This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer File: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer (raw, json) Hash identifier: LVuoSgxkiOj/LSStXDRj6GzZQF6MZ08I/0r9zEIU4yM= Subject key identifier: BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027FFB Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 22 Dec 2025 05:05:35 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154449 IP: 2001:df6:7a40::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163835 (0x27ffb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 22 05:05:35 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91E4EEF, serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:72:4d:1f:ec:7f:5e:8f:fe:85:0e:cd:fd:dd: 41:12:d6:6e:c0:7b:90:b1:9f:74:46:85:b6:d6:78: 1e:15:6b:7d:ed:1e:67:7b:b0:bb:59:93:56:ac:b8: ea:2e:99:ff:2f:b7:ec:4f:ec:a2:df:db:5f:42:eb: 4a:f9:cf:9f:5b:10:5f:ac:87:23:42:3f:0e:f4:b3: 6a:f7:18:99:15:8f:8a:c2:cc:33:6d:ce:49:93:f8: d3:be:1c:3b:16:76:fb:9f:e4:ea:79:39:72:f3:55: 0a:e8:0b:40:56:2a:04:20:b7:da:40:73:7c:fb:b2: cd:9b:4e:57:ec:f4:e0:80:e7:cc:f6:2f:56:86:36: 85:9a:35:a8:fa:7b:a2:81:92:35:d5:93:b0:13:f0: be:fc:c0:3d:b6:5b:53:36:f2:70:26:ef:f8:75:dd: 01:ab:a9:9d:da:de:26:20:65:fd:74:03:41:04:5e: 81:44:f6:6d:35:8f:70:49:d7:5a:9c:3d:08:6e:90: 5b:6b:66:1e:16:26:6f:84:60:a4:9b:96:91:c0:9b: 5e:32:bb:8d:b3:17:70:6a:0d:18:a6:2f:66:e1:9b: c5:77:35:7f:06:06:74:f5:58:11:d0:09:b4:12:7e: 9d:41:7a:88:ad:7c:23:b4:cf:d9:8f:5f:f7:e1:89: 8f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154449 sbgp-ipAddrBlock: critical IPv6: 2001:df6:7a40::/48 Signature Algorithm: sha256WithRSAEncryption b3:35:2b:71:47:92:e3:4e:8d:f8:b8:a9:c7:02:0f:74:38:20: f7:e6:a9:e4:a1:b6:85:7e:91:c3:5d:72:83:a0:71:91:3c:ea: d7:45:be:4a:ab:ec:c5:0f:f1:f0:7c:e1:52:05:aa:ee:98:74: 4c:67:4d:fb:8b:f3:e6:ab:20:d4:b8:4c:a2:fa:e1:09:e8:45: 67:31:15:52:bf:be:ab:1a:0e:ca:9a:e9:db:3e:58:9f:89:e1: e4:08:2e:65:16:32:78:d5:c5:a5:ad:8a:b8:26:40:22:71:6c: 7d:f0:e5:44:c6:0f:54:75:42:e0:69:0e:be:6b:a6:fa:76:2e: a7:d9:30:34:17:11:8a:6b:e9:99:15:b5:b8:0b:f0:2f:54:fa: c1:cf:b6:8b:b5:5f:9e:d4:ce:ae:e3:f3:d5:36:d8:8e:e0:26: 06:6f:5b:af:90:21:d7:ac:40:ae:5c:f4:ce:b8:aa:be:db:e2: 23:a9:c2:5c:21:b7:f0:74:ac:1e:46:cd:8e:84:5d:f5:94:9a: 2c:be:d5:ff:8a:9e:32:e3:68:f3:4f:4f:44:fa:dc:21:2b:fc: 45:0e:d7:90:3c:a8:d7:81:18:84:0d:90:06:26:1a:e1:3d:89: 6f:5e:69:65:87:8b:87:ed:f9:a4:a9:41:e6:13:93:b4:00:24: 90:c3:34:6d -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAn/7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMjA1MDUzNVoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRTRFRUYxMTAvBgNVBAUTKEJDRUE5MTE0REY5MzZDREU4OTRGQzA4 NEY4MDhDRkQwOUUxNEY0QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIck0f7H9ej/6FDs393UES1m7Ae5Cxn3RGhbbWeB4Va33tHmd7sLtZk1asuOou mf8vt+xP7KLf219C60r5z59bEF+shyNCPw70s2r3GJkVj4rCzDNtzkmT+NO+HDsW dvuf5Op5OXLzVQroC0BWKgQgt9pAc3z7ss2bTlfs9OCA58z2L1aGNoWaNaj6e6KB kjXVk7AT8L78wD22W1M28nAm7/h13QGrqZ3a3iYgZf10A0EEXoFE9m01j3BJ11qc PQhukFtrZh4WJm+EYKSblpHAm14yu42zF3BqDRimL2bhm8V3NX8GBnT1WBHQCbQS fp1BeoitfCO0z9mPX/fhiY9nAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUvOqRFN+T bN6JT8CE+AjP0J4U9LQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU0RUVGL0Q3MTA1QkI2REVGMzExRjA5RUQ0MTI5NjU3NkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFNEVFRi9ENzEwNUJCNkRFRjMxMUYwOUVENDEyOTY1NzZGNTZCQy92T3FSRk4t VGJONkpUOENFLUFqUDBKNFU5TFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAltRMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9npAMA0G CSqGSIb3DQEBCwUAA4IBAQCzNStxR5LjTo34uKnHAg90OCD35qnkobaFfpHDXXKD oHGRPOrXRb5Kq+zFD/HwfOFSBarumHRMZ037i/PmqyDUuEyi+uEJ6EVnMRVSv76r Gg7KmunbPlifieHkCC5lFjJ41cWlrYq4JkAicWx98OVExg9UdULgaQ6+a6b6di6n 2TA0FxGKa+mZFbW4C/AvVPrBz7aLtV+e1M6u4/PVNtiO4CYGb1uvkCHXrECuXPTO uKq+2+IjqcJcIbfwdKweRs2OhF31lJosvtX/ip4y42jzT09E+twhK/xFDteQPKjX gRiEDZAGJhrhPYlvXmllh4uH7fmkqUHmE5O0ACSQwzRt -----END CERTIFICATE-----Generated at Wed Dec 24 12:21:43 2025 by rpki-client