This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer File: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer (raw, json) Hash identifier: MQ8zsY2BEiD2i0WbNA/zgEyG5msLzKHU8HPoydPz9gU= Subject key identifier: DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027386 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft caRepository: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 06 Nov 2025 12:50:17 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 2406:9200::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160646 (0x27386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 6 12:50:17 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A9127A9B, serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:53:5c:56:47:5a:48:42:f4:43:cf:31:99: 0e:b1:4b:47:92:05:9d:42:23:9e:4b:83:64:d4:db: 90:29:8a:aa:93:5c:9c:9f:01:89:eb:94:7d:f5:98: af:5f:18:34:4b:d5:65:d7:74:fb:bc:84:07:e6:dd: 67:d1:8e:36:89:10:64:03:50:06:73:60:7f:e3:a6: db:2c:f5:e1:ee:40:85:c4:bf:11:97:da:f0:3f:88: a2:26:19:f0:d8:c9:33:07:cc:44:8a:ac:c4:56:f8: 3c:ec:e4:9b:1e:60:f9:4b:40:22:4c:bd:07:3a:1a: b7:5f:9b:07:5e:d3:a8:ba:35:ae:90:76:21:03:f1: f7:40:d3:32:8e:c1:71:64:07:fd:16:a9:ca:22:bc: c8:d0:13:dd:34:54:34:6a:f6:f1:ea:d9:a7:00:9b: 46:12:2a:27:3b:b2:ab:b5:3a:19:64:2e:05:6b:91: 15:7d:75:47:c6:00:c4:39:2d:ff:1d:28:3a:51:f0: 90:0c:30:e6:59:ee:a9:2c:05:33:b6:2c:50:de:b6: b5:fa:94:39:be:39:ae:a6:e3:73:9a:00:9c:ed:ac: af:4e:a1:58:32:a2:a4:fa:87:df:70:56:b3:38:b0: 35:49:b6:f2:99:ef:17:da:a7:47:26:de:23:60:18: a7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:9200::/32 Signature Algorithm: sha256WithRSAEncryption 02:8c:9e:f4:87:6f:68:eb:6e:82:81:bf:0f:8a:85:b5:f5:6b: 9b:af:f8:d3:ea:b1:bb:cc:fb:2a:ee:6c:41:8d:48:2e:dc:ed: b9:58:0c:6f:67:d5:c1:d0:7e:a6:0d:b2:13:aa:e2:dd:5b:c7: 21:49:b5:1b:cb:ed:d2:e1:7b:7f:20:6b:b8:71:3b:2f:dd:a9: 73:2e:a7:87:eb:10:72:6a:4a:b6:15:17:63:2c:cd:d1:2e:a9: 2b:d7:01:d3:b9:2b:ff:cf:0d:70:e5:eb:d4:1f:eb:89:e4:40: 3e:61:03:32:08:2c:48:83:e6:2c:4d:67:b2:c7:a2:59:d4:4b: d0:8c:69:aa:25:73:45:28:22:5b:8e:0c:6f:35:76:18:a6:0a: 20:36:2b:13:48:f4:95:49:1d:fc:db:d4:6c:91:2b:cb:52:ac: b3:a0:bc:02:be:9a:27:75:26:f2:8f:31:c2:6b:21:2a:9d:88: d4:a9:1b:22:dc:58:27:2c:24:de:f7:dd:39:12:1f:c8:e9:e2: ce:2d:c6:2e:88:60:10:07:8b:ed:3f:b0:8d:37:98:93:10:4f: df:0f:92:2e:ed:30:69:79:4a:5e:46:a4:29:df:a6:9e:b4:97: 9b:0f:70:d6:e2:3f:fe:01:bd:b8:f5:86:21:de:ad:0f:67:02: 96:ae:65:97 -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgIDAnOGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNjEyNTAxN1oXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxMjdBOUIxMTAvBgNVBAUTKERBNjA0Q0ZEQjI3MzBBOERFNzI1RkM3 NEFCMEZDNjNFMDU1OEU1REMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgWFNcVkdaSEL0Q88xmQ6xS0eSBZ1CI55Lg2TU25ApiqqTXJyfAYnrlH31mK9f GDRL1WXXdPu8hAfm3WfRjjaJEGQDUAZzYH/jptss9eHuQIXEvxGX2vA/iKImGfDY yTMHzESKrMRW+Dzs5JseYPlLQCJMvQc6Grdfmwde06i6Na6QdiED8fdA0zKOwXFk B/0WqcoivMjQE900VDRq9vHq2acAm0YSKic7squ1OhlkLgVrkRV9dUfGAMQ5Lf8d KDpR8JAMMOZZ7qksBTO2LFDetrX6lDm+Oa6m43OaAJztrK9OoVgyoqT6h99wVrM4 sDVJtvKZ7xfap0cm3iNgGKdDAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQU2mBM/bJz Co3nJfx0qw/GPgVY5dwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI3QTlCL0ZDMDU4RTU2MUQ5NTExRTJCMUEwNDY3RTA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyN0E5Qi9GQzA1OEU1NjFEOTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JK ekNvM25KZngwcXdfR1BnVlk1ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAkBpIAMA0GCSqGSIb3DQEBCwUAA4IBAQACjJ70h29o626Cgb8P ioW19Wubr/jT6rG7zPsq7mxBjUgu3O25WAxvZ9XB0H6mDbITquLdW8chSbUby+3S 4Xt/IGu4cTsv3alzLqeH6xByakq2FRdjLM3RLqkr1wHTuSv/zw1w5evUH+uJ5EA+ YQMyCCxIg+YsTWeyx6JZ1EvQjGmqJXNFKCJbjgxvNXYYpgogNisTSPSVSR3829Rs kSvLUqyzoLwCvpondSbyjzHCayEqnYjUqRsi3FgnLCTe9905Eh/I6eLOLcYuiGAQ B4vtP7CNN5iTEE/fD5Iu7TBpeUpeRqQp36aetJebD3DW4j/+Ab249YYh3q0PZwKW rmWX -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:35 2025 by rpki-client