This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer (raw, json) Hash identifier: HeaeHAgZ+Ipr0bPNdI6fYmiOT5H94bcSpW5jJWmq76M= Subject key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028045 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft caRepository: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 23 Dec 2025 03:26:45 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 152148 IP: 36.50.72.0/23 IP: 2001:df3:42c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163909 (0x28045) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 23 03:26:45 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:87:fa:5b:8a:33:38:1e:23:ce:ae:6e:89:73: ce:f5:6d:d6:9f:3c:b5:42:53:26:b8:f5:5d:70:aa: e1:6d:a2:8f:d9:46:0b:ad:b4:5e:15:77:c6:ec:05: 9f:52:4b:d0:81:6f:f9:c2:04:b3:a5:5d:d8:e8:d5: 08:ae:cf:14:e5:ec:be:e9:0c:fa:b6:5a:9a:ac:20: d4:62:25:dd:97:ae:15:cc:51:e3:76:29:2f:6b:57: ac:03:9e:c6:f6:03:77:4f:3c:d8:b1:3d:25:96:58: 6e:06:26:14:5b:1f:e1:77:14:07:68:4c:f0:91:c9: 46:dd:c2:f0:86:8b:56:cd:f0:dd:ef:1d:55:14:99: b6:59:14:1b:ca:cf:94:61:17:44:26:7d:d5:77:5c: b0:71:8e:04:5e:93:f6:fa:27:a3:24:bd:01:e7:9f: 84:27:20:b5:fa:21:46:a5:e9:e5:cf:06:b8:05:54: 60:06:a4:84:18:41:bd:66:0e:2d:42:18:f8:fd:54: 9d:ce:dd:c4:de:34:72:66:b6:b2:8b:79:4d:7c:f6: eb:58:a1:a0:0b:57:6f:70:6d:2a:ea:31:f5:ed:36: 87:d0:d8:12:2d:a0:9a:fb:72:ac:d3:b3:11:f6:19: b0:88:8d:2e:8e:2e:32:a5:e8:f2:3f:4b:a9:9a:4a: 20:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 152148 sbgp-ipAddrBlock: critical IPv4: 36.50.72.0/23 IPv6: 2001:df3:42c0::/48 Signature Algorithm: sha256WithRSAEncryption ae:bd:72:36:0d:24:5e:ea:e5:39:15:ca:b6:50:d4:63:f4:84: 21:9f:19:74:4c:42:8c:17:52:7e:28:35:97:f0:39:9c:c2:54: 51:a0:b8:1a:3d:e0:1a:bd:47:22:91:c5:53:05:38:d2:0e:a8: c9:34:e2:99:9f:83:9e:cb:7d:a4:a8:dc:29:83:c3:ce:fc:b2: 4b:6b:2f:29:d7:fa:b9:ef:5f:18:10:57:7f:29:71:4b:fd:44: 79:59:07:ef:2d:b1:ab:a4:3c:48:f9:83:8b:fa:49:18:ec:5a: 1e:48:c3:f5:d4:e9:e4:5c:b6:d7:32:88:2e:f1:fb:b6:67:4f: 05:20:c1:41:7a:4f:f3:6d:96:40:45:04:8b:6b:bd:7a:42:5e: d5:1b:b8:2f:90:b1:3b:5f:37:16:2d:b3:a4:b9:fc:c7:87:81: ba:f7:bd:cf:08:0b:91:6f:62:2b:5b:91:d7:21:7a:1a:4d:d9: 87:89:64:3a:60:47:ee:12:54:7c:d5:07:ca:de:f8:b5:cd:ed: f4:a8:27:78:f0:b4:fc:d8:af:d8:d7:89:61:e1:35:1a:9f:4b: 60:03:32:bf:4c:f6:cc:31:27:3f:b4:05:3d:ee:f5:b8:c4:28: 48:19:52:3d:d3:2a:aa:6e:b6:89:1a:fd:b5:79:51:1f:aa:60: e6:9c:e4:50 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoBFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMzAzMjY0NVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxMkU4MEMxMTAvBgNVBAUTKEZFQkI0Mjc2Njc1QTA0NzU0QTUzNTNE NTcwN0U1NzkyMUNERjQzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9h/pbijM4HiPOrm6Jc871bdafPLVCUya49V1wquFtoo/ZRguttF4Vd8bsBZ9S S9CBb/nCBLOlXdjo1QiuzxTl7L7pDPq2WpqsINRiJd2XrhXMUeN2KS9rV6wDnsb2 A3dPPNixPSWWWG4GJhRbH+F3FAdoTPCRyUbdwvCGi1bN8N3vHVUUmbZZFBvKz5Rh F0QmfdV3XLBxjgRek/b6J6MkvQHnn4QnILX6IUal6eXPBrgFVGAGpIQYQb1mDi1C GPj9VJ3O3cTeNHJmtrKLeU189utYoaALV29wbSrqMfXtNofQ2BItoJr7cqzTsxH2 GbCIjS6OLjKl6PI/S6maSiAtAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU/rtCdmda BHVKU1PVcH5XkhzfQ5IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJFODBDLzlBRDhCNTU0RkJGQTExRUVBRUU1RkUxRUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyRTgwQy85QUQ4QjU1NEZCRkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1k YUJIVktVMVBWY0g1WGtoemZRNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlJUMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBJDJIMA8EAgAC MAkDBwAgAQ3zQsAwDQYJKoZIhvcNAQELBQADggEBAK69cjYNJF7q5TkVyrZQ1GP0 hCGfGXRMQowXUn4oNZfwOZzCVFGguBo94Bq9RyKRxVMFONIOqMk04pmfg57LfaSo 3CmDw878sktrLynX+rnvXxgQV38pcUv9RHlZB+8tsaukPEj5g4v6SRjsWh5Iw/XU 6eRcttcyiC7x+7ZnTwUgwUF6T/NtlkBFBItrvXpCXtUbuC+QsTtfNxYts6S5/MeH gbr3vc8IC5FvYitbkdchehpN2YeJZDpgR+4SVHzVB8re+LXN7fSoJ3jwtPzYr9jX iWHhNRqfS2ADMr9M9swxJz+0BT3u9bjEKEgZUj3TKqputoka/bV5UR+qYOac5FA= -----END CERTIFICATE-----Generated at Wed Dec 24 12:19:03 2025 by rpki-client