This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer File: q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer (raw, json) Hash identifier: K3yELuv8Kox0PCMxvFDZRIpPgocXqeozoqWY1M0XU7g= Subject key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027DA0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 11 Dec 2025 21:11:23 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 2402:4480::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 10:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163232 (0x27da0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 11 21:11:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:5f:08:14:ed:d8:59:8d:a5:cb:72:ca:34: e6:68:37:db:ee:36:e8:66:37:c0:a9:be:5a:81:5d: 33:3e:ae:86:bd:0a:50:40:49:1f:28:e9:57:39:bb: 5b:46:e9:29:63:ea:1c:e5:89:2c:07:63:78:fc:46: 12:a9:7a:f6:29:40:36:a6:e3:3b:09:be:fe:a4:ca: 7c:e1:77:17:c2:19:ae:0a:a1:c4:f6:9b:b8:9b:4d: d1:5d:a6:58:95:8f:44:5b:2c:fe:bd:ea:69:d5:10: 62:4a:b4:ab:3a:4c:7d:88:7e:91:4f:e1:9b:65:b0: 1d:cb:fe:6b:39:95:b0:0a:2f:98:4d:b7:51:c1:b1: 04:11:af:a5:ce:dd:8e:66:30:9d:bb:f2:7c:5e:e2: 83:92:8f:70:6c:67:7b:e8:23:d1:5e:c2:44:9f:b6: e6:5f:52:e4:7d:2a:d1:c1:0e:fb:ae:80:73:53:84: d1:80:68:c1:ec:91:fd:2e:05:e7:3b:38:e6:0d:3b: 2b:3a:a4:ea:68:51:75:b4:b3:70:41:29:80:69:85: b4:c2:24:b9:b5:8a:dd:b6:30:96:82:06:88:ea:ee: 3d:27:48:6f:7a:5d:b7:f0:d8:b0:74:d3:2c:fc:bb: 2e:7a:34:18:68:42:8d:9b:1d:24:d9:fa:d5:99:bb: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:4480::/32 Signature Algorithm: sha256WithRSAEncryption 3c:d3:fd:06:02:98:63:d4:1a:53:22:3f:9c:b0:d4:27:b2:83: 3a:09:1a:78:4e:f0:8f:63:ed:33:4a:a3:fd:04:08:ca:eb:c2: 46:73:f7:7a:67:90:cd:29:a2:0d:d6:64:65:f1:a0:cf:bb:b8: d5:f8:27:5f:17:41:98:be:d4:34:0f:c1:b9:23:7a:28:16:4f: c0:0c:72:aa:77:bc:8c:ab:d4:dd:d6:e2:84:ef:29:0b:59:9a: d5:37:ed:4e:4b:28:b2:86:5f:d5:a6:e2:80:66:b3:a8:97:38: e2:d9:b0:e2:71:c6:40:82:11:40:66:e7:77:1e:b4:ec:1d:cb: 6b:ef:13:f4:14:25:85:67:90:d7:de:ce:16:ea:f5:fb:82:f6: b4:f0:d1:64:66:24:e5:21:9b:de:34:69:b0:dc:7d:5e:64:57: dd:b3:dd:4b:5e:6b:5b:b9:ec:7d:a4:4a:70:4b:c6:b3:51:f4: e0:e1:68:80:97:b6:59:28:04:36:15:d7:99:39:66:79:99:19: ce:21:69:12:7a:9e:be:c6:a0:49:3f:a4:e6:0a:76:c1:c9:46: 9b:d0:80:b4:12:cd:3f:b7:8b:cc:3b:99:c8:d4:2d:3e:63:48: 96:f1:16:14:10:1b:d0:a8:51:b9:4a:c1:a4:f3:82:6d:e1:9b: 9d:90:6d:a1 -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgIDAn2gMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMTIxMTEyM1oXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNzI5ODkxMTAvBgNVBAUTKEFCNjlDNzQwMjU0ODlBRkQ2MTc0N0ZG OTMzNUIxNDdFMjBCQjI1RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrR18IFO3YWY2ly3LKNOZoN9vuNuhmN8CpvlqBXTM+roa9ClBASR8o6Vc5u1tG 6Slj6hzliSwHY3j8RhKpevYpQDam4zsJvv6kynzhdxfCGa4KocT2m7ibTdFdpliV j0RbLP696mnVEGJKtKs6TH2IfpFP4ZtlsB3L/ms5lbAKL5hNt1HBsQQRr6XO3Y5m MJ278nxe4oOSj3BsZ3voI9FewkSftuZfUuR9KtHBDvuugHNThNGAaMHskf0uBec7 OOYNOys6pOpoUXW0s3BBKYBphbTCJLm1it22MJaCBojq7j0nSG96Xbfw2LB00yz8 uy56NBhoQo2bHSTZ+tWZux7zAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQUq2nHQCVI mv1hdH/5M1sUfiC7JdQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTcyOTg5L0VGRkRENzE0RDZENTExRjBCMDYzODRCNTgxRDM2NDFELzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3Mjk4OS9FRkZERDcxNEQ2RDUxMUYwQjA2Mzg0QjU4MUQzNjQxRC9xMm5IUUNW SW12MWhkSF81TTFzVWZpQzdKZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAkAkSAMA0GCSqGSIb3DQEBCwUAA4IBAQA80/0GAphj1BpTIj+c sNQnsoM6CRp4TvCPY+0zSqP9BAjK68JGc/d6Z5DNKaIN1mRl8aDPu7jV+CdfF0GY vtQ0D8G5I3ooFk/ADHKqd7yMq9Td1uKE7ykLWZrVN+1OSyiyhl/VpuKAZrOolzji 2bDiccZAghFAZud3HrTsHctr7xP0FCWFZ5DX3s4W6vX7gva08NFkZiTlIZveNGmw 3H1eZFfds91LXmtbuex9pEpwS8azUfTg4WiAl7ZZKAQ2FdeZOWZ5mRnOIWkSep6+ xqBJP6TmCnbByUab0IC0Es0/t4vMO5nI1C0+Y0iW8RYUEBvQqFG5SsGk84Jt4Zud kG2h -----END CERTIFICATE-----Generated at Wed Dec 17 12:57:40 2025 by rpki-client