This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer File: HUXnKUVKJCRGewPPyZfX6xhK52Y.cer (raw, json) Hash identifier: yBrpkCn0sWIVO1HilmvejoCllMBqdBFfUI+yndcyI9M= Subject key identifier: 1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B06 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 20:45:06 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 134602 IP: 2001:df4:8bc0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 18:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162566 (0x27b06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 20:45:06 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91B15DC, serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:33:55:29:4a:79:68:73:db:82:8a:b8:f0:e4: 82:58:f5:7c:5d:ef:b8:a0:51:0f:b8:aa:af:42:4c: 97:5c:28:d2:33:35:13:ee:ad:a1:d9:c9:d9:45:93: f8:87:6e:33:cc:39:d5:14:fa:78:0a:5f:25:65:4d: ea:b5:35:92:27:93:dc:d0:47:24:24:0f:23:03:1d: 20:7c:bb:9a:3e:d6:95:81:c7:8d:41:8e:43:e1:38: fa:3d:b3:19:de:7e:3f:d9:91:12:30:62:1a:d5:27: 16:18:1e:03:03:dc:c7:8b:53:3e:74:e1:d5:9c:32: a4:80:95:23:7d:62:14:9c:99:32:5d:93:3c:53:0c: e7:10:4d:c8:89:f6:80:ce:b8:12:e9:da:fb:dc:dd: 61:71:9f:cf:3a:2e:4d:30:f5:71:85:15:cb:15:0c: 3b:5e:48:2e:79:61:c9:bf:a1:40:22:e6:c6:b6:89: 0c:5c:0f:34:99:1e:2e:b7:da:8d:ac:dd:a3:4c:9f: 1f:62:86:18:f3:8e:4f:c9:32:34:58:dc:46:0f:72: ca:0a:74:a5:9f:cd:f8:e1:0e:cc:da:bd:25:a4:0a: 91:7a:d9:7f:b7:79:70:82:30:8b:36:90:54:e0:16: ac:9f:c7:ca:99:79:96:91:1c:e3:7f:3b:cc:e8:59: f1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134602 sbgp-ipAddrBlock: critical IPv6: 2001:df4:8bc0::/48 Signature Algorithm: sha256WithRSAEncryption 68:ac:2e:8d:99:f6:03:22:2c:75:76:14:52:e0:0c:fa:8d:aa: ac:82:d4:2c:db:d7:7d:c0:fb:1f:64:73:70:40:8f:83:55:33: 1c:2b:ea:3b:c1:f3:8d:b3:e7:cc:58:62:74:d1:35:e7:43:16: 7b:82:0b:95:5a:89:6b:ca:37:1b:6f:86:3f:c1:c4:22:ae:ef: 26:89:ed:14:ef:ad:33:89:d7:b0:9a:70:6f:68:7d:e9:c4:11: d7:e5:5c:fc:92:f5:0b:68:bd:9f:11:a1:5d:38:59:ed:aa:fb: bb:7a:ed:9a:bd:cd:31:13:c6:69:e8:ae:d7:4e:bf:fb:00:d7: fa:8a:42:03:01:a2:11:99:d4:45:58:5f:10:70:35:bf:1b:a0: 7d:4a:1c:b8:fa:ad:80:09:aa:43:cc:2b:68:2f:48:fc:14:9b: bf:80:93:17:bf:03:66:49:3c:14:35:cf:12:66:59:8e:b8:79: 90:ff:ef:d7:68:6a:06:b6:b6:65:50:48:fa:14:11:36:39:42: 70:1d:af:18:76:ee:b3:6a:03:6d:c2:6f:94:3a:49:30:6c:d0: 84:40:ef:fc:28:66:2d:a8:18:3c:4c:df:36:d9:e8:68:e7:72: d0:c1:6c:24:a5:31:1f:fc:83:fc:8e:30:d5:05:b2:d5:e0:36: 06:db:40:5d -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAnsGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjIwNDUwNloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjE1REMxMTAvBgNVBAUTKDFENDVFNzI5NDU0QTI0MjQ0NjdCMDND RkM5OTdEN0VCMTg0QUU3NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpM1UpSnloc9uCirjw5IJY9Xxd77igUQ+4qq9CTJdcKNIzNRPuraHZydlFk/iH bjPMOdUU+ngKXyVlTeq1NZInk9zQRyQkDyMDHSB8u5o+1pWBx41BjkPhOPo9sxne fj/ZkRIwYhrVJxYYHgMD3MeLUz504dWcMqSAlSN9YhScmTJdkzxTDOcQTciJ9oDO uBLp2vvc3WFxn886Lk0w9XGFFcsVDDteSC55Ycm/oUAi5sa2iQxcDzSZHi632o2s 3aNMnx9ihhjzjk/JMjRY3EYPcsoKdKWfzfjhDszavSWkCpF62X+3eXCCMIs2kFTg Fqyfx8qZeZaRHON/O8zoWfERAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUHUXnKUVK JCRGewPPyZfX6xhK52YwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUIxNURDLzU4MjNBRjg2Q0VFRDExRUZCRDY1NTUxMUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCMTVEQy81ODIzQUY4NkNFRUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi9IVVhuS1VW S0pDUkdld1BQeVpmWDZ4aEs1MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg3KMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9IvAMA0G CSqGSIb3DQEBCwUAA4IBAQBorC6NmfYDIix1dhRS4Az6jaqsgtQs29d9wPsfZHNw QI+DVTMcK+o7wfONs+fMWGJ00TXnQxZ7gguVWolryjcbb4Y/wcQiru8mie0U760z idewmnBvaH3pxBHX5Vz8kvULaL2fEaFdOFntqvu7eu2avc0xE8Zp6K7XTr/7ANf6 ikIDAaIRmdRFWF8QcDW/G6B9Shy4+q2ACapDzCtoL0j8FJu/gJMXvwNmSTwUNc8S ZlmOuHmQ/+/XaGoGtrZlUEj6FBE2OUJwHa8Ydu6zagNtwm+UOkkwbNCEQO/8KGYt qBg8TN822eho53LQwWwkpTEf/IP8jjDVBbLV4DYG20Bd -----END CERTIFICATE-----Generated at Sun Dec 7 19:42:25 2025 by rpki-client