This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer File: tgEhTJYoyfQh02c0s4HN7JKJR0g.cer (raw, json) Hash identifier: wM0DjHxuDYDdffA12sdLzX2WNfkQvglKEo/vRO3GIe8= Subject key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02732A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft caRepository: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 05 Nov 2025 01:38:43 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 203.19.222.0/24 IP: 203.89.5.0/24 IP: 2001:df0:fa::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160554 (0x2732a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 5 01:38:43 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:74:07:ae:59:3e:1e:5d:0f:2d:8c:58:40:03: 62:f0:de:03:aa:b3:4c:3a:90:01:43:3c:cc:53:8b: 7b:7c:04:8e:dc:01:96:7f:6a:76:67:68:ca:e2:96: d2:49:22:63:eb:3b:69:15:bc:d6:ab:b8:d5:c2:1f: 66:85:3d:c8:5b:3e:8b:47:04:f7:00:11:fe:bb:90: 31:9d:67:ed:43:2d:0a:04:64:3e:71:33:b3:fb:4a: b3:9f:a5:20:3a:ba:40:bf:4b:70:a4:68:76:38:68: c4:f8:9f:69:26:c0:05:46:87:ed:7b:19:47:c9:da: 29:a1:71:bd:27:37:b4:3d:f0:5e:e7:7d:c1:39:23: 96:79:7e:35:00:92:b8:80:12:5e:53:de:42:5a:ca: 01:ab:fe:96:e7:13:39:28:63:f0:8f:b3:e6:33:20: 35:27:e5:b3:c8:9d:a6:d2:c5:98:81:04:8a:f1:5f: 78:e7:df:78:a5:88:c4:5e:c7:1e:4e:a6:1b:30:9a: da:84:a0:86:fb:36:08:f2:eb:ba:9e:4e:89:14:47: 64:ae:9a:9b:f7:c5:c6:b2:0b:68:97:5b:09:6c:96: 9d:4d:07:58:aa:fd:63:80:ad:9b:71:3a:14:c8:df: fc:4f:04:54:2a:3c:48:b2:e4:bc:1e:79:3b:a0:df: f3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.19.222.0/24 203.89.5.0/24 IPv6: 2001:df0:fa::/48 Signature Algorithm: sha256WithRSAEncryption 1c:82:70:0b:47:30:92:d6:de:7f:32:8b:e6:f1:b0:d2:69:4c: 18:39:6e:af:3b:fc:19:74:70:69:9a:21:9b:f2:19:ec:3d:72: 56:e3:58:66:4f:86:1b:87:65:8f:62:f7:f8:e5:eb:2f:a9:71: 36:9b:43:41:5b:ad:f0:b2:d6:6d:68:18:a9:16:18:c3:b9:9c: 1a:ae:8d:0d:17:7a:1a:90:e9:b4:ce:0b:61:59:d5:eb:5c:1d: d2:57:fb:b8:12:04:c3:b6:fe:ef:c3:d4:1b:12:0c:13:29:41: 0f:8d:9d:d4:64:44:12:64:f8:ed:b8:55:35:5f:de:1f:41:ca: 0e:5d:be:d0:5b:ba:77:89:4a:d4:4e:10:6f:10:d2:4f:ff:2b: de:df:17:44:6e:8c:72:a9:23:54:fb:3a:30:c1:ad:94:b1:35: 28:c1:a2:41:0d:06:f9:e4:5c:5d:73:97:40:2a:31:5a:ca:3b: 0b:ea:34:1d:cd:df:d8:cc:f0:18:e6:bf:24:e8:48:d3:2e:42: 37:38:00:be:8c:00:02:ca:90:e4:74:f9:71:98:fe:1e:6f:8c: 4e:19:2d:1d:60:cf:a8:e1:08:dc:66:c4:a7:cd:b9:2b:98:0e: 97:98:7b:81:2a:ff:a6:eb:df:af:d6:bb:5c:b5:2d:9c:1e:36: ae:e8:e9:8a -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIDAnMqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNTAxMzg0M1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNzU0NEYxMTAvBgNVBAUTKEI2MDEyMTRDOTYyOEM5RjQyMUQzNjcz NEIzODFDREVDOTI4OTQ3NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYdAeuWT4eXQ8tjFhAA2Lw3gOqs0w6kAFDPMxTi3t8BI7cAZZ/anZnaMriltJJ ImPrO2kVvNaruNXCH2aFPchbPotHBPcAEf67kDGdZ+1DLQoEZD5xM7P7SrOfpSA6 ukC/S3CkaHY4aMT4n2kmwAVGh+17GUfJ2imhcb0nN7Q98F7nfcE5I5Z5fjUAkriA El5T3kJaygGr/pbnEzkoY/CPs+YzIDUn5bPInabSxZiBBIrxX3jn33iliMRexx5O phswmtqEoIb7Ngjy67qeTokUR2Sumpv3xcayC2iXWwlslp1NB1iq/WOArZtxOhTI 3/xPBFQqPEiy5LweeTug3/NnAgMBAAGjggMKMIIDBjAdBgNVHQ4EFgQUtgEhTJYo yfQh02c0s4HN7JKJR0gwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTc1NDRGLzkwMTJDQTQ0MjI4ODExRUQ4OTE1NUUzNUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3NTQ0Ri85MDEyQ0E0NDIyODgxMUVEODkxNTVFMzVDNEY5QUUwMi90Z0VoVEpZ b3lmUWgwMmMwczRITjdKS0pSMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8EJzAl MBIEAgABMAwDBADLE94DBADLWQUwDwQCAAIwCQMHACABDfAA+jANBgkqhkiG9w0B AQsFAAOCAQEAHIJwC0cwktbefzKL5vGw0mlMGDlurzv8GXRwaZohm/IZ7D1yVuNY Zk+GG4dlj2L3+OXrL6lxNptDQVut8LLWbWgYqRYYw7mcGq6NDRd6GpDptM4LYVnV 61wd0lf7uBIEw7b+78PUGxIMEylBD42d1GREEmT47bhVNV/eH0HKDl2+0Fu6d4lK 1E4QbxDST/8r3t8XRG6McqkjVPs6MMGtlLE1KMGiQQ0G+eRcXXOXQCoxWso7C+o0 Hc3f2MzwGOa/JOhI0y5CNzgAvowAAsqQ5HT5cZj+Hm+MThktHWDPqOEI3GbEp825 K5gOl5h7gSr/puvfr9a7XLUtnB42rujpig== -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:13 2025 by rpki-client