8:59:c8:f4:11:cc: c2:4a:d8:07:04:41:5a:2e:e6:40:88:5d:b3:b4:74:65:1e:1d: 1b:f3:cf:72:04:d7:be:45:9e:ec:d6:ec:a4:62:ed:f4:40:fd: a4:91:0a:1b:98:de:02:29:d4:08:fb:97:57:1f:24:f9:eb:80: 77:86:a2:db:78:b6:7a:fb:6a:7e:d4:ba:46:55:bf:3f:69:11: 24:95:f2:70:15:5b:99:08:d0:b2:63:43:a4:73:cb:63:85:b4: f2:d9:21:02:e0:79:48:49:be:69:91:e0:71:fc:b1:51:3b:01: 7a:ff:97:62:21:3d:e4:8a:bd:bd:35:d4:9c:a8:08:0c:2a:7e: 42:2c:39:a7:26:9e:28:ac:50:55:7d:0a:c6:90:b6:82:be:2c: 5e:cf:8e:98:d8:93:f8:e8:ef:33:a0:f5:4a:53:8a:9d:31:0f: de:a4:6f:85:65:b4:2a:0f:de:3b:32:1f:54:fd:2b:f5:6e:b8: 60:8c:2e:4b:7f:81:88:ea:21:d0:2d:d8:6f:18:bb:78:c2:98: 94:91:65:6d:b2:02:dd:b1:ef:a4:3a:48:e3:77:2a:8a:43:1f: 9b:4c:c6:12 -----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgIDAnT9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMzEzNTUxOFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0 QjVFMzNDODA4Mzc4N0ExOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWELGT2CpOWCX9kyH49YCLCZNa1SbKpaqvHtiRZfTyWFWcgQ592AO8a7XFYVY3 +aS/QOoJVzW0rmP5kYTi9nHSB0uhgMCkEBMvJQ1tNlG9cc0lsAZZky3UvdnpA2aw MP5AtHOLbCfZkCc7gt7f/Ay8yh528fTQaj4zRTtcJ4C43J65RKjWTHJDv1dtvKbm Ab326OPSukEMIzF0hgeHQOjZoIwD0px0wRcJN2pCEwsOjNMiDvzB47N5/xUPOzgw 7DbX1QvW7TJBZ6/0tCvhmkL8yRSIf2F6U4DLCCEoyCQXfDw/9SnPFmQn8nsWh3/h N8ihJv35MIClvtMqdwmHaDjXAgMBAAGjggMdMIIDGTAdBgNVHQ4EFgQUr+cn5CCd zfgnYldLXjPICDeHoY8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVBRTVGLzhCNzlCNjc4ODg1MTExRTZBNjkyREU3OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUND ZHpmZ25ZbGRMWGpQSUNEZUhvWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICX0gwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAXKs0AwDQQCAAIw BwMFACQHXAAwDQYJKoZIhvcNAQELBQADggEBAANBEvyCJYYeF4WsJR0QyaYhCfML aolO0aug5CJaauhZyPQRzMJK2AcEQVou5kCIXbO0dGUeHRvzz3IE175FnuzW7KRi 7fRA/aSRChuY3gIp1Aj7l1cfJPnrgHeGott4tnr7an7UukZVvz9pESSV8nAVW5kI 0LJjQ6Rzy2OFtPLZIQLgeUhJvmmR4HH8sVE7AXr/l2IhPeSKvb011JyoCAwqfkIs OacmniisUFV9CsaQtoK+LF7PjpjYk/jo7zOg9UpTip0xD96kb4VltCoP3jsyH1T9 K/VuuGCMLkt/gYjqIdAt2G8Yu3jCmJSRZW2yAt2x76Q6SON3KopDH5tMxhI= -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:32 2025 by rpki-client