This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer File: keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer (raw, json) Hash identifier: 7Er1zj/lNVRK7VBZnzttHNlzgTHdNrOK7K/av3t9zs8= Subject key identifier: 91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0276E3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 21 Nov 2025 14:08:52 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: IP: 2402:3540::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161507 (0x276e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 21 14:08:52 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A91876D9, serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8e:a5:85:29:0c:a1:ea:c7:c6:6f:39:13:03: 31:8e:2d:90:a0:5d:5f:37:47:c8:eb:92:0f:de:83: b3:66:16:17:89:de:7d:a9:b6:bd:3a:f2:4f:24:86: ba:c8:ca:09:e5:2b:4c:62:0c:3f:8e:61:d0:89:60: f0:7f:98:3a:8b:8b:8d:87:1b:2c:3a:6d:1d:ef:70: 91:f0:89:bd:e2:88:d9:2b:78:ce:44:81:61:38:ed: 8f:27:65:06:82:50:5e:3d:a2:5f:89:f5:94:2e:63: 49:97:3c:83:cc:09:c0:62:58:48:3b:db:d6:c0:22: e0:bb:a2:6d:7c:ef:08:11:cc:ca:b8:b0:41:b6:91: 0a:bc:6c:8a:c1:53:81:25:c6:d9:98:a8:ec:43:63: f8:20:b5:31:f8:af:75:22:2b:07:15:c9:c2:b6:57: 6d:63:80:2b:d4:ae:18:e0:38:cd:15:6c:26:a9:88: 2d:8d:e7:74:f9:c5:9f:41:3b:d5:ee:d0:17:c5:07: 63:af:ba:a7:9f:92:2a:f7:a7:67:fb:88:02:5e:c0: 34:88:e2:c7:58:23:24:71:dc:7b:83:fd:71:b6:18: 1d:fc:bf:23:55:f0:dc:a6:8f:06:6e:0c:6e:09:25: 85:7c:e1:33:00:1e:80:f8:06:50:ce:d9:16:f8:e7: b9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:3540::/32 Signature Algorithm: sha256WithRSAEncryption 84:2c:b9:e2:a2:6b:6b:ab:ce:fa:8a:cf:27:8c:5e:9d:e0:33: b6:d3:46:df:32:42:b6:66:17:a9:d9:ba:f9:5b:1f:79:bd:f4: 64:88:0d:a6:ee:46:d8:78:86:ea:bb:0c:b1:bf:bc:3a:05:33: 20:68:61:9e:05:7f:9d:e7:6e:bd:ac:e6:50:23:da:31:7c:69: 63:f6:f6:cf:19:ae:c0:d4:cf:15:99:ce:07:bd:62:f5:a3:5b: 86:8d:f6:c4:12:aa:4f:60:99:2b:f8:de:95:53:2e:4f:8f:70: 7d:9e:28:ba:34:b7:4d:d4:8c:db:5b:b8:ca:5e:ea:f1:bc:70: 68:d5:5d:9b:e3:2a:33:f0:12:3c:79:2e:45:8e:aa:8a:a9:a8: 2a:f4:02:c9:21:22:1a:51:76:25:fd:6b:ab:d0:dd:50:e7:3f: 54:c5:dd:9f:9a:9b:af:59:24:29:a9:aa:e7:f7:ec:fd:5e:73: c7:f6:ba:99:fb:e4:a2:fc:04:14:37:c0:8c:70:a1:5e:40:42: c2:70:5a:f2:fb:25:84:cc:8e:46:4f:74:80:6f:29:fb:55:a8: 16:96:62:71:20:ba:7b:6b:b0:24:5f:17:a6:d0:f3:6c:bb:8b: d8:a9:19:80:89:f7:e2:6f:aa:8a:44:72:d4:b2:7c:53:c9:83: 8a:96:05:2e -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgIDAnbjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMTE0MDg1MloXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxODc2RDkxMTAvBgNVBAUTKDkxRTY2OUNFMDIxNTA5N0JENEQ0NzdB MUE3NDQ2QjBEOUQwMjQ4RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+jqWFKQyh6sfGbzkTAzGOLZCgXV83R8jrkg/eg7NmFheJ3n2ptr068k8khrrI ygnlK0xiDD+OYdCJYPB/mDqLi42HGyw6bR3vcJHwib3iiNkreM5EgWE47Y8nZQaC UF49ol+J9ZQuY0mXPIPMCcBiWEg729bAIuC7om187wgRzMq4sEG2kQq8bIrBU4El xtmYqOxDY/ggtTH4r3UiKwcVycK2V21jgCvUrhjgOM0VbCapiC2N53T5xZ9BO9Xu 0BfFB2Ovuqefkir3p2f7iAJewDSI4sdYIyRx3HuD/XG2GB38vyNV8NymjwZuDG4J JYV84TMAHoD4BlDO2Rb457nrAgMBAAGjggL0MIIC8DAdBgNVHQ4EFgQUkeZpzgIV CXvU1Hehp0RrDZ0CSP8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTg3NkQ5LzkyNjBDNjU4MDYxODExRUNCQjI2MkM1RUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4NzZEOS85MjYwQzY1ODA2MTgxMUVDQkIyNjJDNUVDNEY5QUUwMi9rZVpwemdJ VkNYdlUxSGVocDBSckRaMENTUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAkAjVAMA0GCSqGSIb3DQEBCwUAA4IBAQCELLniomtrq876is8n jF6d4DO200bfMkK2Zhep2br5Wx95vfRkiA2m7kbYeIbquwyxv7w6BTMgaGGeBX+d 5269rOZQI9oxfGlj9vbPGa7A1M8Vmc4HvWL1o1uGjfbEEqpPYJkr+N6VUy5Pj3B9 nii6NLdN1IzbW7jKXurxvHBo1V2b4yoz8BI8eS5FjqqKqagq9ALJISIaUXYl/Wur 0N1Q5z9Uxd2fmpuvWSQpqarn9+z9XnPH9rqZ++Si/AQUN8CMcKFeQELCcFry+yWE zI5GT3SAbyn7VagWlmJxILp7a7AkXxem0PNsu4vYqRmAiffib6qKRHLUsnxTyYOK lgUu -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:28 2025 by rpki-client