This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer File: 7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer (raw, json) Hash identifier: +Jjbo8LBBgA7CFpxT5BOsJwS6TJUw3blywBwL8oTiH0= Subject key identifier: ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02767C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 20 Nov 2025 01:44:26 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 154315 IP: 2402:33e0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 15:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161404 (0x2767c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 20 01:44:26 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91652B5, serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:18:29:d0:5c:7c:dd:f9:fd:39:d7:56:c1: 2c:2f:8d:7c:8b:68:0d:1d:42:b6:77:97:f0:1d:29: 20:51:e7:c6:75:a5:65:09:49:85:36:a9:36:ec:f4: 05:bf:71:64:92:9c:e5:02:5d:73:63:f1:ea:c7:f5: c1:1a:c3:aa:f7:59:24:af:4a:25:46:bf:ec:50:c9: 8b:bd:fc:a8:de:2b:75:44:41:b5:71:90:c4:a1:8f: 90:f6:fb:2c:23:e0:46:ee:23:2e:6c:7e:6d:d8:a6: c8:05:e0:28:37:8a:c1:35:c6:89:c6:53:ed:a3:71: ed:57:69:ca:2b:ac:ae:00:cc:ae:0f:f4:fe:8f:d7: 4a:dc:82:6f:f9:95:23:6e:91:98:47:ba:d9:46:be: 3c:93:1a:7a:8a:20:f7:44:48:67:47:8e:3e:c6:80: c9:b3:d2:8b:ac:44:de:26:4c:f1:e8:21:6b:b7:7b: 95:07:1b:9f:c2:08:7e:42:8c:f2:11:fe:19:d0:53: 69:6b:3d:5a:26:61:ce:6c:e6:ac:45:e1:e0:b0:cf: c0:c8:82:ac:19:1e:c9:22:81:e2:1f:d9:a9:97:b3: 00:f4:d9:1d:a5:a4:18:98:74:46:93:10:1d:25:4a: 05:41:f5:2b:25:c6:73:f2:b9:c5:7d:20:61:b4:d9: 93:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154315 sbgp-ipAddrBlock: critical IPv6: 2402:33e0::/32 Signature Algorithm: sha256WithRSAEncryption 8d:52:47:e1:b2:3a:5f:15:b7:a6:02:e5:fa:53:b4:8e:f1:b9: f1:aa:fb:20:01:e7:ec:fd:21:8f:f3:36:b0:cc:91:4c:fb:22: dd:2f:97:a1:e5:9b:8b:28:8d:e9:70:97:bf:95:05:c1:73:c3: e2:0c:0d:b7:3b:b4:82:b4:58:6d:c5:88:74:ec:7b:c2:98:01: 48:b8:0f:99:9b:c5:9c:47:d5:42:7d:21:7d:08:db:7c:5a:08: 29:28:3d:93:f5:ed:8e:e0:75:93:e3:e6:ab:30:c4:ff:0c:79: 67:0b:6d:99:3f:b8:de:94:8c:8b:40:fa:f9:63:1c:69:9b:a6: a3:b0:3e:32:06:a3:c6:20:a3:7e:54:d8:ca:51:7b:e8:e0:b9: 30:61:bf:37:1b:a4:67:a2:29:41:84:47:e5:08:26:a4:7d:c0: 91:da:2d:9d:f9:25:9c:7f:34:a0:f2:3c:c9:0b:41:ac:14:67: 99:a3:c8:75:eb:83:f6:d4:3b:2f:19:4a:17:fa:53:91:57:0e: d6:be:2a:5a:59:82:99:c0:c2:69:42:c7:90:15:99:df:37:66: 17:b1:ec:5b:44:ac:04:d9:be:91:b3:72:57:4d:7a:2c:27:d0: f9:90:90:d7:ea:b8:cc:66:58:be:89:5f:8e:70:87:0a:80:38: c9:20:60:b8 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAnZ8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMDAxNDQyNloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNjUyQjUxMTAvBgNVBAUTKEVEMjNBOEU4OUU1NkJDQkRBMUMwMEU0 OTdDNDg4M0Q3OTVFNTJENTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP1Rgp0Fx83fn9OddWwSwvjXyLaA0dQrZ3l/AdKSBR58Z1pWUJSYU2qTbs9AW/ cWSSnOUCXXNj8erH9cEaw6r3WSSvSiVGv+xQyYu9/KjeK3VEQbVxkMShj5D2+ywj 4EbuIy5sfm3YpsgF4Cg3isE1xonGU+2jce1XacorrK4AzK4P9P6P10rcgm/5lSNu kZhHutlGvjyTGnqKIPdESGdHjj7GgMmz0ousRN4mTPHoIWu3e5UHG5/CCH5CjPIR /hnQU2lrPVomYc5s5qxF4eCwz8DIgqwZHskigeIf2amXswD02R2lpBiYdEaTEB0l SgVB9SslxnPyucV9IGG02ZPfAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQU7SOo6J5W vL2hwA5JfEiD15XlLVQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY1MkI1LzZGRkI2MjRBQzVCMjExRjA5NEEwNzkyQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2NTJCNS82RkZCNjI0QUM1QjIxMUYwOTRBMDc5MkJDNEY5QUUwMi83U09vNko1 V3ZMMmh3QTVKZkVpRDE1WGxMVlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlrLMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAIz4DANBgkq hkiG9w0BAQsFAAOCAQEAjVJH4bI6XxW3pgLl+lO0jvG58ar7IAHn7P0hj/M2sMyR TPsi3S+XoeWbiyiN6XCXv5UFwXPD4gwNtzu0grRYbcWIdOx7wpgBSLgPmZvFnEfV Qn0hfQjbfFoIKSg9k/XtjuB1k+PmqzDE/wx5ZwttmT+43pSMi0D6+WMcaZumo7A+ MgajxiCjflTYylF76OC5MGG/NxukZ6IpQYRH5QgmpH3AkdotnfklnH80oPI8yQtB rBRnmaPIdeuD9tQ7LxlKF/pTkVcO1r4qWlmCmcDCaULHkBWZ3zdmF7HsW0SsBNm+ kbNyV016LCfQ+ZCQ1+q4zGZYvolfjnCHCoA4ySBguA== -----END CERTIFICATE-----Generated at Wed Dec 3 17:12:43 2025 by rpki-client