This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer File: uo1v5dgowFOZs-GqZY_AWIYf3OA.cer (raw, json) Hash identifier: Wztp/0Yo8JPoox3kljDnD7TXPH3SpUlVjOYGyBTcwbQ= Subject key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027AD6 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 17:12:01 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 4767 IP: 202.8.65.0 -- 202.8.71.255 IP: 203.159.0.0/18 IP: 2403:e240::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162518 (0x27ad6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 17:12:01 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:69:e3:df:36:54:1b:8b:b6:d0:3f:d5:cb:c9: 46:7e:5c:3f:f9:ba:0d:77:41:ad:a0:d7:9e:1b:0d: d2:df:65:2e:3b:80:c2:56:8f:30:47:cc:e6:b2:58: d4:d2:8f:14:45:12:c2:f7:0e:96:e2:07:28:7d:74: 2c:f1:6a:a1:8d:96:49:af:a6:19:f1:4b:38:38:1e: c8:f6:ec:36:25:c6:81:fe:95:e2:54:96:59:cd:e6: ae:3a:6e:56:30:fe:a1:14:d6:8f:66:e3:1d:26:7d: ea:e4:78:93:46:18:56:d8:0a:1d:21:0e:36:49:9c: d1:80:42:83:74:f4:77:ab:5d:01:7f:09:aa:09:31: 42:ab:ad:f5:7e:20:ed:69:91:51:a0:6a:38:0d:9f: 47:3a:0e:6f:b8:ab:9a:57:9c:9a:1d:77:50:c3:0e: af:19:4c:b3:42:51:fc:c8:84:0c:a7:0c:a0:33:4e: 97:f3:4c:5c:b7:af:19:da:de:a9:6f:6e:74:84:71: 07:38:b2:73:40:78:37:10:40:61:e1:49:8e:ff:6f: 8f:94:60:0d:0c:d5:54:e0:4f:4a:14:29:14:26:ed: f9:db:21:b9:b4:ce:48:30:3e:e7:b8:0c:77:ef:bb: e6:a8:a4:12:56:ef:85:ab:9a:c6:d3:41:a9:0f:60: 56:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 4767 sbgp-ipAddrBlock: critical IPv4: 202.8.65.0-202.8.71.255 203.159.0.0/18 IPv6: 2403:e240::/32 Signature Algorithm: sha256WithRSAEncryption 46:d1:aa:02:29:17:c7:6e:73:11:65:cf:91:c3:3a:5c:9d:16: 47:59:cc:f3:75:9e:d0:33:0e:c0:1b:3d:0c:54:7a:5b:f0:27: 95:a3:88:74:46:91:12:a8:ea:b8:3b:d1:9a:35:cd:e5:39:be: 38:a5:82:7a:ee:ef:0e:d4:ef:0f:93:64:5d:2f:a8:31:5c:6f: df:b8:66:b2:fd:80:c3:e9:51:16:3c:ba:91:c7:6e:2f:d6:7f: 1b:5e:3c:7a:2e:e2:5c:40:b0:fb:4b:21:e1:95:2d:f9:73:25: b0:65:24:72:70:2b:fc:9d:c8:8c:89:2a:ed:d4:8e:29:44:f0: 23:82:b0:ee:bb:a5:dc:ea:2b:4d:26:ac:3a:b0:f0:fc:d2:a7: 1a:66:5e:aa:87:86:df:92:b1:ab:ca:52:32:83:b1:66:be:80: 36:88:f8:17:f5:72:19:6e:f3:26:a7:27:98:ea:dd:36:13:f4: b7:0c:7d:ea:20:7e:52:dd:6f:df:2d:f7:66:43:b8:35:6e:e6: 0c:49:e6:8d:86:5b:e7:f6:43:0c:d4:37:07:3c:9a:4a:98:20: dc:a0:f7:b3:21:37:ca:fd:e0:45:a0:b8:c7:9a:ec:ce:8f:99: 42:28:0b:17:6f:2b:66:98:51:7f:9e:ed:e0:15:5b:58:07:68: 19:c2:25:37 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIDAnrWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjE3MTIwMVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQUFGMDIxMTAvBgNVBAUTKEJBOEQ2RkU1RDgyOEMwNTM5OUIzRTFB QTY1OEZDMDU4ODYxRkRDRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKaePfNlQbi7bQP9XLyUZ+XD/5ug13Qa2g154bDdLfZS47gMJWjzBHzOayWNTS jxRFEsL3DpbiByh9dCzxaqGNlkmvphnxSzg4Hsj27DYlxoH+leJUllnN5q46blYw /qEU1o9m4x0mferkeJNGGFbYCh0hDjZJnNGAQoN09HerXQF/CaoJMUKrrfV+IO1p kVGgajgNn0c6Dm+4q5pXnJodd1DDDq8ZTLNCUfzIhAynDKAzTpfzTFy3rxna3qlv bnSEcQc4snNAeDcQQGHhSY7/b4+UYA0M1VTgT0oUKRQm7fnbIbm0zkgwPue4DHfv u+aopBJW74WrmsbTQakPYFbRAgMBAAGjggMrMIIDJzAdBgNVHQ4EFgQUuo1v5dgo wFOZs+GqZY/AWIYf3OAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUFBRjAyL0VBQ0Q0ODc2NzY0QTExRTk4Qzg3QjU4MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBQUYwMi9FQUNENDg3Njc2NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRn b3dGT1pzLUdxWllfQVdJWWYzT0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICEp8wPAYIKwYBBQUHAQcBAf8ELTArMBoEAgABMBQwDAMEAMoIQQMEA8oI QAMEBsufADANBAIAAjAHAwUAJAPiQDANBgkqhkiG9w0BAQsFAAOCAQEARtGqAikX x25zEWXPkcM6XJ0WR1nM83We0DMOwBs9DFR6W/AnlaOIdEaREqjquDvRmjXN5Tm+ OKWCeu7vDtTvD5NkXS+oMVxv37hmsv2Aw+lRFjy6kcduL9Z/G148ei7iXECw+0sh 4ZUt+XMlsGUkcnAr/J3IjIkq7dSOKUTwI4Kw7rul3OorTSasOrDw/NKnGmZeqoeG 35Kxq8pSMoOxZr6ANoj4F/VyGW7zJqcnmOrdNhP0twx96iB+Ut1v3y33ZkO4NW7m DEnmjYZb5/ZDDNQ3BzyaSpgg3KD3syE3yv3gRaC4x5rszo+ZQigLF28rZphRf57t 4BVbWAdoGcIlNw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:20 2025 by rpki-client