This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer File: u7dF5o0mJdldbQcyKFARSry-_wQ.cer (raw, json) Hash identifier: fVV/y0ydHZZvuK/f88uiXu1qTrci2ZPGSe8gPgHLgBA= Subject key identifier: BB:B7:45:E6:8D:26:25:D9:5D:6D:07:32:28:50:11:4A:BC:BE:FF:04 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0277B0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 03:58:53 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 154283 IP: 2402:3060::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 14:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161712 (0x277b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 03:58:53 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9168F50, serialNumber=BBB745E68D2625D95D6D07322850114ABCBEFF04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6a:d7:e4:48:17:25:bd:98:8e:9c:51:05:e8: be:35:44:c6:26:df:c9:f9:af:04:77:a1:21:da:a4: 73:b8:ef:47:07:52:6f:7e:8b:22:09:57:d3:68:1c: 80:10:c3:34:80:73:d5:92:9b:4d:3a:02:99:50:82: d3:e0:38:05:de:7c:9c:eb:52:68:50:78:46:9e:47: 59:62:38:2e:d9:ea:a1:7b:1c:60:30:af:ac:42:f2: f0:3e:ce:6c:80:d8:dc:87:84:a1:e8:38:5b:31:64: 64:8d:9e:4b:fb:c7:5a:92:5a:d9:10:8a:08:20:ec: 2a:a5:c3:d4:4b:73:8f:5b:90:73:8d:ea:00:f3:1d: 91:01:56:5f:f9:50:3d:69:2e:55:23:2f:2d:66:d8: e4:a1:60:cd:84:e3:02:5b:b3:c7:c2:10:d5:bb:0b: a5:b7:14:d2:b0:6c:a2:6f:de:8d:e2:46:54:68:93: b1:a2:a3:70:03:90:8f:49:d3:dd:06:3d:47:c0:f9: fe:bc:fe:67:c4:7f:b1:fa:60:6c:52:8a:32:4e:3f: 7d:d4:e8:f6:3a:a5:f0:49:76:4b:e3:77:68:b0:6a: 1f:f8:26:de:2b:7e:4e:29:0f:a0:e3:c9:53:e2:bc: 94:e3:61:4f:12:31:2c:d9:3f:fd:bb:4e:72:36:06: 53:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B7:45:E6:8D:26:25:D9:5D:6D:07:32:28:50:11:4A:BC:BE:FF:04 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154283 sbgp-ipAddrBlock: critical IPv6: 2402:3060::/32 Signature Algorithm: sha256WithRSAEncryption 92:51:a3:34:33:1a:a3:37:1b:41:ba:23:52:8a:c3:08:9f:66: 7f:34:80:5a:35:3b:d3:d6:be:15:da:bb:7e:bc:d7:49:39:9a: 4d:30:76:6d:40:64:83:3c:04:c8:9d:2a:0a:e6:16:b4:f1:f0: a3:e9:53:60:4a:ab:92:2b:e2:a8:5c:e0:c2:79:fb:62:32:a0: 21:37:6c:f7:9c:d0:46:13:bf:14:62:30:08:04:c4:62:f6:61: c8:82:eb:c7:1f:0b:55:3e:a8:7f:1c:4b:2e:8b:7d:81:de:ec: 09:fc:85:a5:b1:a6:09:b0:71:fb:51:14:2d:8b:93:03:55:ad: d6:21:45:57:da:52:45:8d:ba:db:31:72:a5:70:a9:bd:5c:4a: 5d:08:d6:3f:cf:9a:e1:30:f4:07:05:fc:6b:48:89:11:64:05: 58:a8:c4:3b:47:2e:39:8a:d6:c9:68:0b:15:b3:1a:06:fe:1d: c2:25:a5:72:a2:f3:c1:73:22:80:78:04:2d:2d:8c:e0:7c:5b: 35:2f:37:52:b4:37:23:d3:cc:61:cc:4d:f3:19:fa:83:08:64: 71:a5:fa:0a:f7:9d:a0:de:bc:43:f7:ff:81:4a:9e:33:30:8f: 2d:70:89:19:2f:39:63:1c:6b:f2:14:a4:ba:b7:df:f3:32:bd: 2b:30:ec:21 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAnewMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTAzNTg1M1oXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNjhGNTAxMTAvBgNVBAUTKEJCQjc0NUU2OEQyNjI1RDk1RDZEMDcz MjI4NTAxMTRBQkNCRUZGMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxatfkSBclvZiOnFEF6L41RMYm38n5rwR3oSHapHO470cHUm9+iyIJV9NoHIAQ wzSAc9WSm006AplQgtPgOAXefJzrUmhQeEaeR1liOC7Z6qF7HGAwr6xC8vA+zmyA 2NyHhKHoOFsxZGSNnkv7x1qSWtkQiggg7Cqlw9RLc49bkHON6gDzHZEBVl/5UD1p LlUjLy1m2OShYM2E4wJbs8fCENW7C6W3FNKwbKJv3o3iRlRok7Gio3ADkI9J090G PUfA+f68/mfEf7H6YGxSijJOP33U6PY6pfBJdkvjd2iwah/4Jt4rfk4pD6DjyVPi vJTjYU8SMSzZP/27TnI2BlPFAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUu7dF5o0m JdldbQcyKFARSry+/wQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY4RjUwLzBDRUREMUNFQzlCMzExRjA5QjM0RkM3OEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2OEY1MC8wQ0VERDFDRUM5QjMxMUYwOUIzNEZDNzhDNEY5QUUwMi91N2RGNW8w bUpkbGRiUWN5S0ZBUlNyeS1fd1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlqrMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAIwYDANBgkq hkiG9w0BAQsFAAOCAQEAklGjNDMaozcbQbojUorDCJ9mfzSAWjU709a+Fdq7frzX STmaTTB2bUBkgzwEyJ0qCuYWtPHwo+lTYEqrkiviqFzgwnn7YjKgITds95zQRhO/ FGIwCATEYvZhyILrxx8LVT6ofxxLLot9gd7sCfyFpbGmCbBx+1EULYuTA1Wt1iFF V9pSRY262zFypXCpvVxKXQjWP8+a4TD0BwX8a0iJEWQFWKjEO0cuOYrWyWgLFbMa Bv4dwiWlcqLzwXMigHgELS2M4HxbNS83UrQ3I9PMYcxN8xn6gwhkcaX6CvedoN68 Q/f/gUqeMzCPLXCJGS85Yxxr8hSkurff8zK9KzDsIQ== -----END CERTIFICATE-----Generated at Wed Dec 3 16:34:20 2025 by rpki-client