This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer File: XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer (raw, json) Hash identifier: KjfuT1XOSCmfE4ioseMPgbbVKjWnNCPrhBcWGWXji1E= Subject key identifier: 5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F68 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft caRepository: rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 04:28:20 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154441 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163688 (0x27f68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 19 04:28:20 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A9162B98, serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:25:05:e4:4e:e2:6c:e0:9e:08:1d:db:30: 4e:b8:fc:c6:b4:d5:0c:49:9a:2e:76:c4:14:07:b7: 4d:d9:6f:28:72:e9:f0:ef:d9:6f:dd:88:7b:5d:83: 40:5e:ce:f2:d8:6d:b9:3a:b7:33:b5:63:ee:12:cf: 0c:80:dd:5f:92:ea:cb:d0:5a:17:c0:cd:88:6c:bb: 7d:14:2c:30:98:ea:07:c4:55:0a:9b:18:a2:d1:de: ff:7a:15:2d:ac:b9:76:20:82:87:a8:43:52:57:d2: 9c:01:b9:18:22:c0:c6:90:28:84:a4:c8:b0:77:42: a5:ff:88:66:bc:f9:3b:5b:08:43:ab:10:63:86:f0: 27:98:ff:91:41:36:30:eb:27:45:d7:cd:e9:c1:4f: 59:c7:3f:b3:85:09:93:7c:91:21:25:3f:d5:66:de: 28:0a:af:94:eb:07:7a:27:86:37:7e:cb:13:3a:50: db:c9:f9:98:d6:3c:98:02:1b:5f:93:58:45:a9:42: 12:16:5f:ff:59:ac:4a:f1:90:d7:64:f5:ec:43:10: 8f:31:d1:c4:68:22:25:7a:30:92:69:55:88:32:53: 61:8c:cb:39:b8:2d:0f:15:c4:85:5a:9a:bf:6d:32: 26:42:83:a6:3c:48:78:96:ea:59:2c:13:58:5a:38: 50:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154441 Signature Algorithm: sha256WithRSAEncryption 98:7b:da:0e:2d:c5:1c:e6:f3:42:72:48:e4:d3:80:0c:02:10: 44:ba:55:d7:9b:46:06:d5:08:57:f2:39:96:56:b3:f1:e4:3d: b1:c3:7f:6d:ad:28:f6:9f:89:72:11:8c:a6:10:86:d4:04:2b: 94:50:89:7a:43:ce:00:b2:fa:4c:51:f9:3d:65:7c:8c:78:07: 64:b9:09:1f:3b:a1:85:b9:5a:bb:1a:84:d3:b2:61:32:79:79: cf:4b:ee:be:59:30:dc:60:1e:57:4f:17:21:81:4d:1d:3b:9b: f8:30:72:03:00:4a:db:37:b3:b3:9d:e1:02:c7:e1:bb:f9:e4: e0:09:65:e1:d9:26:cb:25:72:ad:fe:fe:1c:01:ca:59:d5:f1: c0:a5:4f:64:2a:88:db:25:dc:27:9b:73:d0:b0:67:ee:11:1d: 92:01:af:c3:eb:e3:be:7f:c3:64:ed:32:4d:61:4d:47:8b:49: a9:8f:d2:03:7f:24:e5:c0:a3:18:50:66:20:89:63:98:c3:27: af:32:09:ab:07:76:55:e5:65:10:e1:ba:c9:6c:e2:51:5a:9d: e5:2a:9e:24:46:36:4b:91:f6:7b:5b:76:7a:72:79:2e:61:e2: e3:24:e5:16:35:58:41:3a:20:bf:bf:c1:9f:5c:c7:13:e8:a0: 21:4a:46:66 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIDAn9oMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxOTA0MjgyMFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxNjJCOTgxMTAvBgNVBAUTKDVDMDNDNkM5QzcyNkZGM0QyMDI3NDcw QTE4QTBDODgyMjJFQzY2RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc/yUF5E7ibOCeCB3bME64/Ma01QxJmi52xBQHt03Zbyhy6fDv2W/diHtdg0Be zvLYbbk6tzO1Y+4SzwyA3V+S6svQWhfAzYhsu30ULDCY6gfEVQqbGKLR3v96FS2s uXYggoeoQ1JX0pwBuRgiwMaQKISkyLB3QqX/iGa8+TtbCEOrEGOG8CeY/5FBNjDr J0XXzenBT1nHP7OFCZN8kSElP9Vm3igKr5TrB3onhjd+yxM6UNvJ+ZjWPJgCG1+T WEWpQhIWX/9ZrErxkNdk9exDEI8x0cRoIiV6MJJpVYgyU2GMyzm4LQ8VxIVamr9t MiZCg6Y8SHiW6lksE1haOFB/AgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUXAPGyccm /z0gJ0cKGKDIgiLsZvswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTYyQjk4LzIzOUNBMjBFREM5MzExRjA5OTVEODREOTNGNkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2MkI5OC8yMzlDQTIwRURDOTMxMUYwOTk1RDg0RDkzRjZGNTZCQy9YQVBHeWNj bV96MGdKMGNLR0tESWdpTHNadnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAltJMA0GCSqGSIb3DQEBCwUAA4IBAQCYe9oOLcUc5vNCckjk04AMAhBE ulXXm0YG1QhX8jmWVrPx5D2xw39trSj2n4lyEYymEIbUBCuUUIl6Q84AsvpMUfk9 ZXyMeAdkuQkfO6GFuVq7GoTTsmEyeXnPS+6+WTDcYB5XTxchgU0dO5v4MHIDAErb N7OzneECx+G7+eTgCWXh2SbLJXKt/v4cAcpZ1fHApU9kKojbJdwnm3PQsGfuER2S Aa/D6+O+f8Nk7TJNYU1Hi0mpj9IDfyTlwKMYUGYgiWOYwyevMgmrB3ZV5WUQ4brJ bOJRWp3lKp4kRjZLkfZ7W3Z6cnkuYeLjJOUWNVhBOiC/v8GfXMcT6KAhSkZm -----END CERTIFICATE-----Generated at Wed Dec 24 12:21:47 2025 by rpki-client