This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer File: JXqeaRTVinRbDuar5UjNvgIEiNQ.cer (raw, json) Hash identifier: AZJ/pU4GVuZID8Jn/yrWwCB7a5XCSQqY+UmUqNP44Is= Subject key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0273AC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 06 Nov 2025 18:02:14 +0000 Certificate not after: Thu 28 May 2026 00:00:00 +0000 Subordinate resources: IP: 2400:b040::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160684 (0x273ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 6 18:02:14 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:2b:92:c2:19:57:6e:fe:ac:e4:73:14:59: e9:2a:d2:7f:72:37:82:c3:11:83:4b:6e:88:af:53: 91:eb:aa:c5:88:21:34:65:48:0a:9e:fa:76:74:c8: 8a:0f:f3:e1:c5:fc:0b:d3:2b:c9:0e:26:4e:60:05: 24:4d:2d:ea:88:55:b6:87:7a:18:dd:b4:0a:29:3c: ea:37:f2:2f:c4:57:f9:cf:69:f7:8c:1f:54:77:e9: d2:b4:83:92:fa:41:85:ae:6d:4a:d3:6f:63:b5:5a: 5e:e7:ea:0f:97:70:90:34:ca:01:54:0c:13:ce:94: 0a:4b:34:95:64:96:99:6d:88:8d:5e:bc:8e:e6:67: 9e:5f:5f:f6:0e:cf:2d:d4:03:29:16:2e:76:fe:6a: 17:59:af:cd:1b:78:39:dc:7b:ef:35:7c:3c:ce:5b: eb:60:b1:77:4d:22:b6:90:bb:af:54:c8:1a:0b:7d: 4c:a3:fb:4b:bf:f0:d5:2b:74:9b:1b:4b:8f:b9:f1: 89:ae:f8:76:46:f0:e4:6a:0d:33:79:b0:5e:1e:51: bc:09:0c:6e:02:03:b6:c3:66:56:ec:ba:ef:bf:34: 29:68:f5:05:43:f0:bd:30:e6:0b:42:27:6a:4a:f5: 2a:70:ef:5f:a5:80:bb:32:fb:b6:de:66:8e:56:ec: d3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:b040::/32 Signature Algorithm: sha256WithRSAEncryption 42:51:cf:ab:1a:a7:3c:71:2e:7c:51:17:25:f5:e4:5a:2d:75: b8:de:47:cc:37:2f:ce:4e:f9:9d:95:20:5a:45:e5:5d:55:2a: c3:34:19:aa:67:55:0b:59:78:c2:75:36:56:b7:61:ca:f9:16: 80:e5:0c:81:dc:a9:db:c2:ed:21:d6:67:14:c9:26:78:30:61: c9:2c:b0:56:67:24:1d:84:f3:dc:74:7f:17:11:b4:89:4b:92: ec:71:36:ec:47:2a:1c:0e:9a:cf:5a:24:f7:92:c6:c1:a9:9f: 77:ad:d6:2f:40:8f:95:18:50:dc:ad:fa:82:74:97:31:8c:ce: 85:13:91:d9:94:17:c1:a6:e5:be:c7:b8:6d:b7:69:63:a7:a4: 35:be:2b:86:47:8d:48:1e:04:03:37:85:86:a9:46:e6:1f:e5: 51:43:34:4a:8e:2f:13:7b:84:ce:be:02:0d:cf:8a:1c:6b:d2: f2:5e:14:08:29:5e:30:ed:bb:64:d4:41:a6:91:c2:3c:06:cf: 0d:0e:96:6f:3a:cd:3a:2b:55:43:46:45:85:06:1f:ef:b6:d4: 29:68:07:d8:e6:f3:4f:76:29:18:b9:7a:84:3f:14:c8:54:d9: db:d1:80:e1:b6:6a:3a:e0:ce:39:0e:7a:dc:5d:7f:47:83:1a: b4:58:13:e3 -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgIDAnOsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNjE4MDIxNFoXDTI2MDUyODAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZB QkU1NDhDREJFMDIwNDg4RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7dCuSwhlXbv6s5HMUWekq0n9yN4LDEYNLboivU5HrqsWIITRlSAqe+nZ0yIoP 8+HF/AvTK8kOJk5gBSRNLeqIVbaHehjdtAopPOo38i/EV/nPafeMH1R36dK0g5L6 QYWubUrTb2O1Wl7n6g+XcJA0ygFUDBPOlApLNJVklpltiI1evI7mZ55fX/YOzy3U AykWLnb+ahdZr80beDnce+81fDzOW+tgsXdNIraQu69UyBoLfUyj+0u/8NUrdJsb S4+58Ymu+HZG8ORqDTN5sF4eUbwJDG4CA7bDZlbsuu+/NClo9QVD8L0w5gtCJ2pK 9Spw71+lgLsy+7beZo5W7NO5AgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQUJXqeaRTV inRbDuar5UjNvgIEiNQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUwMTVELzZDNDc0OTIwNzMxMjExRURCNzBCQ0UzM0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMDE1RC82QzQ3NDkyMDczMTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJU VmluUmJEdWFyNVVqTnZnSUVpTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAkALBAMA0GCSqGSIb3DQEBCwUAA4IBAQBCUc+rGqc8cS58URcl 9eRaLXW43kfMNy/OTvmdlSBaReVdVSrDNBmqZ1ULWXjCdTZWt2HK+RaA5QyB3Knb wu0h1mcUySZ4MGHJLLBWZyQdhPPcdH8XEbSJS5LscTbsRyocDprPWiT3ksbBqZ93 rdYvQI+VGFDcrfqCdJcxjM6FE5HZlBfBpuW+x7htt2ljp6Q1viuGR41IHgQDN4WG qUbmH+VRQzRKji8Te4TOvgINz4oca9LyXhQIKV4w7btk1EGmkcI8Bs8NDpZvOs06 K1VDRkWFBh/vttQpaAfY5vNPdikYuXqEPxTIVNnb0YDhtmo64M45DnrcXX9Hgxq0 WBPj -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:37 2025 by rpki-client