This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer File: H9I4pw6sem_8a5CrMM77dzkhb0o.cer (raw, json) Hash identifier: a7wQubmRCMEGVDJYiFaU7Je3qa8o5l5TDGMc9zIJ8zs= Subject key identifier: 1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02817B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft caRepository: rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 12:47:18 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 2401:de60::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164219 (0x2817b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 29 12:47:18 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A913DD09, serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6f:dd:1b:68:34:44:79:6e:65:d2:7a:ea:a7: 5a:ef:33:49:56:c2:e0:64:41:47:7b:0e:23:3f:0d: df:e6:78:78:c5:b9:97:e5:f5:6c:73:98:3a:04:fc: c3:2b:1e:be:95:d4:a2:7f:c1:24:9e:b2:62:8d:a6: c1:46:0b:49:a6:a1:59:5b:99:44:bf:e9:d1:49:9e: e2:b0:64:bd:bc:bd:31:ec:16:c5:44:28:49:79:10: e7:ba:a3:29:e4:54:f0:8e:6a:22:b9:00:d5:96:28: 9e:52:8f:84:be:c8:78:64:16:e7:be:ae:60:f4:b2: b2:18:6f:05:cc:48:60:9c:bc:f8:50:43:15:93:5d: e8:d9:ec:38:7a:90:b9:29:a2:4c:5a:9c:97:8d:15: 52:3e:6d:74:6b:3d:76:53:3e:92:88:42:24:1e:54: a0:b9:4b:c7:ad:88:ec:ac:33:6a:6d:2a:e3:60:5c: 94:95:73:8f:42:d3:f9:5e:eb:cf:af:07:fa:42:9c: 6a:0f:c2:62:5c:b5:e0:57:4e:7a:64:a2:8b:bb:9a: db:1c:50:fe:07:d3:15:24:d6:47:00:96:81:6b:80: e6:13:c9:53:47:3e:2f:b2:06:29:ea:73:74:da:b2: d4:43:a0:93:f6:ae:20:93:ab:81:b8:61:86:9a:e4: 11:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:de60::/32 Signature Algorithm: sha256WithRSAEncryption 1b:c3:f5:bb:fc:2d:85:26:75:32:fc:f3:58:78:fc:c3:29:4d: fa:0b:30:74:e6:1a:67:0a:3d:1b:34:85:77:02:8c:28:6a:78: 7f:2f:d4:fe:9e:85:a5:0a:e1:9b:a6:31:e3:4f:ed:c7:78:3d: 43:98:58:b9:6f:cc:72:09:be:62:c1:f4:d7:9e:12:f5:bd:d5: d5:64:75:1c:2c:4b:3a:b0:72:e2:1e:a7:03:f2:d3:a7:1a:68: ab:89:17:2f:36:cc:60:db:98:6e:65:6d:2f:c6:4a:a6:f2:00: 9b:9d:03:c6:51:5f:fa:f0:bc:58:ee:c3:2c:f3:a0:70:70:4d: c4:af:59:5d:a8:a3:cc:c8:5a:8d:b3:08:bd:c6:11:9e:3d:7d: ac:4d:c3:b4:45:8d:23:7b:d1:52:67:6f:8e:9e:44:4a:8b:48: 02:cd:1e:1d:47:fb:71:6f:d6:0a:fc:47:7b:b9:41:7b:f4:08: c9:b7:db:6f:d0:e5:f7:e2:db:9a:3a:7f:78:34:4b:34:48:10: 27:75:da:44:f1:64:42:0e:07:db:53:28:10:d5:97:67:2b:2e: 02:b1:fd:9b:96:3a:99:f2:58:58:92:24:be:ae:1c:cf:ed:b0: 27:aa:46:61:81:6a:d7:c1:52:20:b6:b1:36:e1:4d:97:1d:d4: 25:97:18:5d -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgIDAoF7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyOTEyNDcxOFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxM0REMDkxMTAvBgNVBAUTKDFGRDIzOEE3MEVBQzdBNkZGQzZCOTBB QjMwQ0VGQjc3MzkyMTZGNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWb90baDREeW5l0nrqp1rvM0lWwuBkQUd7DiM/Dd/meHjFuZfl9WxzmDoE/MMr Hr6V1KJ/wSSesmKNpsFGC0mmoVlbmUS/6dFJnuKwZL28vTHsFsVEKEl5EOe6oynk VPCOaiK5ANWWKJ5Sj4S+yHhkFue+rmD0srIYbwXMSGCcvPhQQxWTXejZ7Dh6kLkp okxanJeNFVI+bXRrPXZTPpKIQiQeVKC5S8etiOysM2ptKuNgXJSVc49C0/le68+v B/pCnGoPwmJcteBXTnpkoou7mtscUP4H0xUk1kcAloFrgOYTyVNHPi+yBinqc3Ta stRDoJP2riCTq4G4YYaa5BFNAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQUH9I4pw6s em/8a5CrMM77dzkhb0owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNERDA5LzcwQzEwNzYwNjIyQjExRjBCRTUyOEIxRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzREQwOS83MEMxMDc2MDYyMkIxMUYwQkU1MjhCMUZDNEY5QUUwMi9IOUk0cHc2 c2VtXzhhNUNyTU03N2R6a2hiMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAkAd5gMA0GCSqGSIb3DQEBCwUAA4IBAQAbw/W7/C2FJnUy/PNY ePzDKU36CzB05hpnCj0bNIV3Aowoanh/L9T+noWlCuGbpjHjT+3HeD1DmFi5b8xy Cb5iwfTXnhL1vdXVZHUcLEs6sHLiHqcD8tOnGmiriRcvNsxg25huZW0vxkqm8gCb nQPGUV/68LxY7sMs86BwcE3Er1ldqKPMyFqNswi9xhGePX2sTcO0RY0je9FSZ2+O nkRKi0gCzR4dR/txb9YK/Ed7uUF79AjJt9tv0OX34tuaOn94NEs0SBAnddpE8WRC DgfbUygQ1ZdnKy4Csf2bljqZ8lhYkiS+rhzP7bAnqkZhgWrXwVIgtrE24U2XHdQl lxhd -----END CERTIFICATE-----Generated at Sun Jan 25 02:49:50 2026 by rpki-client