This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer File: tMuMrEr2jfxZVs5gy7DYDTECkYw.cer (raw, json) Hash identifier: VnfWkbuqaITBxH2r6gf0/arVavOk7ONdEDfhyxc8wI4= Subject key identifier: B4:CB:8C:AC:4A:F6:8D:FC:59:56:CE:60:CB:B0:D8:0D:31:02:91:8C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027532 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 14 Nov 2025 12:20:20 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 137936 IP: 2001:df4:d0c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161074 (0x27532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 14 12:20:20 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9110477, serialNumber=B4CB8CAC4AF68DFC5956CE60CBB0D80D3102918C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:15:d6:e0:b4:fe:4a:cd:3a:f6:29:43:d4: d7:9b:d6:7b:e0:4e:ff:11:54:ed:de:12:94:0b:b8: 75:14:96:ad:a8:63:b4:5c:c3:c4:5a:5f:f4:e2:f6: 34:7d:c1:77:85:dd:a5:2f:dd:23:66:e8:e3:7c:e1: 63:f2:23:a1:ef:e7:da:02:a3:fb:36:5f:a4:0e:f6: 7a:71:51:7a:f0:e5:bd:81:fd:4f:fc:69:3d:5b:12: 27:df:5f:9d:03:25:1f:47:fa:dc:01:8a:cf:b4:f0: 2c:37:1b:04:f0:75:c3:a5:c3:8a:74:cd:64:a7:67: 1d:45:97:dd:76:9f:87:19:08:64:1b:24:9a:ad:e2: e7:19:0b:3e:78:45:84:cc:de:1f:76:00:a4:15:f9: da:60:fe:12:f2:92:f3:61:d4:67:a7:29:f9:7e:f7: c0:48:82:a6:11:d0:30:73:d1:a5:72:2f:de:04:14: 5a:6b:bd:eb:b1:15:75:40:f1:79:f3:d9:a4:52:dc: 54:1a:46:87:52:64:25:4d:5f:c8:d5:f6:b0:c5:3f: ad:39:9e:a5:fb:5d:fc:c2:ba:ff:9b:53:97:8f:69: ac:9c:73:61:b5:c8:3a:32:aa:66:05:75:8b:eb:bc: e7:40:b5:ca:2e:b2:44:a6:e3:76:cb:f2:6b:f4:99: 8b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CB:8C:AC:4A:F6:8D:FC:59:56:CE:60:CB:B0:D8:0D:31:02:91:8C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137936 sbgp-ipAddrBlock: critical IPv6: 2001:df4:d0c0::/48 Signature Algorithm: sha256WithRSAEncryption 05:18:ca:fd:10:43:65:f1:93:20:50:26:99:16:b7:ca:7a:f7: cf:18:2e:fe:03:5d:a8:32:97:13:78:b3:88:09:d4:a9:4d:c3: 6e:a7:da:58:6f:2f:d8:56:76:33:45:51:de:d2:bc:9a:6d:8f: e8:40:42:1d:f0:77:ac:bb:bf:6d:78:43:fe:b8:8d:4d:04:4e: 08:0d:09:8a:2d:15:fa:db:36:70:15:c3:8b:11:30:fd:8b:40: f8:c2:a4:a3:88:2a:2d:67:6b:5e:38:33:4c:5e:77:ab:b4:bc: 8d:38:de:71:9f:5c:da:3e:5c:0e:40:6a:3b:2f:03:b9:fc:32: 23:46:56:a6:45:bf:59:8e:62:45:00:5a:bc:c1:8a:86:00:a3: 97:0d:58:c6:f7:87:fa:59:ab:81:f5:d1:22:5a:4c:b8:8a:69: 86:80:79:b1:a9:64:67:be:ac:30:e6:8f:7e:37:6b:1b:50:52: dc:b1:ea:11:4c:72:91:dc:41:4a:16:c3:7d:17:aa:eb:5a:7a: fb:90:e8:da:b4:f7:ea:af:59:ed:49:5c:ab:c3:f1:65:6f:6c: fc:ce:06:b3:50:c5:2a:d7:35:b2:42:0e:4c:7f:33:c3:0d:27: cd:a0:e5:d6:02:fb:55:67:49:1c:54:2d:12:16:93:00:d9:e3: b8:6a:81:8d -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAnUyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNDEyMjAyMFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMTA0NzcxMTAvBgNVBAUTKEI0Q0I4Q0FDNEFGNjhERkM1OTU2Q0U2 MENCQjBEODBEMzEwMjkxOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzMhXW4LT+Ss069ilD1Neb1nvgTv8RVO3eEpQLuHUUlq2oY7Rcw8RaX/Ti9jR9 wXeF3aUv3SNm6ON84WPyI6Hv59oCo/s2X6QO9npxUXrw5b2B/U/8aT1bEiffX50D JR9H+twBis+08Cw3GwTwdcOlw4p0zWSnZx1Fl912n4cZCGQbJJqt4ucZCz54RYTM 3h92AKQV+dpg/hLykvNh1GenKfl+98BIgqYR0DBz0aVyL94EFFprveuxFXVA8Xnz 2aRS3FQaRodSZCVNX8jV9rDFP605nqX7XfzCuv+bU5ePaaycc2G1yDoyqmYFdYvr vOdAtcouskSm43bL8mv0mYtDAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUtMuMrEr2 jfxZVs5gy7DYDTECkYwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTEwNDc3LzU3NTBFMEIyRTlFOTExRUZCNTAyQTU1RkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExMDQ3Ny81NzUwRTBCMkU5RTkxMUVGQjUwMkE1NUZDNEY5QUUwMi90TXVNckVy MmpmeFpWczVneTdEWURURUNrWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhrQMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9NDAMA0G CSqGSIb3DQEBCwUAA4IBAQAFGMr9EENl8ZMgUCaZFrfKevfPGC7+A12oMpcTeLOI CdSpTcNup9pYby/YVnYzRVHe0ryabY/oQEId8Hesu79teEP+uI1NBE4IDQmKLRX6 2zZwFcOLETD9i0D4wqSjiCotZ2teODNMXnertLyNON5xn1zaPlwOQGo7LwO5/DIj RlamRb9ZjmJFAFq8wYqGAKOXDVjG94f6WauB9dEiWky4immGgHmxqWRnvqww5o9+ N2sbUFLcseoRTHKR3EFKFsN9F6rrWnr7kOjatPfqr1ntSVyrw/Flb2z8zgazUMUq 1zWyQg5MfzPDDSfNoOXWAvtVZ0kcVC0SFpMA2eO4aoGN -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:35 2025 by rpki-client