This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer File: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer (raw, json) Hash identifier: L+AdAMP9CHIwI7UO9NUoykKc3jd+4/wCyex7nymsK4k= Subject key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D34 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 10 Dec 2025 11:19:05 +0000 Certificate not after: Thu 30 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 2403:d300::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163124 (0x27d34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 10 11:19:05 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:db:37:5d:94:61:e3:2e:2a:c5:ec:ef:d8: e7:ad:ea:27:66:9f:dc:bf:74:70:21:68:ad:9e:ce: 30:77:14:09:b0:f1:e2:37:0b:72:84:0d:3c:eb:4c: 27:ed:77:e4:1d:c9:03:a3:96:e1:4e:50:23:40:65: d9:15:19:74:67:38:fe:8e:7f:14:79:8f:a7:ab:6c: 61:33:87:56:1e:8f:66:54:39:78:08:75:ed:94:cc: b7:69:e7:6d:74:25:92:e8:ae:02:fd:bd:83:8e:64: 66:40:f5:08:8d:29:a9:d6:e4:14:80:36:38:8d:6c: 00:c8:7a:db:a9:2d:41:f4:25:b2:c9:a1:16:03:2b: 7c:a0:6d:15:85:27:33:0b:af:3b:e2:5b:2f:9f:74: 0b:f2:47:16:cf:8f:74:72:19:2f:3c:b2:58:1b:69: b6:75:7a:15:50:78:81:ca:8d:16:a8:69:33:84:ac: 1a:0f:63:ef:c5:a5:1a:da:b7:0b:87:51:96:a9:c8: 2b:70:27:44:9d:c1:c1:cd:75:da:ba:01:60:76:3c: 13:9f:e7:02:de:24:9c:87:a4:c6:d9:38:43:85:ed: 0e:98:56:96:96:a7:71:dc:ca:49:b0:07:2d:1d:de: 5b:7b:0c:70:35:ab:a6:d1:a0:d2:37:82:91:da:4d: 24:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:d300::/32 Signature Algorithm: sha256WithRSAEncryption 0f:b1:7e:63:5f:29:06:3b:30:0e:63:37:7f:24:0e:23:e3:4c: c6:a0:48:89:45:fb:40:3e:45:28:b9:54:54:25:13:e7:a0:f9: d4:6b:b4:2f:38:b8:cf:25:78:d7:a3:63:48:4b:81:27:b3:d0: 52:cb:0a:ba:50:89:fa:92:36:38:1e:91:69:29:a7:e2:0e:8a: a5:d3:0d:84:9a:68:d4:1a:6c:3e:51:1d:df:6e:b3:41:73:e5: 30:f9:8c:7e:9f:45:76:2f:15:9e:93:92:7d:b0:f2:56:3b:98: 38:9d:0d:0b:dc:99:60:f4:95:d9:1e:3b:13:90:f6:65:7c:1e: 56:59:96:08:de:65:cf:50:f6:3c:b9:75:a3:3d:7d:7e:ca:bf: 81:3c:2f:7e:ed:37:38:14:1d:14:6b:d4:65:dc:e3:26:05:65: d2:53:91:8d:37:70:13:72:cb:91:96:94:48:5b:69:83:51:4e: 8c:1b:ac:c4:f9:1a:4d:46:0d:4b:a3:68:af:66:4a:17:84:43: 77:4b:6f:70:ab:7b:4c:ab:8e:f2:43:ed:41:05:ce:b5:30:18: 1e:51:c0:61:00:9e:e2:2a:43:6c:0e:2b:f5:44:d7:63:4d:e6: b3:f5:06:d9:ae:a3:08:a1:73:01:50:17:d1:ae:3f:57:40:1d: d1:23:d2:a1 -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgIDAn00MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMDExMTkwNVoXDTI2MDczMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTg2ODIxMTAvBgNVBAUTKDIzRTFFNDI1OUZBQkNENDlGRDU4Q0NE NDZDRjIwMENEMTIxRTJFQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/zNs3XZRh4y4qxezv2Oet6idmn9y/dHAhaK2ezjB3FAmw8eI3C3KEDTzrTCft d+QdyQOjluFOUCNAZdkVGXRnOP6OfxR5j6erbGEzh1Yej2ZUOXgIde2UzLdp5210 JZLorgL9vYOOZGZA9QiNKanW5BSANjiNbADIetupLUH0JbLJoRYDK3ygbRWFJzML rzviWy+fdAvyRxbPj3RyGS88slgbabZ1ehVQeIHKjRaoaTOErBoPY+/FpRratwuH UZapyCtwJ0SdwcHNddq6AWB2PBOf5wLeJJyHpMbZOEOF7Q6YVpaWp3HcykmwBy0d 3lt7DHA1q6bRoNI3gpHaTST5AgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQUI+HkJZ+r zUn9WMzUbPIAzRIeLqwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU4NjgyLzA3MjlERDJFRDVCQTExRjBBQjkwREE3Q0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1ODY4Mi8wNzI5REQyRUQ1QkExMUYwQUI5MERBN0NDNEY5QUUwMi9JLUhrSlot cnpVbjlXTXpVYlBJQXpSSWVMcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAkA9MAMA0GCSqGSIb3DQEBCwUAA4IBAQAPsX5jXykGOzAOYzd/ JA4j40zGoEiJRftAPkUouVRUJRPnoPnUa7QvOLjPJXjXo2NIS4Ens9BSywq6UIn6 kjY4HpFpKafiDoql0w2EmmjUGmw+UR3fbrNBc+Uw+Yx+n0V2LxWek5J9sPJWO5g4 nQ0L3Jlg9JXZHjsTkPZlfB5WWZYI3mXPUPY8uXWjPX1+yr+BPC9+7Tc4FB0Ua9Rl 3OMmBWXSU5GNN3ATcsuRlpRIW2mDUU6MG6zE+RpNRg1Lo2ivZkoXhEN3S29wq3tM q47yQ+1BBc61MBgeUcBhAJ7iKkNsDiv1RNdjTeaz9QbZrqMIoXMBUBfRrj9XQB3R I9Kh -----END CERTIFICATE-----Generated at Fri Dec 19 17:40:29 2025 by rpki-client