This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer File: AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer (raw, json) Hash identifier: PqDVXGMmwRLy/4UrlRk6sja/qCvZwVXxIzLHTNmSnjc= Subject key identifier: 00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027595 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 17 Nov 2025 06:12:52 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 154352 IP: 2001:df6:4b40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 14:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161173 (0x27595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 17 06:12:52 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91FFBAF, serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:4a:ac:a5:4b:22:42:88:3b:b9:59:f4:63: 45:c1:5e:21:7a:c0:df:b3:0a:86:b4:4f:25:2a:31: f2:49:00:17:c5:58:2c:3c:01:be:32:ff:28:9b:0a: 42:70:6b:17:f2:0e:a5:a6:ec:7f:65:92:18:11:10: 5d:af:38:82:5c:59:80:cd:43:64:57:48:10:0f:64: d6:18:72:a6:08:7e:8c:fb:ac:d0:22:b3:a7:0c:79: 85:f5:74:70:ae:10:a7:90:8e:d7:dd:61:36:2d:97: 8a:f1:62:ab:67:2e:60:81:c1:63:38:80:d8:ea:81: de:c0:29:15:00:7f:30:a1:30:88:98:16:cc:5f:39: ba:27:a1:ca:22:97:52:b3:dd:6a:d2:16:da:7e:18: 8f:fb:09:f3:27:07:cf:37:f2:64:66:ba:38:ec:18: 63:16:d3:d0:c7:7f:c0:13:db:42:36:ea:b0:d2:b3: 57:bf:43:5d:c2:77:46:01:29:30:a1:af:33:92:d5: 7d:8a:fb:4a:8b:c1:80:4c:27:2b:09:07:e8:92:97: 37:75:ea:8f:95:cc:a2:6a:fe:96:88:db:2d:8d:ca: 1f:be:25:7f:d8:32:72:45:c2:21:d2:fe:31:05:44: 85:ce:77:c3:80:37:d3:cb:88:ac:16:4d:3e:c7:17: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154352 sbgp-ipAddrBlock: critical IPv6: 2001:df6:4b40::/48 Signature Algorithm: sha256WithRSAEncryption 11:df:73:a6:6a:b2:f1:09:38:9a:e0:07:7a:b2:32:a9:36:0a: 74:8d:35:fc:55:ae:54:6a:3c:db:ad:73:8d:e3:d1:3f:27:9c: e6:76:8c:a6:44:0f:a4:69:74:44:8d:b6:d1:cc:b5:03:1e:b2: dd:3f:f1:8a:a7:0a:40:e7:85:83:46:a0:ef:0b:36:39:cf:02: da:b1:6e:62:11:c0:61:43:39:af:34:5f:1c:10:21:e0:73:7c: bf:0a:99:64:7a:88:5e:1c:a1:41:e5:b1:ed:f8:f9:cb:67:e8: d1:0e:14:93:23:cc:f2:33:19:03:5b:f1:30:29:b5:aa:d7:e5: fb:10:f7:a8:eb:7c:1c:01:ea:eb:7e:5e:fc:0e:8a:6e:12:02: 18:51:83:6d:54:78:cf:31:72:59:a4:b3:32:c1:19:21:5f:ec: f6:55:f1:80:79:f6:2d:00:ba:a1:6d:d6:21:2b:da:bc:bb:02: 52:27:02:5b:1d:12:92:8e:cd:eb:57:0b:53:59:2b:77:a4:48: 98:4d:71:3b:94:37:d9:a7:d1:99:8e:07:f4:b0:be:63:f8:e6: 41:b3:3d:99:21:c9:14:fe:a9:81:07:e2:90:b4:e0:24:10:76: d6:84:4b:70:05:0f:92:a7:6c:ff:7f:07:07:81:c4:2c:f8:5b: 5e:5d:12:90 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAnWVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNzA2MTI1MloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRkZCQUYxMTAvBgNVBAUTKDAwQUY2MDE4NUQxRkI5QTA4QTU4Qjc3 RUY0MDQ4MUFDMzgwQUYxQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDO/0qspUsiQog7uVn0Y0XBXiF6wN+zCoa0TyUqMfJJABfFWCw8Ab4y/yibCkJw axfyDqWm7H9lkhgREF2vOIJcWYDNQ2RXSBAPZNYYcqYIfoz7rNAis6cMeYX1dHCu EKeQjtfdYTYtl4rxYqtnLmCBwWM4gNjqgd7AKRUAfzChMIiYFsxfObonocoil1Kz 3WrSFtp+GI/7CfMnB8838mRmujjsGGMW09DHf8AT20I26rDSs1e/Q13Cd0YBKTCh rzOS1X2K+0qLwYBMJysJB+iSlzd16o+VzKJq/paI2y2Nyh++JX/YMnJFwiHS/jEF RIXOd8OAN9PLiKwWTT7HF9M5AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUAK9gGF0f uaCKWLd+9ASBrDgK8bEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZGQkFGLzcwRkNBNzcyQzM3QzExRjBCNTE4QTUzMkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGRkJBRi83MEZDQTc3MkMzN0MxMUYwQjUxOEE1MzJDNEY5QUUwMi9BSzlnR0Yw ZnVhQ0tXTGQtOUFTQnJEZ0s4YkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlrwMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9ktAMA0G CSqGSIb3DQEBCwUAA4IBAQAR33OmarLxCTia4Ad6sjKpNgp0jTX8Va5UajzbrXON 49E/J5zmdoymRA+kaXREjbbRzLUDHrLdP/GKpwpA54WDRqDvCzY5zwLasW5iEcBh QzmvNF8cECHgc3y/CplkeoheHKFB5bHt+PnLZ+jRDhSTI8zyMxkDW/EwKbWq1+X7 EPeo63wcAerrfl78DopuEgIYUYNtVHjPMXJZpLMywRkhX+z2VfGAefYtALqhbdYh K9q8uwJSJwJbHRKSjs3rVwtTWSt3pEiYTXE7lDfZp9GZjgf0sL5j+OZBsz2ZIckU /qmBB+KQtOAkEHbWhEtwBQ+Sp2z/fwcHgcQs+FteXRKQ -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:14 2025 by rpki-client