This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer File: 8q-Rix8UisrksDlFAoTeSQ15Dlk.cer (raw, json) Hash identifier: oQ5cInUVqcXRKdW/NJtPATVKcmKtz34TrahXxStfEH0= Subject key identifier: F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0279EA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft caRepository: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 04:36:53 +0000 Certificate not after: Sat 31 Mar 2029 00:00:00 +0000 Subordinate resources: AS: 153491 IP: 2401:e6e0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162282 (0x279ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 04:36:53 2025 GMT Not After : Mar 31 00:00:00 2029 GMT Subject: CN=A9114EF6, serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:e2:b7:a2:5e:71:70:b0:5d:36:ac:2d:0a: 39:bc:f2:96:ae:c2:10:0c:b3:a1:59:83:41:90:ef: 02:e8:d5:3c:7d:14:f0:5a:dc:2c:3c:7d:a0:18:4f: d1:55:2c:1b:ae:f9:af:63:93:66:27:0f:32:b1:ee: 8d:8d:b6:10:54:63:90:e9:a6:0b:e6:8a:b4:12:f4: fa:50:49:1c:f2:e9:4c:4b:4a:0a:17:e8:df:b0:a7: 70:e9:5a:25:e1:51:a2:c2:69:93:d4:89:72:da:01: 77:b1:5b:ad:e6:4e:b4:c1:ef:ae:44:73:2d:80:00: 46:66:ff:50:ca:df:5b:f4:ec:04:d2:02:5d:c0:48: 3c:f8:aa:e6:bf:14:75:87:b8:4a:6b:c6:5b:54:d4: ed:7c:30:59:b4:4c:d5:88:85:f1:13:c4:85:4b:c9: 6f:06:6b:96:57:c2:42:da:20:92:2a:a8:97:76:2b: a9:cf:7d:73:d8:9d:47:af:5c:0f:60:22:ba:9c:f8: 81:4e:91:d5:96:90:85:98:e1:e4:e4:f2:99:06:03: 16:1f:b5:76:79:15:a7:31:bd:05:a8:2b:3a:17:d6: 40:54:97:d2:60:3a:5d:5e:3e:84:62:39:d6:a3:93: c1:ec:eb:1b:e3:47:a4:5e:72:b8:82:a8:43:df:8f: 28:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153491 sbgp-ipAddrBlock: critical IPv6: 2401:e6e0::/32 Signature Algorithm: sha256WithRSAEncryption 0a:b6:e3:16:4f:0e:36:80:14:79:90:76:2a:8e:d2:ee:82:a1: 7d:12:2e:ac:d0:c9:61:73:5b:fa:a5:92:54:89:ae:68:e6:9d: 98:68:40:da:15:cf:ef:61:82:dc:7c:03:1d:f5:15:e1:9e:66: d3:b3:5c:fb:9e:41:f9:a4:27:69:45:30:f1:3a:a1:e6:67:bf: ff:03:09:52:23:f3:f2:8c:d7:bf:a6:d0:4f:f5:1e:da:a6:48: 53:e8:5f:b6:04:e6:e9:33:b4:f7:c7:f1:d2:2a:3a:bf:99:fc: 5f:32:5a:9a:04:bf:68:3c:0a:9c:37:92:69:70:94:fe:f6:3f: 85:b3:4d:bc:ce:8a:b4:40:0f:03:64:9e:ae:31:51:eb:58:2d: fb:50:8a:a7:ca:b6:58:58:2f:28:fc:9c:50:11:d4:d8:4a:5b: b9:2d:6a:ca:02:15:e6:d4:8f:b1:3b:9a:ab:3b:a5:3e:9d:6a: 44:63:0a:47:7a:af:ca:60:79:6c:09:0d:a2:75:23:21:fb:40: 84:28:b5:2e:ba:a9:0d:a1:de:a4:73:68:1f:31:96:dd:d8:8b: 61:42:7a:61:77:41:7f:42:c2:fd:93:3c:e8:7f:34:1b:a6:24: f8:cb:e4:76:e3:e3:bf:d4:d0:dc:4d:d7:8f:ef:85:3c:3f:4b: f0:24:f2:e5 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAnnqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTA0MzY1M1oXDTI5MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMTRFRjYxMTAvBgNVBAUTKEYyQUY5MThCMUYxNDhBQ0FFNEIwMzk0 NTAyODRERTQ5MEQ3OTBFNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9g+K3ol5xcLBdNqwtCjm88pauwhAMs6FZg0GQ7wLo1Tx9FPBa3Cw8faAYT9FV LBuu+a9jk2YnDzKx7o2NthBUY5DppgvmirQS9PpQSRzy6UxLSgoX6N+wp3DpWiXh UaLCaZPUiXLaAXexW63mTrTB765Ecy2AAEZm/1DK31v07ATSAl3ASDz4qua/FHWH uEprxltU1O18MFm0TNWIhfETxIVLyW8Ga5ZXwkLaIJIqqJd2K6nPfXPYnUevXA9g Irqc+IFOkdWWkIWY4eTk8pkGAxYftXZ5FacxvQWoKzoX1kBUl9JgOl1ePoRiOdaj k8Hs6xvjR6RecriCqEPfjyi7AgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQU8q+Rix8U isrksDlFAoTeSQ15DlkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE0RUY2Lzk2NDYzNDU4RDBENDExRUZCQ0Q1MTIzRUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExNEVGNi85NjQ2MzQ1OEQwRDQxMUVGQkNENTEyM0VDNEY5QUUwMi84cS1SaXg4 VWlzcmtzRGxGQW9UZVNRMTVEbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAleTMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAHm4DANBgkq hkiG9w0BAQsFAAOCAQEACrbjFk8ONoAUeZB2Ko7S7oKhfRIurNDJYXNb+qWSVImu aOadmGhA2hXP72GC3HwDHfUV4Z5m07Nc+55B+aQnaUUw8Tqh5me//wMJUiPz8ozX v6bQT/Ue2qZIU+hftgTm6TO098fx0io6v5n8XzJamgS/aDwKnDeSaXCU/vY/hbNN vM6KtEAPA2SerjFR61gt+1CKp8q2WFgvKPycUBHU2EpbuS1qygIV5tSPsTuaqzul Pp1qRGMKR3qvymB5bAkNonUjIftAhCi1LrqpDaHepHNoHzGW3diLYUJ6YXdBf0LC /ZM86H80G6Yk+MvkduPjv9TQ3E3Xj++FPD9L8CTy5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:15 2025 by rpki-client