This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer File: e-IwFTz_kAFkLbybJPhdDMKCNk4.cer (raw, json) Hash identifier: rAS6/hfzPFj+MneHmlSYovbhouql+wvbntGeqT9v5fI= Subject key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02803E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 23 Dec 2025 02:40:30 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 152176 IP: 210.87.64.0/23 IP: 2001:df3:3d40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 09:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163902 (0x2803e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 23 02:40:30 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:be:09:6f:3d:7d:a5:47:41:76:fb:19:c0: 23:da:5f:79:21:8b:f6:85:78:28:a5:f1:f3:93:db: eb:24:01:e7:c8:41:52:1a:56:5a:6e:26:a0:d3:c3: 45:8d:04:4f:72:c0:4f:b9:90:13:e4:68:b1:6e:38: f5:b4:b2:15:45:87:f4:b0:07:bf:92:b6:23:7a:58: 3c:04:fc:75:a6:73:a4:2c:77:79:d2:0b:3f:5d:0b: be:3e:11:f2:ec:a0:6e:0a:1f:4d:e8:be:26:f0:4b: 31:56:9e:c8:1f:16:32:30:e9:66:2c:00:c8:d5:da: aa:8c:97:1e:b2:c7:ce:b7:77:9e:c9:0a:85:db:5d: 17:3f:01:fc:3c:57:c9:df:35:e7:17:dd:2d:79:26: e5:22:1c:0a:1f:96:40:c5:b2:dd:03:af:b1:78:72: 1c:0c:71:c0:59:5e:b0:3b:f1:9f:f3:6f:17:88:03: 0d:10:55:19:0b:76:0a:d5:cb:eb:86:fa:a3:ba:4e: 19:1c:f4:35:2f:6e:8d:bf:20:f8:d1:6b:79:22:e7: c3:46:85:79:48:58:93:b2:7a:8d:1f:e9:5e:45:b2: 46:0a:63:50:54:48:6c:d9:9b:ef:e3:19:38:5c:c2: bc:00:34:41:0a:a8:b8:21:3e:4a:b3:cb:9d:e8:dd: 3c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 152176 sbgp-ipAddrBlock: critical IPv4: 210.87.64.0/23 IPv6: 2001:df3:3d40::/48 Signature Algorithm: sha256WithRSAEncryption 29:04:8a:11:cc:6d:16:cf:39:ed:ea:7c:80:71:06:48:4e:69: 5b:0a:86:4b:fe:7a:94:fd:fd:80:cc:0d:69:23:dc:1b:7e:90: 8a:e9:35:aa:7a:c5:dd:87:0f:9d:76:46:72:ba:1a:b4:8b:8b: dd:d5:eb:25:05:30:3f:8f:f9:80:22:5e:14:31:f7:b1:33:4a: dd:22:45:e6:e4:c9:40:a1:e2:84:03:ff:a2:bf:f5:cf:11:55: 15:c4:0f:d3:be:8a:09:f3:3d:d3:55:97:9c:8d:ad:87:fb:64: 7b:df:0a:6f:35:22:b6:c6:71:a8:da:a3:f9:62:31:20:af:c2: a9:75:36:89:7f:31:7d:03:82:f6:15:7f:1f:ce:8f:a2:f6:be: 82:6e:49:83:49:ce:cd:e3:ce:d3:46:60:8b:1a:49:bf:5b:5c: 94:7b:84:66:04:76:a7:d1:cb:fe:4d:5a:a5:0d:64:2e:a1:80: 8f:40:43:4a:0a:ff:48:a5:6d:1f:d5:19:2e:79:9d:3a:11:dd: 49:ad:0e:5f:19:42:fe:2a:0c:5a:96:7f:06:96:a8:8f:bd:00: 52:cc:38:56:fb:91:64:68:85:3f:1c:30:3e:5b:f5:be:8a:d8: af:af:bf:0b:af:db:59:93:f7:1f:ee:23:86:32:98:35:12:a4: 04:29:07:e0 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoA+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMzAyNDAzMFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNjI1REIxMTAvBgNVBAUTKDdCRTIzMDE1M0NGRjkwMDE2NDJEQkM5 QjI0Rjg1RDBDQzI4MjM2NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAXr4Jbz19pUdBdvsZwCPaX3khi/aFeCil8fOT2+skAefIQVIaVlpuJqDTw0WN BE9ywE+5kBPkaLFuOPW0shVFh/SwB7+StiN6WDwE/HWmc6Qsd3nSCz9dC74+EfLs oG4KH03ovibwSzFWnsgfFjIw6WYsAMjV2qqMlx6yx863d57JCoXbXRc/Afw8V8nf NecX3S15JuUiHAoflkDFst0Dr7F4chwMccBZXrA78Z/zbxeIAw0QVRkLdgrVy+uG +qO6Thkc9DUvbo2/IPjRa3ki58NGhXlIWJOyeo0f6V5FskYKY1BUSGzZm+/jGThc wrwANEEKqLghPkqzy53o3TxHAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUe+IwFTz/ kAFkLbybJPhdDMKCNk4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTYyNURCLzExOTM5RDEwOTA2OTExRUVCMjNENzQyNUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2MjVEQi8xMTkzOUQxMDkwNjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6 X2tBRmtMYnliSlBoZERNS0NOazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlJwMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQB0ldAMA8EAgAC MAkDBwAgAQ3zPUAwDQYJKoZIhvcNAQELBQADggEBACkEihHMbRbPOe3qfIBxBkhO aVsKhkv+epT9/YDMDWkj3Bt+kIrpNap6xd2HD512RnK6GrSLi93V6yUFMD+P+YAi XhQx97EzSt0iRebkyUCh4oQD/6K/9c8RVRXED9O+ignzPdNVl5yNrYf7ZHvfCm81 IrbGcajao/liMSCvwql1Nol/MX0DgvYVfx/Oj6L2voJuSYNJzs3jztNGYIsaSb9b XJR7hGYEdqfRy/5NWqUNZC6hgI9AQ0oK/0ilbR/VGS55nToR3UmtDl8ZQv4qDFqW fwaWqI+9AFLMOFb7kWRohT8cMD5b9b6K2K+vvwuv21mT9x/uI4YymDUSpAQpB+A= -----END CERTIFICATE-----Generated at Tue Dec 23 13:34:13 2025 by rpki-client