This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer File: ko35XOma_Fud5gHm6GQDwNiRUp8.cer (raw, json) Hash identifier: myaLKKltg2kAaixpWo3iQ7oj0Kpm6iuDMt0RRAd5SQ4= Subject key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0274F0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 13 Nov 2025 11:21:06 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154356 IP: 2001:df6:4c40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 14:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161008 (0x274f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 13 11:21:06 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:70:25:fc:21:60:24:dd:ca:bd:c9:2c:03:66: 44:26:da:8b:f8:ea:83:43:24:77:26:c4:17:f2:54: 14:c2:9b:ce:d0:25:4f:ac:2c:70:e0:18:d0:50:aa: f9:6b:1e:87:6a:92:00:78:51:ed:7c:e0:40:15:55: 53:37:3a:bb:3f:98:5d:6b:14:ce:bd:96:b8:09:83: 61:8a:48:39:d6:5f:54:f0:2e:72:f1:1d:3e:52:0e: 41:71:99:9b:15:c7:04:59:1e:a7:19:9b:02:1e:2b: 9f:93:ce:b4:aa:4a:12:c2:79:00:84:19:f5:24:8f: 7c:52:21:da:0e:c3:8d:90:ff:a0:f0:d4:b4:da:20: 2e:a6:8e:ed:ac:78:95:d2:10:cc:91:2d:be:29:df: 2d:db:9b:d2:6e:63:ed:e1:2d:6a:87:f6:42:10:24: 7a:39:01:59:f8:f4:56:9d:b0:cc:0d:e5:17:2d:7d: 2b:59:9f:97:02:de:5b:0d:50:b3:66:1f:eb:1e:4d: 07:4e:8d:54:16:5b:6c:bf:f7:8c:d6:d3:a6:37:86: 13:8a:3d:18:8e:5e:fe:91:9a:f2:ba:02:92:2e:61: 8d:24:8b:c3:42:65:25:2b:f7:db:c8:56:03:5c:f1: 05:40:e9:04:63:0f:05:97:d8:2e:82:6e:51:d8:f3: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154356 sbgp-ipAddrBlock: critical IPv6: 2001:df6:4c40::/48 Signature Algorithm: sha256WithRSAEncryption d0:4b:5c:9c:e7:fa:42:81:53:f3:81:d1:93:6f:f3:35:8e:20: 45:e6:19:75:a4:d7:5e:18:37:63:86:cc:8b:22:f5:74:b6:a9: 96:36:9d:6d:5a:b7:56:04:29:f1:74:72:d7:1f:97:da:51:f7: aa:db:83:4c:2d:66:ab:cc:0f:c3:b0:3f:08:c9:88:ab:a5:ee: 8f:3a:12:55:c2:17:b9:3b:1f:ee:3c:54:39:d9:c6:c6:a9:69: b0:84:00:a5:5a:ec:18:bc:3b:bd:2d:f4:20:1f:0a:77:a0:06: 20:bc:5c:5f:0c:c9:73:a8:7b:8a:13:5a:06:55:0b:a9:db:ba: b9:98:54:65:76:2e:27:c3:ae:e9:00:e2:02:c4:3b:3a:2b:72: a1:56:2b:e9:35:a6:98:d0:02:4e:f5:0b:2a:18:ac:96:ff:8e: 7d:d7:e0:a6:45:a2:1b:4d:70:f5:25:76:4f:19:c4:ba:4b:72: 5f:51:b5:98:cc:a2:b9:e0:b4:dd:de:62:09:77:e5:0b:6d:59: 7f:81:41:d8:6d:00:17:76:26:3f:90:46:24:b1:c5:fb:ad:25: a7:0d:f7:b8:1d:1f:ea:ff:3c:64:b8:2b:d2:ba:4b:49:9c:88: 6f:a6:3a:d9:9c:2d:a0:56:cd:13:35:e4:80:61:bf:f0:4b:3d: c4:77:97:c7 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAnTwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMzExMjEwNloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTlBNDQxMTAvBgNVBAUTKDkyOERGOTVDRTk5QUZDNUI5REU2MDFF NkU4NjQwM0MwRDg5MTUyOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrcCX8IWAk3cq9ySwDZkQm2ov46oNDJHcmxBfyVBTCm87QJU+sLHDgGNBQqvlr HodqkgB4Ue184EAVVVM3Ors/mF1rFM69lrgJg2GKSDnWX1TwLnLxHT5SDkFxmZsV xwRZHqcZmwIeK5+TzrSqShLCeQCEGfUkj3xSIdoOw42Q/6Dw1LTaIC6mju2seJXS EMyRLb4p3y3bm9JuY+3hLWqH9kIQJHo5AVn49FadsMwN5RctfStZn5cC3lsNULNm H+seTQdOjVQWW2y/94zW06Y3hhOKPRiOXv6RmvK6ApIuYY0ki8NCZSUr99vIVgNc 8QVA6QRjDwWX2C6CblHY86fdAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUko35XOma /Fud5gHm6GQDwNiRUp8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU5QTQ0L0Q2OTJFMUNBQzA4MjExRjBBMDhDNzIyNkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFOUE0NC9ENjkyRTFDQUMwODIxMUYwQTA4QzcyMjZDNEY5QUUwMi9rbzM1WE9t YV9GdWQ1Z0htNkdRRHdOaVJVcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlr0MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9kxAMA0G CSqGSIb3DQEBCwUAA4IBAQDQS1yc5/pCgVPzgdGTb/M1jiBF5hl1pNdeGDdjhsyL IvV0tqmWNp1tWrdWBCnxdHLXH5faUfeq24NMLWarzA/DsD8IyYirpe6POhJVwhe5 Ox/uPFQ52cbGqWmwhAClWuwYvDu9LfQgHwp3oAYgvFxfDMlzqHuKE1oGVQup27q5 mFRldi4nw67pAOICxDs6K3KhVivpNaaY0AJO9QsqGKyW/4591+CmRaIbTXD1JXZP GcS6S3JfUbWYzKK54LTd3mIJd+ULbVl/gUHYbQAXdiY/kEYkscX7rSWnDfe4HR/q /zxkuCvSuktJnIhvpjrZnC2gVs0TNeSAYb/wSz3Ed5fH -----END CERTIFICATE-----Generated at Wed Dec 3 16:34:20 2025 by rpki-client