This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer (raw, json) Hash identifier: q1M0CCfZeeaO1VP0lVFoVZdJFxq+1CVhSHWszzgKDFc= Subject key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027DD7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 12 Dec 2025 18:01:34 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 38138 IP: 114.129.12.0/22 IP: 2405:eec0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163287 (0x27dd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 12 18:01:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:42:de:d3:d8:8c:12:81:a7:7e:43:57:83:7b: 41:00:01:e4:2a:46:13:f0:73:ab:99:23:9a:b3:7e: 6d:11:8b:bd:1f:ce:fa:53:87:23:9e:19:b1:27:92: dd:ba:88:28:80:9f:91:49:2d:28:ad:37:d1:7b:09: 07:0f:c0:fe:dd:b6:83:b9:4d:c4:d6:b7:d8:3f:f9: f2:b9:56:0d:db:09:43:87:8d:97:5b:ef:44:7b:56: 57:fd:ba:f1:35:18:5b:b9:c1:47:bd:1a:7e:44:1b: bc:2e:e3:41:48:dd:4c:c1:d0:d4:50:b9:b4:d5:a0: 34:e8:73:46:ce:f0:bb:78:fb:68:78:72:c8:92:0b: a7:ba:34:bd:60:da:52:16:e8:86:2c:54:d6:4b:57: 5e:90:33:57:8a:f6:b0:7b:9b:bb:6c:87:6c:00:46: 4b:7c:67:e9:86:7e:1b:27:d2:53:9a:c1:74:8a:41: 66:b5:d0:37:29:a3:5a:35:cb:4e:a2:16:c8:36:32: cc:ea:be:07:e7:aa:6e:a6:30:51:95:53:03:f0:27: 74:8d:00:23:eb:9a:f5:72:46:ba:23:4c:70:9d:5a: 99:93:c0:59:4f:c2:b2:16:53:33:05:96:3d:5e:10: ff:34:09:6d:93:60:1f:34:96:fe:c0:87:c5:8d:bc: 82:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38138 sbgp-ipAddrBlock: critical IPv4: 114.129.12.0/22 IPv6: 2405:eec0::/32 Signature Algorithm: sha256WithRSAEncryption 56:72:56:cc:69:3f:bd:bb:89:ee:d1:44:e5:52:be:d0:d4:8d: f0:c9:e1:54:da:4a:dc:3d:b4:60:c6:d9:ee:98:c0:7e:fc:f3: 14:d9:43:ba:e9:b6:43:3a:fc:83:ab:e4:43:3c:2a:2d:49:00: c3:b2:83:12:0d:80:19:d0:b7:dd:e8:34:a1:c4:34:92:c4:f4: 7c:5c:98:61:8d:bf:a7:17:47:43:eb:a9:e6:0f:d8:28:3d:09: 1c:2a:07:66:31:b8:74:0f:1c:54:4d:74:7b:10:54:68:6f:8b: c7:53:97:27:f7:ea:f9:e4:dd:0a:1f:2c:3b:12:dd:c9:c4:cf: 45:7f:41:f0:e9:1b:96:88:c7:a4:07:50:e5:85:67:14:e1:b5: 7c:1b:47:d3:5e:a0:5a:76:fb:78:52:64:30:fc:53:8f:53:34: 10:8c:d9:8e:dd:47:d6:a7:1a:27:81:e3:1d:6d:c2:dc:53:9a: e4:d2:d8:7f:69:13:4b:78:e0:30:da:2b:ed:93:54:c6:fd:64: ee:d2:2f:b1:d2:e5:d9:73:c7:de:98:d2:35:aa:07:87:f8:19: 2d:7c:b5:1f:0a:45:c0:50:8b:90:cd:ae:c7:43:14:e1:b1:df: b8:59:fd:ad:48:a4:8b:81:65:86:69:ad:71:b3:c8:c5:f1:a3: 9d:a7:f5:e5 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAn3XMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMjE4MDEzNFoXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhE NTkxOTI4M0RCRTE2OTA5MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgQt7T2IwSgad+Q1eDe0EAAeQqRhPwc6uZI5qzfm0Ri70fzvpThyOeGbEnkt26 iCiAn5FJLSitN9F7CQcPwP7dtoO5TcTWt9g/+fK5Vg3bCUOHjZdb70R7Vlf9uvE1 GFu5wUe9Gn5EG7wu40FI3UzB0NRQubTVoDToc0bO8Lt4+2h4csiSC6e6NL1g2lIW 6IYsVNZLV16QM1eK9rB7m7tsh2wARkt8Z+mGfhsn0lOawXSKQWa10Dcpo1o1y06i Fsg2Mszqvgfnqm6mMFGVUwPwJ3SNACPrmvVyRrojTHCdWpmTwFlPwrIWUzMFlj1e EP80CW2TYB80lv7Ah8WNvILhAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUpLUL7Ni7 ooVYcSjVkZKD2+FpCRgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUMwQkRFLzdFNUFDM0UwODk3MTExRUE5MjQwMkEwQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDMEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05p N29vVlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAJT6MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCcoEMMA0EAgAC MAcDBQAkBe7AMA0GCSqGSIb3DQEBCwUAA4IBAQBWclbMaT+9u4nu0UTlUr7Q1I3w yeFU2krcPbRgxtnumMB+/PMU2UO66bZDOvyDq+RDPCotSQDDsoMSDYAZ0Lfd6DSh xDSSxPR8XJhhjb+nF0dD66nmD9goPQkcKgdmMbh0DxxUTXR7EFRob4vHU5cn9+r5 5N0KHyw7Et3JxM9Ff0Hw6RuWiMekB1DlhWcU4bV8G0fTXqBadvt4UmQw/FOPUzQQ jNmO3UfWpxongeMdbcLcU5rk0th/aRNLeOAw2ivtk1TG/WTu0i+x0uXZc8femNI1 qgeH+BktfLUfCkXAUIuQza7HQxThsd+4Wf2tSKSLgWWGaa1xs8jF8aOdp/Xl -----END CERTIFICATE-----Generated at Fri Dec 19 19:22:44 2025 by rpki-client