This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_Dy-NvzsUpesSO0H-neZzsSUX8.cer File: T_Dy-NvzsUpesSO0H-neZzsSUX8.cer (raw, json) Hash identifier: X49U6ghilOajqNu1Zct9HYboemZMh4SgG2WSEoVGbyE= Subject key identifier: 4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028059 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft caRepository: rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 23 Dec 2025 12:52:49 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 153465 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163929 (0x28059) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 23 12:52:49 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A913F3A2, serialNumber=4FF0F2F8DBF3B14A5EB123B41FE9DE673B12517F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:eb:26:aa:96:48:65:70:51:25:ea:18:3c: 78:0e:f5:1c:df:06:7f:c3:89:65:97:92:8e:d2:ef: 9a:22:22:4c:2b:53:6a:f3:2a:18:07:20:20:2a:c0: f5:64:d6:c2:cf:de:ca:42:25:50:d9:8b:99:00:ff: f5:bc:13:a8:6a:be:d4:c2:74:9a:c7:5b:c7:b5:7b: 37:14:71:a2:b5:21:75:b5:f9:01:cb:cb:29:cb:d9: c6:f9:fc:09:54:d7:04:fc:33:bc:a8:44:a2:9a:b3: ad:ff:a4:93:16:ed:28:41:c2:72:f5:0b:47:91:7e: b4:83:81:16:93:98:27:c3:44:ab:83:4d:35:fc:ff: 32:aa:dc:fd:56:f6:96:ce:a3:34:36:44:de:bb:91: 75:41:e6:b5:e8:e6:ea:40:91:a0:76:4e:96:be:b5: 95:f4:74:c9:2c:14:49:71:e8:fd:bf:31:43:cc:19: a3:d4:14:34:3f:80:54:78:5b:5b:98:0d:e4:15:04: a4:b4:1f:9d:45:15:79:fd:ee:ef:a8:77:74:da:81: 15:0f:48:e8:03:16:d7:18:9e:61:0e:8d:cd:7a:64: 74:aa:0d:5e:7a:fb:99:a2:c8:b7:fc:bb:da:50:a8: 6f:f5:97:e0:35:82:4d:95:08:d5:ea:b1:50:24:25: 0b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F0:F2:F8:DB:F3:B1:4A:5E:B1:23:B4:1F:E9:DE:67:3B:12:51:7F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/678ACA14AE4911EF9B295239C4F9AE02/T_Dy-NvzsUpesSO0H-neZzsSUX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153465 Signature Algorithm: sha256WithRSAEncryption 16:78:da:be:e8:47:53:66:5e:b9:72:72:d8:40:2f:f3:49:c0: 93:0f:02:a9:43:21:a9:82:cc:6a:46:cb:11:3f:4d:9c:01:15: e7:69:eb:13:3e:8a:19:ba:dc:7f:ae:0f:06:9e:20:2e:44:4f: 40:73:6a:25:6a:cd:6c:9f:f7:b1:2e:c8:4c:75:61:04:1a:28: 71:49:70:8c:21:e6:f5:3d:85:08:1b:7c:fa:e2:79:2b:08:ba: ff:ce:0d:65:ab:4a:6a:cf:97:59:04:f6:9e:13:20:e3:cc:4a: e0:fe:3c:96:71:16:75:f2:30:f6:a5:45:94:f6:83:8b:25:f8: 80:07:45:71:64:a5:e3:5b:88:2c:6c:1c:37:37:c6:4b:5a:20: 0b:19:74:35:1b:42:7d:af:a4:92:a6:91:47:63:38:bf:9e:aa: 6d:1b:2a:7c:30:19:75:8f:32:ba:84:43:79:ea:ab:ab:c2:41: 94:59:6e:78:24:40:8f:71:36:fb:4f:22:dd:dc:2f:82:7c:f4: ef:71:aa:e2:55:da:9e:64:66:db:dc:66:13:2e:57:74:7b:d4: d9:5a:5b:8d:a1:e9:61:03:b1:f8:d7:0b:5d:38:62:4a:b6:89: 2f:1e:83:da:6f:50:90:f9:0c:38:fe:2a:f4:20:ad:46:06:5c: 0b:3d:3f:56 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIDAoBZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMzEyNTI0OVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxM0YzQTIxMTAvBgNVBAUTKDRGRjBGMkY4REJGM0IxNEE1RUIxMjNC NDFGRTlERTY3M0IxMjUxN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX4esmqpZIZXBRJeoYPHgO9RzfBn/DiWWXko7S75oiIkwrU2rzKhgHICAqwPVk 1sLP3spCJVDZi5kA//W8E6hqvtTCdJrHW8e1ezcUcaK1IXW1+QHLyynL2cb5/AlU 1wT8M7yoRKKas63/pJMW7ShBwnL1C0eRfrSDgRaTmCfDRKuDTTX8/zKq3P1W9pbO ozQ2RN67kXVB5rXo5upAkaB2Tpa+tZX0dMksFElx6P2/MUPMGaPUFDQ/gFR4W1uY DeQVBKS0H51FFXn97u+od3TagRUPSOgDFtcYnmEOjc16ZHSqDV56+5miyLf8u9pQ qG/1l+A1gk2VCNXqsVAkJQu1AgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUT/Dy+Nvz sUpesSO0H+neZzsSUX8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNGM0EyLzY3OEFDQTE0QUU0OTExRUY5QjI5NTIzOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzRjNBMi82NzhBQ0ExNEFFNDkxMUVGOUIyOTUyMzlDNEY5QUUwMi9UX0R5LU52 enNVcGVzU08wSC1uZVp6c1NVWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAld5MA0GCSqGSIb3DQEBCwUAA4IBAQAWeNq+6EdTZl65cnLYQC/zScCT DwKpQyGpgsxqRssRP02cARXnaesTPooZutx/rg8GniAuRE9Ac2olas1sn/exLshM dWEEGihxSXCMIeb1PYUIG3z64nkrCLr/zg1lq0pqz5dZBPaeEyDjzErg/jyWcRZ1 8jD2pUWU9oOLJfiAB0VxZKXjW4gsbBw3N8ZLWiALGXQ1G0J9r6SSppFHYzi/nqpt Gyp8MBl1jzK6hEN56qurwkGUWW54JECPcTb7TyLd3C+CfPTvcariVdqeZGbb3GYT Lld0e9TZWluNoelhA7H41wtdOGJKtokvHoPab1CQ+Qw4/ir0IK1GBlwLPT9W -----END CERTIFICATE-----Generated at Wed Dec 24 12:23:30 2025 by rpki-client