This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer File: yoPUPlpeWcd1mxubL72YqUff07w.cer (raw, json) Hash identifier: gOhu4xaoybcHQGDUk4zPWvqs93fRwn2REQU9FR9pYSw= Subject key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027840 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft caRepository: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 26 Nov 2025 13:13:46 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 17547 AS: 17743 AS: 17761 AS: 45159 IP: 27.96.96.0/19 IP: 49.128.32.0/19 IP: 103.10.100.0/22 IP: 110.92.96.0/19 IP: 118.189.0.0/16 IP: 120.50.32.0/20 IP: 202.63.128.0/19 IP: 202.128.160.0 -- 202.128.223.255 IP: 202.172.32.0/19 IP: 203.123.0.0/19 IP: 203.211.128.0/19 IP: 210.193.0.0/18 IP: 2001:fc0::/32 IP: 2401:3d00::/28 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161856 (0x27840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 26 13:13:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:f9:d2:84:cf:be:08:78:5a:01:50:c7:1c: 14:95:c0:15:2f:05:c8:56:2e:65:5a:3c:20:c1:94: cb:63:49:ea:d6:91:dd:f8:4c:59:d0:0b:cc:0e:b3: c8:ff:13:73:22:07:ed:8c:70:4f:72:92:f6:4d:cd: fc:61:65:35:d0:35:6d:fd:23:c8:e2:de:59:4c:cb: 39:54:12:82:ed:fe:f1:bc:16:ba:07:db:53:c5:85: 7c:1a:97:33:e6:17:62:20:d9:d3:13:4b:88:59:12: 40:92:4b:22:8a:4e:8a:0c:8a:2e:0d:40:53:a9:43: ee:3c:d2:f0:28:23:f4:9b:2b:58:b3:2d:e4:d4:e6: 40:91:53:6a:32:22:89:a9:b1:8a:9b:6d:a3:60:81: fa:12:05:40:19:f6:56:c2:68:bd:dd:a9:74:d7:47: a7:e7:37:76:61:ee:d5:83:ef:df:cf:61:31:7e:99: 15:47:31:b8:3e:cf:56:00:0d:f9:78:a0:78:e5:b2: bf:c4:3a:55:df:3c:df:61:df:b7:fb:ed:6f:cf:3b: 47:71:1c:74:a7:a2:16:1c:d0:2f:db:88:45:c1:0d: 50:76:07:20:b6:c8:27:27:ea:0b:2e:45:81:ec:11: 7d:ee:36:03:b2:03:23:7e:dc:41:79:fb:13:98:f2: a9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 17547 17743 17761 45159 sbgp-ipAddrBlock: critical IPv4: 27.96.96.0/19 49.128.32.0/19 103.10.100.0/22 110.92.96.0/19 118.189.0.0/16 120.50.32.0/20 202.63.128.0/19 202.128.160.0-202.128.223.255 202.172.32.0/19 203.123.0.0/19 203.211.128.0/19 210.193.0.0/18 IPv6: 2001:fc0::/32 2401:3d00::/28 Signature Algorithm: sha256WithRSAEncryption 5a:c6:06:ee:79:f2:d1:54:fc:78:d8:f0:a7:6a:e2:96:19:02: 0c:15:8f:6f:0e:d1:ea:a9:69:ef:0f:d5:cf:be:76:aa:c8:6e: 9b:9f:b6:cf:a6:da:c9:2e:da:e8:ed:18:96:fb:c2:39:b7:c2: f7:3e:85:df:db:75:6d:d0:f8:d6:e8:e4:b9:e0:09:52:c5:a0: 8c:ae:5c:50:c3:e2:40:38:50:82:52:a7:32:58:4d:32:74:6a: 77:de:9f:f8:5d:91:f9:bf:59:f0:41:c2:8b:4f:93:26:08:84: 24:59:43:e3:38:3d:8f:53:5a:79:65:7c:8b:6a:0b:14:50:fd: c9:94:30:80:92:62:59:62:6c:50:d1:45:72:7b:fa:9c:c7:43: 8b:17:19:9b:5a:6e:18:91:28:22:22:5f:fd:a4:75:9c:8b:db: 63:7a:17:d4:42:30:3e:0e:bc:57:9e:e8:2f:ee:22:da:a6:a0: 8a:42:d0:f4:dc:47:80:cf:10:47:a2:5a:c4:9a:7b:30:a2:b3: 7b:85:34:8e:33:18:98:0c:70:09:58:75:38:b5:30:3a:07:81: 82:7d:9b:06:72:95:f9:b3:aa:e2:00:6e:40:05:dd:54:86:33: fc:80:1c:61:6b:3a:08:4b:2d:fd:4a:f2:96:51:54:70:a1:d5: 0e:e4:8d:8d -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIDAnhAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNjEzMTM0NloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMzZERDYxMTAvBgNVBAUTKENBODNENDNFNUE1RTU5Qzc3NTlCMUI5 QjJGQkQ5OEE5NDdERkQzQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbXvnShM++CHhaAVDHHBSVwBUvBchWLmVaPCDBlMtjSerWkd34TFnQC8wOs8j/ E3MiB+2McE9ykvZNzfxhZTXQNW39I8ji3llMyzlUEoLt/vG8FroH21PFhXwalzPm F2Ig2dMTS4hZEkCSSyKKTooMii4NQFOpQ+480vAoI/SbK1izLeTU5kCRU2oyIomp sYqbbaNggfoSBUAZ9lbCaL3dqXTXR6fnN3Zh7tWD79/PYTF+mRVHMbg+z1YADfl4 oHjlsr/EOlXfPN9h37f77W/PO0dxHHSnohYc0C/biEXBDVB2ByC2yCcn6gsuRYHs EX3uNgOyAyN+3EF5+xOY8qmJAgMBAAGjggN6MIIDdjAdBgNVHQ4EFgQUyoPUPlpe Wcd1mxubL72YqUff07wwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTM2REQ2L0RGMzg5NTVFM0IzNzExRTlBMDM4QUIyQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzNkRENi9ERjM4OTU1RTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi95b1BVUGxw ZVdjZDFteHViTDcyWXFVZmYwN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJgYIKwYBBQUHAQgBAf8EFzAV oBMwEQICRIsCAkVPAgJFYQIDALBnMH4GCCsGAQUFBwEHAQH/BG8wbTBVBAIAATBP AwQFG2BgAwQFMYAgAwQCZwpkAwQFblxgAwMAdr0DBAR4MiADBAXKP4AwDAMEBcqA oAMEBcqAwAMEBcqsIAMEBct7AAMEBcvTgAMEBtLBADAUBAIAAjAOAwUAIAEPwAMF BCQBPQAwDQYJKoZIhvcNAQELBQADggEBAFrGBu558tFU/HjY8Kdq4pYZAgwVj28O 0eqpae8P1c++dqrIbpufts+m2sku2ujtGJb7wjm3wvc+hd/bdW3Q+Nbo5LngCVLF oIyuXFDD4kA4UIJSpzJYTTJ0anfen/hdkfm/WfBBwotPkyYIhCRZQ+M4PY9TWnll fItqCxRQ/cmUMICSYllibFDRRXJ7+pzHQ4sXGZtabhiRKCIiX/2kdZyL22N6F9RC MD4OvFee6C/uItqmoIpC0PTcR4DPEEeiWsSaezCis3uFNI4zGJgMcAlYdTi1MDoH gYJ9mwZylfmzquIAbkAF3VSGM/yAHGFrOghLLf1K8pZRVHCh1Q7kjY0= -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:04 2025 by rpki-client