This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer File: 2OL6sVCi_VePZ-GbApZTmzdSyak.cer (raw, json) Hash identifier: 6W2Y0OHXAVwvnnKpKy3njVJlcf45tf+/0NkaG+F6PHg= Subject key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027E13 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 14 Dec 2025 16:07:23 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 2405:4b40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163347 (0x27e13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 14 16:07:23 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:11:8e:39:fc:3d:a4:8b:99:85:e0:f0:0c:ed: bd:eb:7b:d8:47:2c:c4:b5:ec:83:21:53:86:76:ad: 30:26:46:58:03:92:66:fb:f9:75:10:1b:1a:65:45: fd:45:ca:a9:ce:53:e4:fc:f9:1e:84:2f:95:a9:84: da:fe:37:d0:97:e8:39:69:6c:d9:e8:b8:92:f4:26: 3b:c2:75:cc:3f:7d:95:a8:f9:47:7c:77:64:07:aa: b2:97:81:da:1d:60:84:dd:ca:25:85:c0:38:e3:45: f4:ff:3a:22:35:e8:e5:2a:59:68:67:ae:f7:96:6a: fc:cb:9e:55:43:19:5e:31:e9:74:11:a4:b7:12:6d: 44:c5:7d:e3:49:a9:5f:71:ae:a2:96:1e:e2:00:4f: 16:54:bd:b7:1f:2a:ee:2d:61:9f:58:c6:39:17:22: b2:12:ba:ee:58:91:af:f6:49:c7:71:91:c2:c6:2e: 9b:31:2c:e8:a3:6d:02:94:e3:a6:3a:5d:f5:d0:10: ef:f5:fd:92:a8:8c:c9:44:25:1a:7f:c5:aa:04:c5: 4a:21:0c:2e:0a:80:7a:47:37:71:4e:a4:70:2b:c0: fa:53:cd:d1:7f:c5:d2:03:f2:af:7b:d5:5a:84:7d: d5:80:39:f8:3d:70:0c:a1:f2:88:73:3c:76:e2:64: b0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:4b40::/32 Signature Algorithm: sha256WithRSAEncryption 55:40:ab:b0:61:a4:5e:84:fc:dd:4b:bf:e0:59:93:8c:9e:2d: cb:95:cf:60:ff:2b:08:65:31:ac:3d:fc:2a:d9:93:f5:cd:20: 0a:d3:05:a9:3f:b5:26:b2:33:ed:dd:1b:a4:a0:f0:a2:4f:82: 47:36:be:4e:23:a0:7b:e5:3e:75:cc:2d:f8:e4:68:48:c6:aa: 5e:79:a2:66:0c:fa:be:00:cb:c4:62:f7:13:8e:6d:53:ca:92: c0:ce:b6:6e:45:61:9c:00:28:32:11:95:01:09:9b:8e:af:14: 33:fe:00:f7:e1:68:47:98:2e:bf:45:8c:eb:9e:cf:cf:6d:8f: d6:a4:bc:9c:c5:90:e1:43:fe:e4:0d:a3:b8:c5:67:ee:ff:31: 7f:74:da:b5:7c:49:d8:b0:63:ce:ab:95:5c:cb:28:a2:ed:9f: 65:4e:8f:2f:b6:03:99:cf:57:65:b6:3b:bd:62:5c:cc:81:d4: e6:be:dd:1a:86:b3:92:5b:44:d8:1c:c0:d2:b8:94:64:1a:eb: 09:b8:42:a6:56:9c:be:00:91:23:f6:52:06:83:d6:0d:b0:da: 53:d4:07:9d:f2:45:20:f7:ca:db:3b:f0:0b:07:81:49:76:33: 24:43:7c:ae:38:8d:6a:a3:48:a5:b9:99:32:08:43:a4:88:09: 20:e0:60:4d -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgIDAn4TMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNDE2MDcyM1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRUMyMjUxMTAvBgNVBAUTKEQ4RTJGQUIxNTBBMkZENTc4RjY3RTE5 QjAyOTY1MzlCMzc1MkM5QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWEY45/D2ki5mF4PAM7b3re9hHLMS17IMhU4Z2rTAmRlgDkmb7+XUQGxplRf1F yqnOU+T8+R6EL5WphNr+N9CX6DlpbNnouJL0JjvCdcw/fZWo+Ud8d2QHqrKXgdod YITdyiWFwDjjRfT/OiI16OUqWWhnrveWavzLnlVDGV4x6XQRpLcSbUTFfeNJqV9x rqKWHuIATxZUvbcfKu4tYZ9YxjkXIrISuu5Yka/2ScdxkcLGLpsxLOijbQKU46Y6 XfXQEO/1/ZKojMlEJRp/xaoExUohDC4KgHpHN3FOpHArwPpTzdF/xdID8q971VqE fdWAOfg9cAyh8ohzPHbiZLBlAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQU2OL6sVCi /VePZ+GbApZTmzdSyakwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVDMjI1LzQ5OUZERjkwOEU1NTExRTk4MEQwOUE0MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFQzIyNS80OTlGREY5MDhFNTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZD aV9WZVBaLUdiQXBaVG16ZFN5YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAkBUtAMA0GCSqGSIb3DQEBCwUAA4IBAQBVQKuwYaRehPzdS7/g WZOMni3Llc9g/ysIZTGsPfwq2ZP1zSAK0wWpP7UmsjPt3RukoPCiT4JHNr5OI6B7 5T51zC345GhIxqpeeaJmDPq+AMvEYvcTjm1TypLAzrZuRWGcACgyEZUBCZuOrxQz /gD34WhHmC6/RYzrns/PbY/WpLycxZDhQ/7kDaO4xWfu/zF/dNq1fEnYsGPOq5Vc yyii7Z9lTo8vtgOZz1dltju9YlzMgdTmvt0ahrOSW0TYHMDSuJRkGusJuEKmVpy+ AJEj9lIGg9YNsNpT1Aed8kUg98rbO/ALB4FJdjMkQ3yuOI1qo0iluZkyCEOkiAkg 4GBN -----END CERTIFICATE-----Generated at Fri Dec 19 16:00:51 2025 by rpki-client