This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer File: Pgw5tVhKz65BgIE4j08KlNbajgY.cer (raw, json) Hash identifier: ky+B9uUsO6snKuLKbIq85vlHNAf5DkMOURs4WyV0mHE= Subject key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027637 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 19 Nov 2025 08:48:49 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154351 IP: 2001:df6:4bc0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 15:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161335 (0x27637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 19 08:48:49 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b9:d0:35:d0:9b:4a:08:31:f0:7c:92:42:db: 0f:02:55:80:98:f7:a2:c7:cc:3a:a6:16:15:5d:c1: 9c:d9:6b:9b:22:f6:76:13:1a:0b:f7:8f:81:ab:1c: 83:f7:3c:93:95:b1:80:91:b4:f0:70:2d:57:d2:91: 65:4e:33:33:f4:21:83:34:6c:ef:10:15:e0:19:34: af:b5:a2:38:42:db:9e:3d:b9:2e:bf:ee:9f:e2:aa: 34:9a:d6:c1:5d:17:29:fb:e9:60:46:04:04:2c:df: d0:ee:90:69:85:16:c3:f0:34:65:f0:36:0e:f8:01: 7b:a6:c1:68:ec:dd:3f:06:5b:74:46:98:51:c1:fd: 54:9a:74:d0:07:47:b5:ff:41:32:4c:ee:89:15:aa: 09:ff:cd:67:50:3a:7d:f4:e9:6e:0c:34:88:14:47: 2a:a3:2e:f1:4b:44:9b:9f:85:97:15:3b:63:f1:64: 1b:71:a4:74:12:ed:1f:58:1f:bb:bd:58:66:10:1b: dd:ec:d5:26:00:cf:a8:95:c3:e5:2a:17:e5:cd:44: 4c:0a:ab:12:6d:cd:96:cd:42:0b:b9:35:c1:fc:37: 29:37:92:c0:db:ef:70:18:4e:9b:c1:ed:9d:41:2d: 4f:40:96:c9:c7:9a:9f:1c:a8:1e:24:d7:36:25:7e: 02:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154351 sbgp-ipAddrBlock: critical IPv6: 2001:df6:4bc0::/48 Signature Algorithm: sha256WithRSAEncryption 02:0e:40:d8:59:bc:d9:5c:6a:9c:88:b9:20:ea:c8:76:5c:3e: da:ff:b0:d1:f4:59:99:ea:ec:47:31:f2:5d:58:bf:d2:ca:ac: 31:be:03:1b:17:0d:b7:31:b6:26:40:d9:6c:01:5e:73:9f:41: db:79:31:37:8a:b2:da:19:91:ec:fe:f2:21:01:64:5e:ef:6d: f3:fc:6e:29:85:c2:2b:c7:dc:86:a9:ec:c6:7a:5e:f8:5e:01: db:ce:6d:de:00:53:13:61:32:e0:3b:9a:65:15:1f:3a:51:df: 6e:9a:97:66:56:d2:a6:c0:46:f1:ac:54:7f:fe:41:a2:9c:8d: ba:4c:bd:bf:50:8f:e0:e3:8d:af:68:da:c9:81:f2:03:1b:a2: a4:92:75:d9:aa:4e:56:65:11:51:e0:88:77:f0:d3:04:aa:98: 75:07:ee:d0:83:c7:d7:28:91:3b:c8:b2:6c:16:8b:2d:03:ab: c2:1f:49:60:cb:c4:27:7b:28:12:3d:39:91:1f:0b:88:ce:0f: 84:e6:ec:56:ae:79:1e:e7:ac:69:c0:81:47:9e:5d:7c:dd:bd: 7d:9a:ff:ce:a6:ba:a2:95:c5:c4:6a:af:22:27:38:95:20:3f: 12:7c:7f:c1:41:ca:dc:2e:bb:94:a7:00:5a:db:72:74:88:ce: 6b:62:83:78 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAnY3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExOTA4NDg0OVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkQ3QTMxMTAvBgNVBAUTKDNFMEMzOUI1NTg0QUNGQUU0MTgwODEz ODhGNEYwQTk0RDZEQThFMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQudA10JtKCDHwfJJC2w8CVYCY96LHzDqmFhVdwZzZa5si9nYTGgv3j4GrHIP3 PJOVsYCRtPBwLVfSkWVOMzP0IYM0bO8QFeAZNK+1ojhC2549uS6/7p/iqjSa1sFd Fyn76WBGBAQs39DukGmFFsPwNGXwNg74AXumwWjs3T8GW3RGmFHB/VSadNAHR7X/ QTJM7okVqgn/zWdQOn306W4MNIgURyqjLvFLRJufhZcVO2PxZBtxpHQS7R9YH7u9 WGYQG93s1SYAz6iVw+UqF+XNREwKqxJtzZbNQgu5NcH8Nyk3ksDb73AYTpvB7Z1B LU9AlsnHmp8cqB4k1zYlfgLbAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUPgw5tVhK z65BgIE4j08KlNbajgYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJEN0EzLzhGMDYwMjVBQzUyNDExRjBBMkE0REQxQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCRDdBMy84RjA2MDI1QUM1MjQxMUYwQTJBNEREMUFDNEY5QUUwMi9QZ3c1dFZo S3o2NUJnSUU0ajA4S2xOYmFqZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlrvMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9kvAMA0G CSqGSIb3DQEBCwUAA4IBAQACDkDYWbzZXGqciLkg6sh2XD7a/7DR9FmZ6uxHMfJd WL/SyqwxvgMbFw23MbYmQNlsAV5zn0HbeTE3irLaGZHs/vIhAWRe723z/G4phcIr x9yGqezGel74XgHbzm3eAFMTYTLgO5plFR86Ud9umpdmVtKmwEbxrFR//kGinI26 TL2/UI/g442vaNrJgfIDG6KkknXZqk5WZRFR4Ih38NMEqph1B+7Qg8fXKJE7yLJs FostA6vCH0lgy8QneygSPTmRHwuIzg+E5uxWrnke56xpwIFHnl183b19mv/Oprqi lcXEaq8iJziVID8SfH/BQcrcLruUpwBa23J0iM5rYoN4 -----END CERTIFICATE-----Generated at Wed Dec 3 17:07:01 2025 by rpki-client