This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer File: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer (raw, json) Hash identifier: iSFvr2sDSO3g1VpVQidlwfwl0I77DROITHiEd/zWpF4= Subject key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6E59 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft caRepository: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 18 Nov 2025 16:34:06 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 155.69.0.0/16 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28249 (0x6e59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 18 16:34:06 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:13:73:96:cf:9a:9d:ff:8d:ed:7a:36:7a:6b: e9:55:c1:40:55:1a:aa:e5:55:55:e6:7a:37:e9:45: 68:13:32:08:45:3c:f1:14:a8:3c:b4:31:7a:b3:b4: 6d:0d:73:2a:99:78:3e:ea:d3:5d:cd:35:20:33:80: bd:0a:91:02:71:4b:08:2e:c2:22:f5:43:89:e5:4b: 00:4f:78:ea:f3:6a:bf:a5:2f:12:e6:d0:d0:9f:c1: be:95:c4:56:bc:00:5f:c8:3b:73:7d:b9:d0:a0:31: 3d:fa:3d:ec:60:76:05:ad:08:99:a6:d5:39:e9:3d: 77:9a:c6:59:3b:e7:5e:e1:f8:e9:4a:8e:1d:46:51: c0:66:63:f3:76:0e:b0:fd:1f:aa:0d:80:50:c6:37: d0:a3:f5:9e:01:c7:e1:03:c8:3e:2f:ea:87:0a:24: 18:9c:31:01:6e:33:7d:1b:cc:fa:f6:4f:35:5d:6b: 65:ce:46:24:cb:19:de:69:2c:48:ff:a2:d6:ea:85: ef:be:e7:7d:24:3a:8e:b3:0b:b6:46:f2:ac:b8:59: d7:51:98:c6:78:95:59:b4:4d:95:96:05:5b:fa:bc: 40:c1:03:5b:9d:65:18:fe:21:71:79:cd:82:af:7c: e8:1c:f3:91:ea:de:2c:0b:20:3d:f8:0a:1a:d0:00: ba:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 155.69.0.0/16 Signature Algorithm: sha256WithRSAEncryption 83:14:f2:df:5c:a9:c8:fe:2c:51:8d:ed:97:9a:b0:30:86:c5: 0d:be:04:d2:14:5a:c7:c1:a7:50:8d:e9:e5:ae:0e:0b:80:8e: 56:8f:c1:ed:2c:cb:68:83:19:a5:94:aa:8a:b4:55:c8:d7:f6: a5:57:7d:ab:09:99:e6:04:5d:ed:4b:b0:a4:b9:37:c9:52:ad: b3:86:8b:4b:9f:77:dc:b3:4d:37:2d:94:be:d6:96:8c:ea:29: 18:7d:7c:83:68:70:16:b5:1a:22:91:de:6b:4a:c7:c6:3f:07: e8:92:97:62:2b:1a:91:f5:db:05:5d:26:1c:41:7e:b9:cd:a1: b8:9d:1b:88:24:b7:39:79:cd:9d:a7:f8:a2:64:ea:00:8c:5e: 00:48:02:76:1f:76:68:2b:b4:59:0c:e0:37:b0:7a:01:35:ca: 52:ed:d8:af:bd:aa:06:0e:a7:71:a6:34:e3:88:35:b0:1a:3f: 4b:34:19:82:ca:ea:c9:85:ce:0f:a4:1e:8b:96:59:0b:d1:5d: 68:52:dd:30:50:c5:55:5f:d3:21:8f:91:e3:d6:fa:ba:7f:47: 7e:94:6c:1b:f8:98:ee:8b:2c:90:4e:57:bd:2b:a2:09:69:25: 05:a6:aa:3b:f0:b3:34:e4:99:58:82:2b:f1:1f:76:34:f7:7a: b7:03:4e:6c -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgICblkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTE4MTYzNDA2WhcNMjYxMjMwMDAwMDAwWjBGMREwDwYD VQQDEwhBOTE3N0MzRjExMC8GA1UEBRMoRTUyMTA3RjRDMURFMDY0NTNFQkQ2RTY5 QjRCRjgyNDQ3MzE2QUExRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AO4Tc5bPmp3/je16Nnpr6VXBQFUaquVVVeZ6N+lFaBMyCEU88RSoPLQxerO0bQ1z Kpl4PurTXc01IDOAvQqRAnFLCC7CIvVDieVLAE946vNqv6UvEubQ0J/BvpXEVrwA X8g7c3250KAxPfo97GB2Ba0ImabVOek9d5rGWTvnXuH46UqOHUZRwGZj83YOsP0f qg2AUMY30KP1ngHH4QPIPi/qhwokGJwxAW4zfRvM+vZPNV1rZc5GJMsZ3mksSP+i 1uqF777nfSQ6jrMLtkbyrLhZ11GYxniVWbRNlZYFW/q8QMEDW51lGP4hcXnNgq98 6BzzkereLAsgPfgKGtAAuqMCAwEAAaOCAvIwggLuMB0GA1UdDgQWBBTlIQf0wd4G RT69bmm0v4JEcxaqHTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzdDM0YvQ0RCMzZBM0E3MzMzMTFGMDgzOUNEQzgzQzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTc3QzNGL0NEQjM2QTNBNzMzMzExRjA4MzlDREM4M0M0RjlBRTAyLzVTRUg5TUhl QmtVLXZXNXB0TC1DUkhNV3FoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w CwQCAAEwBQMDAJtFMA0GCSqGSIb3DQEBCwUAA4IBAQCDFPLfXKnI/ixRje2XmrAw hsUNvgTSFFrHwadQjenlrg4LgI5Wj8HtLMtogxmllKqKtFXI1/alV32rCZnmBF3t S7CkuTfJUq2zhotLn3fcs003LZS+1paM6ikYfXyDaHAWtRoikd5rSsfGPwfokpdi KxqR9dsFXSYcQX65zaG4nRuIJLc5ec2dp/iiZOoAjF4ASAJ2H3ZoK7RZDOA3sHoB NcpS7divvaoGDqdxpjTjiDWwGj9LNBmCyurJhc4PpB6LllkL0V1oUt0wUMVVX9Mh j5Hj1vq6f0d+lGwb+JjuiyyQTle9K6IJaSUFpqo78LM05JlYgivxH3Y093q3A05s -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:15 2025 by rpki-client