This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LLjB-eoMe1qANok4hADMb9iwSdI.cer File: LLjB-eoMe1qANok4hADMb9iwSdI.cer (raw, json) Hash identifier: GTI2XIDHquj4f4e5p6iYjEUkjmoSEdDGyrGG2/WIRao= Subject key identifier: 2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F80 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft caRepository: rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 12:20:07 +0000 Certificate not after: Wed 30 Sep 2026 00:00:00 +0000 Subordinate resources: IP: 2001:df3:ef80::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163712 (0x27f80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 19 12:20:07 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=A911015D, serialNumber=2CB8C1F9EA0C7B5A803689388400CC6FD8B049D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:11:56:db:80:44:2f:d0:c4:47:da:f4:ec:7e: 29:96:38:b7:8a:a2:d7:21:20:35:99:da:3e:65:27: f3:d2:ba:89:1a:8c:cf:47:56:b3:86:60:45:37:54: af:8e:10:6d:52:3c:be:d0:48:04:85:e9:5a:8f:cb: 3b:00:34:26:3e:52:39:b0:49:f0:9c:62:af:77:b8: 47:15:c5:0a:0d:ac:4b:dd:44:4f:97:31:2b:7d:25: 40:ce:72:91:20:58:0b:52:cd:6f:ba:c0:9c:2d:7a: 28:8f:80:40:ef:c4:00:3b:14:0c:d3:ff:08:f9:eb: bd:df:8a:7d:be:ca:5c:52:7a:a2:ff:3d:ff:e8:7a: 22:02:cb:de:13:24:a3:b8:8d:6b:48:1f:d9:c0:c1: 0e:23:7e:42:4d:8e:70:0a:c6:40:b4:71:88:44:07: 93:4f:ae:fc:db:ca:f9:67:b5:d9:02:b2:d0:d2:a2: 06:a4:1d:a8:b9:4d:38:f5:b2:27:4f:dd:c0:c6:e8: e0:28:7e:ad:fa:79:d8:2f:57:d1:da:72:43:a4:bd: 4f:57:e4:7d:bd:5d:66:89:eb:d5:52:6b:fb:1b:54: ef:7a:1b:31:3e:cc:e7:76:67:53:ce:88:b9:3f:b8: fb:85:1e:0d:bb:c1:30:af:45:62:d8:40:cb:e2:0b: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B8:C1:F9:EA:0C:7B:5A:80:36:89:38:84:00:CC:6F:D8:B0:49:D2 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911015D/414AED6A34F211EE953A6D6EC4F9AE02/LLjB-eoMe1qANok4hADMb9iwSdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:ef80::/48 Signature Algorithm: sha256WithRSAEncryption 2a:a8:0d:bf:aa:5d:6a:1b:5c:13:be:e1:14:13:e3:f5:01:57: 00:83:04:78:24:46:42:08:b5:20:b7:12:66:19:28:88:c7:56: d3:7e:7b:ec:e6:79:d5:88:1e:4f:18:a5:a3:81:2a:e6:2b:64: 59:a0:dc:05:46:eb:57:59:3e:5f:a7:da:bf:25:21:fb:2a:da: 4e:76:b5:13:b6:e9:97:7c:70:50:00:91:3f:61:c0:4e:48:8f: fe:3f:e7:06:9a:65:cf:ad:57:ac:e2:1a:3f:06:21:6a:4c:c2: 4b:11:7b:4e:5e:11:8b:ad:9f:4c:b9:16:41:ac:e2:6e:54:94: 00:b0:f3:33:34:96:32:93:9e:fd:93:2e:a9:02:42:fc:f7:25: d7:f7:cd:b9:ba:f9:10:57:c2:f0:48:75:f2:c4:28:e5:56:a7: 8d:c7:c3:d9:bd:f9:02:17:25:63:9d:29:3e:4e:c7:2d:1c:26: 6b:35:33:9c:4e:47:e7:9d:36:15:b9:39:c9:ac:d7:4c:2c:2d: ac:94:4e:a5:31:d6:84:75:f4:24:a7:77:f8:cc:58:b4:d7:cc: ce:21:9d:a9:6b:d9:70:f7:32:fa:b8:b9:a4:82:05:a6:b6:5e: 7b:86:ba:1c:2e:0e:4c:f9:66:dd:32:9f:3e:5c:83:30:d8:4a: 86:22:ec:43 -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgIDAn+AMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxOTEyMjAwN1oXDTI2MDkzMDAwMDAwMFowRjERMA8G A1UEAwwIQTkxMTAxNUQxMTAvBgNVBAUTKDJDQjhDMUY5RUEwQzdCNUE4MDM2ODkz ODg0MDBDQzZGRDhCMDQ5RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+EVbbgEQv0MRH2vTsfimWOLeKotchIDWZ2j5lJ/PSuokajM9HVrOGYEU3VK+O EG1SPL7QSASF6VqPyzsANCY+UjmwSfCcYq93uEcVxQoNrEvdRE+XMSt9JUDOcpEg WAtSzW+6wJwteiiPgEDvxAA7FAzT/wj5673fin2+ylxSeqL/Pf/oeiICy94TJKO4 jWtIH9nAwQ4jfkJNjnAKxkC0cYhEB5NPrvzbyvlntdkCstDSogakHai5TTj1sidP 3cDG6OAofq36edgvV9HackOkvU9X5H29XWaJ69VSa/sbVO96GzE+zOd2Z1POiLk/ uPuFHg27wTCvRWLYQMviC5/bAgMBAAGjggL2MIIC8jAdBgNVHQ4EFgQULLjB+eoM e1qANok4hADMb9iwSdIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTEwMTVELzQxNEFFRDZBMzRGMjExRUU5NTNBNkQ2RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExMDE1RC80MTRBRUQ2QTM0RjIxMUVFOTUzQTZENkVDNEY5QUUwMi9MTGpCLWVv TWUxcUFOb2s0aEFETWI5aXdTZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAgAQ3z74AwDQYJKoZIhvcNAQELBQADggEBACqoDb+qXWobXBO+ 4RQT4/UBVwCDBHgkRkIItSC3EmYZKIjHVtN+e+zmedWIHk8YpaOBKuYrZFmg3AVG 61dZPl+n2r8lIfsq2k52tRO26Zd8cFAAkT9hwE5Ij/4/5waaZc+tV6ziGj8GIWpM wksRe05eEYutn0y5FkGs4m5UlACw8zM0ljKTnv2TLqkCQvz3Jdf3zbm6+RBXwvBI dfLEKOVWp43Hw9m9+QIXJWOdKT5Oxy0cJms1M5xOR+edNhW5Ocms10wsLayUTqUx 1oR19CSnd/jMWLTXzM4hnalr2XD3Mvq4uaSCBaa2XnuGuhwuDkz5Zt0ynz5cgzDY SoYi7EM= -----END CERTIFICATE-----Generated at Fri Dec 19 18:44:25 2025 by rpki-client