This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer File: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer (raw, json) Hash identifier: tOfS/M+Lrcc/aA8fk5A3lvS203xE4P5/0F5VjSuTTGA= Subject key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027820 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 26 Nov 2025 01:55:52 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 135348 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 11:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161824 (0x27820) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 26 01:55:52 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91F277D, serialNumber=C88D55B7BFD54388B610206AA411D2E199779017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:de:d6:fe:26:2c:27:07:31:81:a1:59:07:c4: 3f:cf:2a:78:29:cf:e3:49:3c:a7:e4:f0:51:5f:f5: 5b:aa:c9:de:f2:21:d4:94:d3:17:6c:19:a0:23:9b: f9:62:11:cd:fd:ff:5e:c5:a0:0f:a8:21:e1:2d:25: 23:7e:e8:91:d3:a7:62:5a:65:ca:f3:5a:10:39:11: 7c:bc:78:4d:c8:34:69:1d:4c:ea:4b:52:f9:97:83: 37:d5:2a:09:ff:f1:af:22:2c:67:f8:40:2f:fa:99: cf:25:7b:23:22:a5:96:98:5d:aa:ee:81:a5:6e:57: ae:42:e6:a8:1d:48:c0:b0:45:19:4d:f6:2d:0f:98: 7b:c5:7e:fc:58:2c:10:1d:ca:ab:db:d0:1c:34:ea: ab:2b:52:d1:8e:71:a2:82:89:96:f3:c8:ee:54:3a: 7c:10:84:6a:e2:d8:a2:aa:a2:2b:02:ca:c6:f9:15: 09:0d:5a:df:fe:43:18:14:f6:54:4d:35:93:d0:ea: d5:b1:80:b5:db:b1:ef:af:54:e9:d3:04:10:fd:ab: 25:c3:ca:2a:21:b8:ca:6a:d3:90:13:35:79:fe:2d: e8:80:e8:19:ce:e6:d1:ba:0c:45:8c:55:62:0b:3c: d3:09:2a:ec:7c:61:3a:65:e9:67:1b:06:d6:23:15: 3b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 135348 Signature Algorithm: sha256WithRSAEncryption cb:e4:04:be:77:51:4b:be:e6:5c:ad:9d:26:30:70:7f:3e:75: 15:0d:46:33:d3:78:13:3e:64:92:e4:9c:e8:14:7d:d5:b0:df: 79:cd:b9:7c:47:a7:d5:84:af:41:c9:19:fa:81:30:c7:81:27: fe:4b:62:4a:e7:c7:32:03:08:d9:6f:e2:96:0b:2b:e1:75:ac: b3:7f:92:44:7a:02:ab:44:cc:37:c5:18:3b:9a:7d:ed:9c:25: 4d:55:a3:82:6c:2f:20:1c:92:86:cc:da:1c:ef:9e:71:cc:bd: ab:22:ce:fd:08:90:70:5e:a8:ac:ea:32:07:91:c0:df:a9:2d: 2a:a1:91:17:a7:a2:ae:85:d3:29:bb:7a:c3:2a:1c:f6:30:75: 4e:06:e6:da:7f:3a:82:64:0f:a6:61:52:d8:2d:a4:9c:26:1c: 1e:5e:1c:99:b5:e2:24:81:08:d8:ee:cb:b5:79:9d:81:9c:c7: da:ee:66:21:aa:2f:63:1e:96:ec:87:66:c4:eb:b2:d8:7b:b2: 53:48:a6:8a:ee:00:4d:61:75:ac:53:ce:ee:1b:e6:ad:da:72: f5:dc:5f:bc:d5:39:e7:d3:45:ac:17:10:ec:fb:19:61:c7:a9: 33:50:26:62:c1:29:c9:7b:c2:e3:3f:bb:87:c2:bd:55:83:bf: f3:1e:f1:aa -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIDAnggMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNjAxNTU1MloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjI3N0QxMTAvBgNVBAUTKEM4OEQ1NUI3QkZENTQzODhCNjEwMjA2 QUE0MTFEMkUxOTk3NzkwMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU3tb+JiwnBzGBoVkHxD/PKngpz+NJPKfk8FFf9Vuqyd7yIdSU0xdsGaAjm/li Ec39/17FoA+oIeEtJSN+6JHTp2JaZcrzWhA5EXy8eE3INGkdTOpLUvmXgzfVKgn/ 8a8iLGf4QC/6mc8leyMipZaYXarugaVuV65C5qgdSMCwRRlN9i0PmHvFfvxYLBAd yqvb0Bw06qsrUtGOcaKCiZbzyO5UOnwQhGri2KKqoisCysb5FQkNWt/+QxgU9lRN NZPQ6tWxgLXbse+vVOnTBBD9qyXDyiohuMpq05ATNXn+LeiA6BnO5tG6DEWMVWIL PNMJKux8YTpl6WcbBtYjFTuVAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUyI1Vt7/V Q4i2ECBqpBHS4Zl3kBcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYyNzdELzFCODhEMkEwNzRGMDExRUI4Q0UzRjcxQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGMjc3RC8xQjg4RDJBMDc0RjAxMUVCOENFM0Y3MUNDNEY5QUUwMi95STFWdDdf VlE0aTJFQ0JxcEJIUzRabDNrQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhC0MA0GCSqGSIb3DQEBCwUAA4IBAQDL5AS+d1FLvuZcrZ0mMHB/PnUV DUYz03gTPmSS5JzoFH3VsN95zbl8R6fVhK9ByRn6gTDHgSf+S2JK58cyAwjZb+KW Cyvhdayzf5JEegKrRMw3xRg7mn3tnCVNVaOCbC8gHJKGzNoc755xzL2rIs79CJBw Xqis6jIHkcDfqS0qoZEXp6KuhdMpu3rDKhz2MHVOBubafzqCZA+mYVLYLaScJhwe XhyZteIkgQjY7su1eZ2BnMfa7mYhqi9jHpbsh2bE67LYe7JTSKaK7gBNYXWsU87u G+at2nL13F+81Tnn00WsFxDs+xlhx6kzUCZiwSnJe8LjP7uHwr1Vg7/zHvGq -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:07 2025 by rpki-client