This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer File: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer (raw, json) Hash identifier: k3JAKy3E6nhOOw80Rnf4R/UWtmksBYnkWIwp7tgiTa8= Subject key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028017 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft caRepository: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 22 Dec 2025 13:35:40 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 152116 IP: 36.50.6.0/23 IP: 2001:df3:2f40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163863 (0x28017) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 22 13:35:40 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A918C212, serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:ee:75:b2:fc:cf:da:0d:77:99:7f:d1:9a: d5:f0:9a:0c:66:09:5d:09:fa:6a:d2:e9:24:b2:71: 00:66:0b:60:51:ef:95:dc:76:70:10:b7:e6:e4:65: 96:26:2c:35:a7:ca:de:d0:35:03:28:58:a7:b8:d6: d5:e2:69:a6:8e:be:6e:8b:24:fd:3b:98:a9:8f:e2: f5:3f:9c:f7:10:07:b4:ca:28:00:1b:e8:74:9f:6f: b6:d5:8a:4c:9b:c5:9e:eb:3a:2c:4a:bc:95:8a:e3: db:f0:fd:0a:e2:db:2a:83:4e:5b:89:82:5d:fc:0f: 1f:08:ac:52:ad:7c:0d:30:6f:f5:56:69:ac:2f:7b: c4:2c:7a:ea:21:5b:b0:52:09:d3:84:ee:69:be:f6: 61:b6:45:a0:81:ec:2b:1c:93:82:ea:24:c7:bb:66: 42:af:e0:d9:ba:77:e1:58:01:b6:34:d4:1a:91:95: 31:2f:26:2d:d2:c4:af:f8:77:79:30:eb:40:24:11: a5:8d:7d:b7:29:66:9b:ec:c1:08:1f:d3:97:6f:38: 8b:63:16:10:87:c1:2c:34:3b:51:23:17:7a:05:2a: 39:1f:1c:6d:c2:99:fe:36:f6:11:47:d9:45:e9:0a: 1e:80:92:4f:0e:75:63:e8:65:9c:1a:cf:19:6a:06: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 152116 sbgp-ipAddrBlock: critical IPv4: 36.50.6.0/23 IPv6: 2001:df3:2f40::/48 Signature Algorithm: sha256WithRSAEncryption 8e:4b:2f:c0:1e:77:c0:5e:5f:c5:56:39:10:e2:64:53:bf:66: 8a:6a:71:f8:f6:03:6a:e8:ae:75:79:4c:a3:a3:c4:b7:9e:e7: 62:95:57:36:40:43:78:f3:bd:91:42:dd:61:ef:65:80:58:aa: c6:34:db:34:2e:f9:70:af:be:9e:52:2a:79:cf:9a:88:7c:4b: ea:b1:5f:35:57:92:41:28:12:03:4a:6c:f2:cc:64:7f:e4:7e: 25:f4:10:9e:40:6a:8e:a2:4b:5b:c0:16:21:f2:09:e4:3c:cd: 8a:99:60:a9:e8:31:59:b0:01:eb:b5:a8:f8:4c:9b:84:74:c0: 58:e8:a7:f7:d8:14:bd:d7:67:d9:a8:40:da:b3:2e:cd:72:0d: 58:e2:da:00:3b:83:e5:2f:0a:6b:51:27:f1:9c:b6:bf:6f:5a: f8:10:01:b5:f3:c2:87:20:e3:20:de:5a:e2:63:a8:e7:22:01: 0c:c0:75:5a:5e:f2:33:21:2e:7b:3e:04:58:71:0e:a9:8f:2a: a8:39:12:94:41:72:9f:ee:0c:c9:a1:b1:78:1d:bd:00:38:f7: 25:31:84:30:29:95:c9:e8:33:6c:12:16:c2:48:34:d2:7f:40: 78:51:e3:d6:33:d0:60:c1:23:41:ab:28:72:df:47:8c:7b:e6: 06:f5:c0:55 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoAXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMjEzMzU0MFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxOEMyMTIxMTAvBgNVBAUTKEQwNUFDOTBBMjA3RjYwODdDRTAyRURD MjMxODhFMzJBQUExQjFCNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwc+51svzP2g13mX/RmtXwmgxmCV0J+mrS6SSycQBmC2BR75XcdnAQt+bkZZYm LDWnyt7QNQMoWKe41tXiaaaOvm6LJP07mKmP4vU/nPcQB7TKKAAb6HSfb7bVikyb xZ7rOixKvJWK49vw/Qri2yqDTluJgl38Dx8IrFKtfA0wb/VWaawve8QseuohW7BS CdOE7mm+9mG2RaCB7Csck4LqJMe7ZkKv4Nm6d+FYAbY01BqRlTEvJi3SxK/4d3kw 60AkEaWNfbcpZpvswQgf05dvOItjFhCHwSw0O1EjF3oFKjkfHG3Cmf429hFH2UXp Ch6Akk8OdWPoZZwazxlqBgmVAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU0FrJCiB/ YIfOAu3CMYjjKqobG0QwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThDMjEyLzRCMjMzRUVBQTJEMDExRUU5M0E4OEYzREM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4QzIxMi80QjIzM0VFQUEyRDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lC X1lJZk9BdTNDTVlqaktxb2JHMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlI0MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBJDIGMA8EAgAC MAkDBwAgAQ3zL0AwDQYJKoZIhvcNAQELBQADggEBAI5LL8Aed8BeX8VWORDiZFO/ Zopqcfj2A2rornV5TKOjxLee52KVVzZAQ3jzvZFC3WHvZYBYqsY02zQu+XCvvp5S KnnPmoh8S+qxXzVXkkEoEgNKbPLMZH/kfiX0EJ5Aao6iS1vAFiHyCeQ8zYqZYKno MVmwAeu1qPhMm4R0wFjop/fYFL3XZ9moQNqzLs1yDVji2gA7g+UvCmtRJ/Gctr9v WvgQAbXzwocg4yDeWuJjqOciAQzAdVpe8jMhLns+BFhxDqmPKqg5EpRBcp/uDMmh sXgdvQA49yUxhDAplcnoM2wSFsJINNJ/QHhR49Yz0GDBI0GrKHLfR4x75gb1wFU= -----END CERTIFICATE-----Generated at Wed Dec 24 12:25:18 2025 by rpki-client