This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer File: 2nLQztquGaHsPtugRn1ZjrmRVlY.cer (raw, json) Hash identifier: IYsF4ynLRx95kHD2ibF640zkLXUn5HUZVTWWzTzqPQ8= Subject key identifier: DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027472 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft caRepository: rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 11 Nov 2025 06:00:20 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 154355 IP: 2001:df6:3ac0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 14:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160882 (0x27472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 11 06:00:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A915E131, serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:aa:c6:77:ea:6b:65:b0:7e:9c:7a:ff:03: b6:33:6c:fb:10:8b:fa:f4:22:e7:d6:64:dd:94:68: d1:fe:23:33:f7:f7:1a:15:c4:9f:e4:12:b8:21:8d: 35:98:8c:77:40:5b:15:87:c5:9e:34:5d:a3:ef:53: ff:7f:82:75:ff:7f:77:bf:e6:e3:ea:fa:27:f3:d9: 42:7b:e8:98:ae:30:01:7f:82:1b:c0:ff:52:ff:be: 5f:8c:79:01:64:de:bd:86:d0:49:8b:d3:ab:85:f5: 4c:01:b2:bd:80:8f:fd:8f:cb:97:e7:08:27:3b:dc: 44:1e:9f:49:db:b6:25:51:f1:28:23:5a:75:ef:e7: 6e:a2:13:fb:01:88:e9:f2:41:3a:1d:16:6c:bd:c4: 97:80:15:1f:0b:ef:1d:71:59:fa:d8:5d:fa:63:85: 1c:e4:05:47:2e:cb:76:f3:8d:00:87:77:1b:ae:89: d2:eb:80:df:9e:cd:58:76:65:12:90:c5:60:f6:28: 65:e2:c7:58:dc:89:c2:35:42:ef:36:3a:11:57:24: ad:cd:74:df:a2:da:47:b7:cc:2b:44:bc:77:fe:c9: 24:59:e0:6c:6e:33:c3:52:49:89:53:14:82:10:06: 73:03:d4:89:20:20:34:56:54:9c:2b:e1:58:f8:ee: 90:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154355 sbgp-ipAddrBlock: critical IPv6: 2001:df6:3ac0::/48 Signature Algorithm: sha256WithRSAEncryption b7:f1:11:af:37:85:6d:20:c9:42:ac:64:3c:1a:5f:cf:63:85: ba:a0:49:32:78:af:ae:93:77:12:26:b2:6a:d0:95:a4:66:e3: 8c:94:58:86:44:45:d4:b5:9f:c1:b9:40:4f:f7:a1:86:76:ea: e1:21:e5:de:08:6a:86:33:da:b1:31:00:65:e6:c0:85:ae:2d: f5:7e:f4:5e:18:7c:e2:04:98:dc:c7:c8:41:17:44:86:74:b3: d1:65:b7:d4:4b:5c:27:72:5b:52:24:94:04:0b:54:36:b4:8b: f7:60:cf:67:42:51:21:54:6a:62:de:e8:78:a7:87:6f:95:3e: fd:11:bf:d4:71:23:7b:91:ac:da:20:89:08:0e:a8:86:a8:ce: f3:a6:d7:a3:a9:1f:53:7d:6e:20:a9:60:34:e5:a9:09:74:45: f8:0d:0e:56:90:82:c5:f4:ea:65:7a:90:9d:c2:0c:1a:9a:65: 44:e8:9d:7a:c7:26:1a:6c:19:2d:c9:3c:c9:04:c3:a0:c2:1f: 9e:6a:0a:08:83:21:14:97:39:19:37:76:8c:70:e1:dd:c3:13: 0d:60:80:d9:76:91:65:f5:7a:84:ca:0c:8d:28:c2:a8:fe:dd: 8a:16:c8:c8:b6:70:79:05:c0:fc:1a:fd:b2:42:5d:83:ab:14: 4c:65:db:da -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAnRyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMTA2MDAyMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNUUxMzExMTAvBgNVBAUTKERBNzJEMENFREFBRTE5QTFFQzNFREJB MDQ2N0Q1OThFQjk5MTU2NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBJqrGd+prZbB+nHr/A7YzbPsQi/r0IufWZN2UaNH+IzP39xoVxJ/kErghjTWY jHdAWxWHxZ40XaPvU/9/gnX/f3e/5uPq+ifz2UJ76JiuMAF/ghvA/1L/vl+MeQFk 3r2G0EmL06uF9UwBsr2Aj/2Py5fnCCc73EQen0nbtiVR8SgjWnXv526iE/sBiOny QTodFmy9xJeAFR8L7x1xWfrYXfpjhRzkBUcuy3bzjQCHdxuuidLrgN+ezVh2ZRKQ xWD2KGXix1jcicI1Qu82OhFXJK3NdN+i2ke3zCtEvHf+ySRZ4GxuM8NSSYlTFIIQ BnMD1IkgIDRWVJwr4Vj47pBbAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQU2nLQztqu GaHsPtugRn1ZjrmRVlYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTVFMTMxLzY1QzM4Qzk4QkMxMjExRjBCNjk2NjA3QkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1RTEzMS82NUMzOEM5OEJDMTIxMUYwQjY5NjYwN0JDNEY5QUUwMi8ybkxRenRx dUdhSHNQdHVnUm4xWmpybVJWbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlrzMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9jrAMA0G CSqGSIb3DQEBCwUAA4IBAQC38RGvN4VtIMlCrGQ8Gl/PY4W6oEkyeK+uk3cSJrJq 0JWkZuOMlFiGREXUtZ/BuUBP96GGdurhIeXeCGqGM9qxMQBl5sCFri31fvReGHzi BJjcx8hBF0SGdLPRZbfUS1wncltSJJQEC1Q2tIv3YM9nQlEhVGpi3uh4p4dvlT79 Eb/UcSN7kazaIIkIDqiGqM7zptejqR9TfW4gqWA05akJdEX4DQ5WkILF9OplepCd wgwammVE6J16xyYabBktyTzJBMOgwh+eagoIgyEUlzkZN3aMcOHdwxMNYIDZdpFl 9XqEygyNKMKo/t2KFsjItnB5BcD8Gv2yQl2DqxRMZdva -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:12 2025 by rpki-client