This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer File: rLcCUesVt11CKaohMePZqHwpRcA.cer (raw, json) Hash identifier: vgSDhYMX8v23nLyndLVlpvhfeucgY81hFIyCfd6xFok= Subject key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02772B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 23 Nov 2025 14:53:07 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 153379 IP: 2001:df4:82c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161579 (0x2772b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 23 14:53:07 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:c3:a8:be:a6:66:cd:fb:fc:99:71:7e:58: 00:61:97:09:4f:7d:4c:af:9c:85:b4:1f:7b:ca:b7: a8:b7:29:bd:50:01:05:43:3f:22:47:01:74:a4:3a: ca:3a:ab:03:fa:13:74:06:ab:d1:cf:68:1c:11:83: 89:ad:94:86:ed:11:0c:de:ee:c4:c4:4a:8f:0c:9e: 58:4e:ce:0d:77:30:5d:be:af:89:2a:a4:8f:fb:bd: 77:cd:c8:0f:ed:88:37:f6:6e:64:b9:d6:f7:c0:5f: b1:01:41:b6:c3:9a:14:a0:da:5b:f1:4a:59:1b:45: ed:11:f9:25:58:32:c9:1f:01:a4:dc:1d:4f:6a:0f: 16:5e:ac:e3:4d:9f:1d:77:1a:85:26:98:10:11:c8: 1d:5e:a0:c2:60:1f:8b:fd:04:c3:24:61:f6:32:9c: e0:7a:96:83:a3:13:d4:85:2d:cd:38:f3:89:66:c0: c2:2a:7c:50:41:9d:7d:28:c7:9b:07:e1:25:52:c2: f5:f9:5b:59:53:68:a7:6d:6b:6d:eb:ab:ba:4c:5f: 7a:85:f9:4f:fe:3b:35:d7:ca:bf:e4:fb:7d:02:e8: d6:df:ce:0c:cd:7e:49:77:ad:fc:97:09:3c:f0:d6: 0e:b2:50:65:14:11:ae:27:94:45:3b:6b:36:5c:dd: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153379 sbgp-ipAddrBlock: critical IPv6: 2001:df4:82c0::/48 Signature Algorithm: sha256WithRSAEncryption 2f:9d:db:33:9c:24:78:1b:de:57:53:28:3b:16:32:45:2c:b6: f7:10:f1:cd:a2:3f:2d:6d:82:11:87:3c:7d:76:6d:92:2d:66: e3:ac:52:20:a0:c0:fd:f8:28:f1:63:5b:da:eb:91:99:33:ba: 96:f6:3c:76:a6:9c:96:ff:1b:e0:3f:da:ed:c5:55:17:dc:fe: de:2a:3f:6b:d2:f4:1d:64:6f:e3:f9:17:69:36:77:08:ae:93: 8f:26:00:3a:c8:2b:f4:32:60:15:ec:3a:5e:74:05:a6:ae:dd: 00:c4:02:e1:41:51:b5:01:8a:f5:5f:5a:e1:43:51:f5:f7:c1: f6:9d:fa:52:96:1a:bd:5f:ef:5c:20:54:ba:0c:76:37:a5:8f: 18:21:6d:1c:89:63:45:f4:60:6b:20:1e:83:45:a3:42:9d:cc: 1a:26:f2:0f:b4:85:4d:e6:5c:74:8a:36:fd:89:db:20:74:43: ba:38:eb:f1:58:ab:ce:6f:72:fd:62:a1:6d:6c:be:7c:3c:32: 14:a4:0f:0a:b0:a1:a3:cb:93:f8:47:8c:88:2e:96:9c:12:7a: bc:dd:75:24:22:55:3e:63:b1:3a:d5:60:7e:89:06:33:9f:f7: 57:f0:bc:58:27:66:4f:67:d7:73:c0:64:db:5c:e2:68:17:c8: 3f:8b:01:56 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAncrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMzE0NTMwN1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRUZDOTQxMTAvBgNVBAUTKEFDQjcwMjUxRUIxNUI3NUQ0MjI5QUEy MTMxRTNEOUE4N0MyOTQ1QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOtMOovqZmzfv8mXF+WABhlwlPfUyvnIW0H3vKt6i3Kb1QAQVDPyJHAXSkOso6 qwP6E3QGq9HPaBwRg4mtlIbtEQze7sTESo8MnlhOzg13MF2+r4kqpI/7vXfNyA/t iDf2bmS51vfAX7EBQbbDmhSg2lvxSlkbRe0R+SVYMskfAaTcHU9qDxZerONNnx13 GoUmmBARyB1eoMJgH4v9BMMkYfYynOB6loOjE9SFLc0484lmwMIqfFBBnX0ox5sH 4SVSwvX5W1lTaKdta23rq7pMX3qF+U/+OzXXyr/k+30C6NbfzgzNfkl3rfyXCTzw 1g6yUGUUEa4nlEU7azZc3cYvAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUrLcCUesV t11CKaohMePZqHwpRcAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVGQzk0L0IxNDQ5QzRFOTREQTExRUY4OTA4NkQyMUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFRkM5NC9CMTQ0OUM0RTk0REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVz VnQxMUNLYW9oTWVQWnFId3BSY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlcjMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9ILAMA0G CSqGSIb3DQEBCwUAA4IBAQAvndsznCR4G95XUyg7FjJFLLb3EPHNoj8tbYIRhzx9 dm2SLWbjrFIgoMD9+CjxY1va65GZM7qW9jx2ppyW/xvgP9rtxVUX3P7eKj9r0vQd ZG/j+RdpNncIrpOPJgA6yCv0MmAV7DpedAWmrt0AxALhQVG1AYr1X1rhQ1H198H2 nfpSlhq9X+9cIFS6DHY3pY8YIW0ciWNF9GBrIB6DRaNCncwaJvIPtIVN5lx0ijb9 idsgdEO6OOvxWKvOb3L9YqFtbL58PDIUpA8KsKGjy5P4R4yILpacEnq83XUkIlU+ Y7E61WB+iQYzn/dX8LxYJ2ZPZ9dzwGTbXOJoF8g/iwFW -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:01 2025 by rpki-client