This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer File: kFj-3Oxfh289_hYZQxnBRcnAzLU.cer (raw, json) Hash identifier: 2pRFxeb9t+cLUv88xZmTiDo+kF246kGoW5QXjQYBZg0= Subject key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027CD5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft caRepository: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 16:55:16 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 55941 IP: 202.94.78.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 12:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163029 (0x27cd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 8 16:55:16 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9185B0F, serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:0c:e8:5b:23:27:81:d5:0f:b6:3c:71:63: bd:21:7f:34:62:c3:da:88:8f:8f:34:54:16:92:5a: a2:81:95:ac:ef:73:69:de:cf:e8:43:38:4e:ce:3e: f5:01:6e:6f:28:27:ba:ff:e6:ea:93:b8:d3:48:b4: f2:2b:59:92:49:5b:26:20:d1:cb:39:24:f3:06:88: 22:cb:c0:f3:98:52:78:4e:20:ce:45:e1:86:bd:0e: 87:87:94:54:65:98:ef:5b:20:54:9b:6e:6d:e0:18: 2f:89:bd:76:d4:32:26:de:31:74:f1:5e:06:61:3d: e7:bb:ea:66:38:e2:f3:a6:45:e0:69:a8:9c:34:4e: cd:20:7e:40:08:4f:1f:1b:96:6a:bd:a9:a4:f7:7e: ee:16:f1:65:83:09:fd:0f:31:73:60:69:3b:0e:ad: 98:d4:44:75:7b:27:61:83:2e:12:47:49:0d:2b:c5: e8:af:df:75:1e:93:99:14:78:cf:09:72:0a:0b:c7: 87:6c:9a:fa:6c:c4:46:ea:d8:2f:69:9c:15:54:74: ed:d4:bd:75:d6:37:53:86:44:11:a5:3d:a8:92:48: 81:ae:bc:c5:48:86:70:c0:b9:d9:89:0d:5d:bd:57: 4b:6c:51:c9:3e:e2:5f:0b:59:07:1f:7f:e2:d0:ed: cc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 55941 sbgp-ipAddrBlock: critical IPv4: 202.94.78.0/23 Signature Algorithm: sha256WithRSAEncryption d7:f4:c0:39:f1:d9:94:94:bf:c2:7d:d1:70:73:0f:26:48:fe: 67:98:02:78:ba:56:08:59:e2:ef:2b:a8:c3:11:3b:85:ba:6c: 75:b4:2a:ab:2c:01:6f:b3:79:1a:bc:c0:4b:c0:8b:ae:84:9c: 13:a1:b3:4c:35:a3:c6:06:7b:92:61:3b:3b:93:43:f6:d0:85: 6e:e3:f6:a4:97:32:15:fb:51:6a:1d:aa:7a:6c:60:41:b4:76: 2d:e7:a5:7f:eb:95:53:66:ac:f7:b8:a3:25:1c:f0:c8:02:a2: 42:0b:5a:21:fa:69:ae:bd:a2:5d:8e:69:95:e1:59:db:d8:52: 35:b5:53:3b:88:f7:27:6f:12:9c:78:69:34:1f:c2:07:4c:00: 47:53:7a:b0:ef:ca:97:cd:85:3e:78:c4:16:ef:db:6c:57:85: 94:c9:64:c1:c6:42:f0:c6:ce:9f:7f:32:35:83:fe:a7:76:bd: e6:69:19:9d:ff:af:a6:b1:f9:87:fa:57:ba:22:64:69:e6:79: f2:fb:80:1f:7f:26:94:ed:b1:29:21:3f:f6:c7:b3:1b:b9:5c: eb:ea:20:43:1a:93:9b:3d:f9:39:0c:17:4c:8e:4a:4a:5a:02: 03:36:0e:7c:f7:a7:b3:f3:0d:f2:d0:81:de:d7:db:ee:92:41: 71:cf:08:d3 -----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgIDAnzVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwODE2NTUxNloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxODVCMEYxMTAvBgNVBAUTKDkwNThGRURDRUM1Rjg3NkYzREZFMTYx OTQzMTlDMTQ1QzlDMENDQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt+AzoWyMngdUPtjxxY70hfzRiw9qIj480VBaSWqKBlazvc2nez+hDOE7OPvUB bm8oJ7r/5uqTuNNItPIrWZJJWyYg0cs5JPMGiCLLwPOYUnhOIM5F4Ya9DoeHlFRl mO9bIFSbbm3gGC+JvXbUMibeMXTxXgZhPee76mY44vOmReBpqJw0Ts0gfkAITx8b lmq9qaT3fu4W8WWDCf0PMXNgaTsOrZjURHV7J2GDLhJHSQ0rxeiv33Uek5kUeM8J cgoLx4dsmvpsxEbq2C9pnBVUdO3UvXXWN1OGRBGlPaiSSIGuvMVIhnDAudmJDV29 V0tsUck+4l8LWQcff+LQ7czTAgMBAAGjggMPMIIDCzAdBgNVHQ4EFgQUkFj+3Oxf h289/hYZQxnBRcnAzLUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg1QjBGLzUyRDBBMTIwODU0RTExRUJCNzVCQjAwOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4NUIwRi81MkQwQTEyMDg1NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094 ZmgyODlfaFlaUXhuQlJjbkF6TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANqFMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByl5OMA0GCSqG SIb3DQEBCwUAA4IBAQDX9MA58dmUlL/CfdFwcw8mSP5nmAJ4ulYIWeLvK6jDETuF umx1tCqrLAFvs3kavMBLwIuuhJwTobNMNaPGBnuSYTs7k0P20IVu4/aklzIV+1Fq Hap6bGBBtHYt56V/65VTZqz3uKMlHPDIAqJCC1oh+mmuvaJdjmmV4Vnb2FI1tVM7 iPcnbxKceGk0H8IHTABHU3qw78qXzYU+eMQW79tsV4WUyWTBxkLwxs6ffzI1g/6n dr3maRmd/6+msfmH+le6ImRp5nny+4AffyaU7bEpIT/2x7MbuVzr6iBDGpObPfk5 DBdMjkpKWgIDNg5896ez8w3y0IHe19vukkFxzwjT -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:37 2025 by rpki-client