This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer File: 2z39hs6_6u06rxXeruaWUjR0aik.cer (raw, json) Hash identifier: kEjRyUmLwpqRRHIKwYOwBwluh9OiHqEoSNBQ0BwtOPE= Subject key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D3E Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft caRepository: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 10 Dec 2025 13:35:11 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 153399 IP: 2401:d520::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163134 (0x27d3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 10 13:35:11 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:a2:2a:c4:df:45:83:83:43:af:a2:7e:00: 1b:8f:65:92:03:7c:38:44:fe:d9:7c:9f:61:83:62: 7b:4f:f2:16:f6:04:1b:27:6d:10:50:5d:28:c0:77: 7f:36:2d:cf:b7:e0:44:5d:e5:cd:54:3a:50:16:68: de:15:c8:0d:fd:a0:ac:45:d8:de:bc:f6:46:c5:a1: f3:dd:e9:ab:98:52:4d:bf:1a:60:4d:67:bc:ec:5a: 4f:eb:9a:27:87:28:a6:e4:79:43:9c:cf:8a:a4:61: 5c:a3:ef:60:53:0c:d7:58:d8:8c:2c:53:0a:91:3f: 31:b0:41:de:2b:b0:d9:b8:79:ab:ea:e4:e5:76:62: 06:23:02:a3:61:70:3d:15:61:a5:e4:e9:ad:b5:9f: 90:29:4a:a3:39:16:81:05:1c:60:f1:4b:a6:56:c1: ab:66:c0:9a:2d:8c:ed:d7:2d:f7:e7:4f:d2:02:21: 88:95:bc:f5:fd:7c:b0:58:8e:e1:69:00:b7:e0:11: 64:b5:f1:09:85:0d:36:b7:55:f8:3b:a3:93:f8:80: 1a:69:64:f9:25:7b:01:74:eb:41:30:ee:79:62:05: d5:75:cc:9c:72:78:6f:1d:14:b7:db:45:91:bb:4e: 03:4e:7d:4e:bd:cb:48:c3:02:3e:8b:f6:07:d2:74: d0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153399 sbgp-ipAddrBlock: critical IPv6: 2401:d520::/32 Signature Algorithm: sha256WithRSAEncryption b2:51:1a:38:e0:9a:e0:69:e2:0f:30:a6:a0:c5:a7:c6:04:ff: 94:11:4b:51:2c:a0:07:0d:06:88:ce:68:09:17:7f:a3:f7:a0: b3:ba:5d:f9:54:b9:11:d3:c8:3c:53:7c:95:64:43:1b:31:d7: bf:b0:9f:f7:06:af:79:65:12:5c:c6:e3:16:ff:34:63:09:0d: a3:ae:bd:2f:bb:bf:76:78:11:d6:90:24:9f:c1:bb:cc:64:d2: f3:03:d9:10:df:25:89:5a:85:7a:0f:0a:c6:e6:32:9e:94:1f: 6c:52:f8:fa:78:d5:d0:e7:25:a1:bd:d1:58:33:4b:64:0d:a6: ab:a2:d1:12:d7:1e:c5:8a:68:f1:21:17:fe:9d:26:8a:af:3f: 0b:47:56:47:57:fc:c4:59:5b:21:1f:83:49:55:82:03:9a:5b: c9:9f:c9:40:2f:96:86:71:77:30:b3:32:c0:af:76:4d:83:09: ca:d6:12:44:00:e6:f8:d6:e1:f7:fb:11:b7:cd:f9:84:a3:fb: 88:b2:07:87:fe:0d:eb:d5:c4:8e:6f:78:c1:99:77:08:79:d0: 33:38:00:d9:96:cb:50:3a:0d:20:c6:20:5f:bf:90:30:06:2a: b4:2b:71:7f:37:60:14:a1:6f:db:a4:2a:cd:5f:28:9e:3d:a3: 20:f3:1a:25 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAn0+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMDEzMzUxMVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNzFCRjAxMTAvBgNVBAUTKERCM0RGRDg2Q0VCRkVBRUQzQUFGMTVE RUFFRTY5NjUyMzQ3NDZBMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEA6IqxN9Fg4NDr6J+ABuPZZIDfDhE/tl8n2GDYntP8hb2BBsnbRBQXSjAd382 Lc+34ERd5c1UOlAWaN4VyA39oKxF2N689kbFofPd6auYUk2/GmBNZ7zsWk/rmieH KKbkeUOcz4qkYVyj72BTDNdY2IwsUwqRPzGwQd4rsNm4eavq5OV2YgYjAqNhcD0V YaXk6a21n5ApSqM5FoEFHGDxS6ZWwatmwJotjO3XLffnT9ICIYiVvPX9fLBYjuFp ALfgEWS18QmFDTa3Vfg7o5P4gBppZPklewF060Ew7nliBdV1zJxyeG8dFLfbRZG7 TgNOfU69y0jDAj6L9gfSdNBDAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQU2z39hs6/ 6u06rxXeruaWUjR0aikwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTcxQkYwL0E3OEYxQjEyQTQxNTExRUZBMTRGQkQzRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3MUJGMC9BNzhGMUIxMkE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2 XzZ1MDZyeFhlcnVhV1VqUjBhaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlc3MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHVIDANBgkq hkiG9w0BAQsFAAOCAQEAslEaOOCa4GniDzCmoMWnxgT/lBFLUSygBw0GiM5oCRd/ o/egs7pd+VS5EdPIPFN8lWRDGzHXv7Cf9waveWUSXMbjFv80YwkNo669L7u/dngR 1pAkn8G7zGTS8wPZEN8liVqFeg8KxuYynpQfbFL4+njV0Oclob3RWDNLZA2mq6LR EtcexYpo8SEX/p0miq8/C0dWR1f8xFlbIR+DSVWCA5pbyZ/JQC+WhnF3MLMywK92 TYMJytYSRADm+Nbh9/sRt835hKP7iLIHh/4N69XEjm94wZl3CHnQMzgA2ZbLUDoN IMYgX7+QMAYqtCtxfzdgFKFv26QqzV8onj2jIPMaJQ== -----END CERTIFICATE-----Generated at Fri Dec 19 16:03:49 2025 by rpki-client