This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer File: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer (raw, json) Hash identifier: WfQszAHLypzNFsx/qgQPtKCwm7/qg6Iqa/XzTyVs2Ko= Subject key identifier: 37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02807C Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 23 Dec 2025 14:25:30 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 153398 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163964 (0x2807c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 23 14:25:30 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91EA409, serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:08:e7:9d:fa:18:20:58:b8:c4:67:78:21: 55:14:99:47:d4:a9:c3:95:cb:b8:30:80:f5:c3:55: b5:a7:5d:85:7e:a8:22:8c:42:fb:6b:2f:68:82:fe: b4:20:72:ff:dd:37:ef:86:85:43:99:21:e8:f3:ac: 6a:5e:92:17:a3:89:86:14:0d:4a:fc:cd:0b:c7:0a: db:5f:2e:5d:97:ac:7c:e1:5d:e3:41:9e:5e:30:6a: a4:d0:2f:07:6a:44:58:16:10:2f:a5:19:8d:5e:a6: c0:d9:eb:12:b4:8a:4e:29:b0:09:41:c1:a9:e5:70: d7:27:39:cf:67:87:dd:23:39:d1:1e:c4:e6:ef:2c: 62:5e:34:6e:34:3d:58:a8:86:29:88:e3:6e:4f:b6: d3:97:2d:e3:b9:18:22:1e:d6:9b:8f:47:81:1d:02: eb:95:21:15:38:a7:19:f4:28:3d:8b:74:ec:bd:d7: c8:ee:1e:f8:57:8b:cf:1f:c6:17:db:e4:67:09:9a: 4c:42:b1:80:02:57:38:c8:0c:d6:c8:fb:64:68:38: de:49:73:af:24:f4:88:82:66:a6:51:44:65:06:ba: 92:6b:bd:66:5e:b0:fd:56:99:77:52:0f:c2:01:94: 65:44:b0:d2:e9:2d:c1:d9:29:39:b5:5f:35:f9:1f: 03:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153398 Signature Algorithm: sha256WithRSAEncryption c9:e6:56:5d:14:45:7a:19:6f:17:11:a7:6c:42:12:44:66:d9: 53:02:e1:75:01:06:f4:7a:82:d8:4d:07:df:d6:b3:35:8e:bc: 3d:2f:84:6d:bb:4a:d4:53:3d:4c:90:4a:fc:5d:6e:30:af:e1: 26:92:03:07:78:2e:bf:0c:6f:d5:06:54:c4:60:c5:fe:57:3f: f9:45:3a:1e:0c:73:13:00:68:32:e8:15:cb:50:9f:40:38:62: 32:5b:64:c6:75:83:fd:3a:38:7b:4c:42:1b:6a:18:a3:0b:6f: ac:28:c0:31:ab:04:c2:35:39:f4:84:d0:8f:b3:ce:4f:fd:81: fa:9f:b9:36:1d:97:03:34:ec:ff:b5:da:48:3c:6f:2b:53:d8: 16:a7:e5:9e:bb:87:25:64:2e:9f:a8:ed:9b:62:e6:62:c1:40: ee:e8:3c:4a:fb:58:ec:80:1e:dc:d8:93:73:eb:87:58:5a:2e: fd:03:33:c2:7b:d4:f5:b6:db:7d:5b:11:de:58:23:e7:5e:03: af:4d:95:44:79:7a:65:18:f7:7e:6f:b7:2b:dc:8f:9b:b9:c5: ba:b1:13:ba:01:55:55:33:d3:62:77:8c:91:09:7c:4d:af:18: 26:15:4a:05:9c:c9:3c:f2:dd:13:98:1e:31:c2:6a:72:e7:9e: 74:55:91:f7 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIDAoB8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMzE0MjUzMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRUE0MDkxMTAvBgNVBAUTKDM3NzgzNUNEQTJCRDYzNjdFRjBGRUI1 RUE1ODE5OEY4MTgzQTg3QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBIgjnnfoYIFi4xGd4IVUUmUfUqcOVy7gwgPXDVbWnXYV+qCKMQvtrL2iC/rQg cv/dN++GhUOZIejzrGpekhejiYYUDUr8zQvHCttfLl2XrHzhXeNBnl4waqTQLwdq RFgWEC+lGY1epsDZ6xK0ik4psAlBwanlcNcnOc9nh90jOdEexObvLGJeNG40PVio himI425PttOXLeO5GCIe1puPR4EdAuuVIRU4pxn0KD2LdOy918juHvhXi88fxhfb 5GcJmkxCsYACVzjIDNbI+2RoON5Jc68k9IiCZqZRRGUGupJrvWZesP1WmXdSD8IB lGVEsNLpLcHZKTm1XzX5HwN1AgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUN3g1zaK9 Y2fvD+tepYGY+Bg6h8EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVBNDA5LzAyODlGNkZDOUNBQzExRUZBQjU5NTUxNkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFQTQwOS8wMjg5RjZGQzlDQUMxMUVGQUI1OTU1MTZDNEY5QUUwMi9OM2cxemFL OVkyZnZELXRlcFlHWS1CZzZoOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlc2MA0GCSqGSIb3DQEBCwUAA4IBAQDJ5lZdFEV6GW8XEadsQhJEZtlT AuF1AQb0eoLYTQff1rM1jrw9L4Rtu0rUUz1MkEr8XW4wr+EmkgMHeC6/DG/VBlTE YMX+Vz/5RToeDHMTAGgy6BXLUJ9AOGIyW2TGdYP9Ojh7TEIbahijC2+sKMAxqwTC NTn0hNCPs85P/YH6n7k2HZcDNOz/tdpIPG8rU9gWp+Weu4clZC6fqO2bYuZiwUDu 6DxK+1jsgB7c2JNz64dYWi79AzPCe9T1ttt9WxHeWCPnXgOvTZVEeXplGPd+b7cr 3I+bucW6sRO6AVVVM9Nid4yRCXxNrxgmFUoFnMk88t0TmB4xwmpy5550VZH3 -----END CERTIFICATE-----Generated at Wed Dec 24 12:29:30 2025 by rpki-client