This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer File: 2x93mMABF7IMbzvDKZSALPIJSDc.cer (raw, json) Hash identifier: WoJ+aP+Of82s565k72QaHQVV5ZuO2Bg+l7uPxjF1Eq4= Subject key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D50 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 10 Dec 2025 15:58:46 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: IP: 2404:2100::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163152 (0x27d50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 10 15:58:46 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A91BA594, serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:6b:9b:d8:30:fe:38:0a:e5:04:0c:88:24: 83:85:a7:05:4a:d5:20:fb:56:26:77:4c:df:31:8b: 9d:7f:23:b7:83:20:bb:e3:a5:c1:d5:26:1a:2a:30: f7:ef:d0:a0:a6:24:ca:c3:d5:ba:ce:e7:5f:65:ae: 91:35:4c:af:49:af:73:e9:ac:87:b6:2c:1e:41:c0: d5:92:a2:4f:cb:8d:4d:19:2c:25:3c:56:16:43:f3: 1e:e2:65:cd:ca:9e:38:c8:fa:7f:44:02:c3:4c:ce: 8b:98:26:22:20:85:e7:04:a9:a7:f3:87:64:00:b7: 68:af:56:8f:39:2e:69:e4:fb:e7:8c:fb:2c:65:70: de:61:32:58:1c:27:ae:aa:18:68:d7:9c:cd:e6:8f: 9e:64:f0:55:af:39:9c:4d:bf:c2:6a:dd:78:41:99: f7:bf:0a:40:f8:88:df:05:e1:78:d7:20:33:40:44: 46:a4:ed:3b:dd:92:86:48:6f:4c:06:43:de:85:7e: 35:b4:dd:32:81:d2:e8:85:51:08:db:96:fb:b2:55: 4f:ad:a4:34:1d:62:c4:96:a6:1e:65:23:15:43:ab: 4c:b1:7f:fe:bc:2b:53:07:05:d0:6d:46:3d:de:d6: ae:d0:43:ac:be:1d:31:47:a5:f9:c5:be:a6:a3:b5: 9e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:2100::/32 Signature Algorithm: sha256WithRSAEncryption 77:e2:a4:df:d4:67:6a:6a:01:10:9f:9f:21:5b:e1:31:f1:f1: dd:27:0a:07:ad:5c:7a:ce:97:9b:03:02:39:75:2f:31:d0:83: db:4a:7f:3d:12:d1:f4:f4:1b:35:ab:42:aa:21:f7:2b:23:ad: 6d:e8:b3:d2:0c:94:59:d7:06:cc:7a:0e:7f:41:44:b8:1d:b3: 79:b4:ae:93:06:e5:78:58:02:66:fd:99:62:af:ae:3f:2a:cf: 2c:ac:04:e6:eb:bc:66:f7:21:94:6d:50:44:67:66:4b:50:a3: 39:2d:d1:9c:bf:57:08:73:3e:0b:76:d6:8c:1a:43:4c:01:e7: ad:88:a5:fc:61:98:cb:20:7f:a8:1e:0c:9d:6f:26:fc:23:23: 32:f4:45:a9:e3:f6:ff:33:75:5f:0f:e2:32:5e:5a:cb:0e:63: cf:18:02:a7:eb:e2:b7:91:ee:8c:8d:b7:0b:f6:be:5e:a1:a7: 89:cc:fd:56:5e:e4:e8:3b:d6:72:0f:04:ae:d6:fe:89:18:26: a7:53:62:8d:09:ef:96:3b:df:97:c9:d9:78:0c:3a:89:e1:79: 72:f7:20:e1:e5:34:54:f2:3a:21:ae:c4:bc:d8:25:40:49:3a: f3:49:88:f1:2a:5c:47:88:25:15:ba:7f:47:19:37:75:46:50: f9:df:bb:db -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgIDAn1QMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMDE1NTg0NloXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkE1OTQxMTAvBgNVBAUTKERCMUY3Nzk4QzAwMTE3QjIwQzZGM0JD MzI5OTQ4MDJDRjIwOTQ4MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGf2ub2DD+OArlBAyIJIOFpwVK1SD7ViZ3TN8xi51/I7eDILvjpcHVJhoqMPfv 0KCmJMrD1brO519lrpE1TK9Jr3PprIe2LB5BwNWSok/LjU0ZLCU8VhZD8x7iZc3K njjI+n9EAsNMzouYJiIghecEqafzh2QAt2ivVo85Lmnk++eM+yxlcN5hMlgcJ66q GGjXnM3mj55k8FWvOZxNv8Jq3XhBmfe/CkD4iN8F4XjXIDNAREak7TvdkoZIb0wG Q96FfjW03TKB0uiFUQjblvuyVU+tpDQdYsSWph5lIxVDq0yxf/68K1MHBdBtRj3e 1q7QQ6y+HTFHpfnFvqajtZ7rAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQU2x93mMAB F7IMbzvDKZSALPIJSDcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJBNTk0LzUyMkI2RDZFNTUzQzExRUI4RjA4NUM3MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCQTU5NC81MjJCNkQ2RTU1M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1B QkY3SU1ienZES1pTQUxQSUpTRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAkBCEAMA0GCSqGSIb3DQEBCwUAA4IBAQB34qTf1GdqagEQn58h W+Ex8fHdJwoHrVx6zpebAwI5dS8x0IPbSn89EtH09Bs1q0KqIfcrI61t6LPSDJRZ 1wbMeg5/QUS4HbN5tK6TBuV4WAJm/Zlir64/Ks8srATm67xm9yGUbVBEZ2ZLUKM5 LdGcv1cIcz4LdtaMGkNMAeetiKX8YZjLIH+oHgydbyb8IyMy9EWp4/b/M3VfD+Iy XlrLDmPPGAKn6+K3ke6MjbcL9r5eoaeJzP1WXuToO9ZyDwSu1v6JGCanU2KNCe+W O9+Xydl4DDqJ4Xly9yDh5TRU8johrsS82CVASTrzSYjxKlxHiCUVun9HGTd1RlD5 37vb -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:30 2025 by rpki-client