This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer File: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer (raw, json) Hash identifier: xHiMuphKPMUNlFCrVdiB7F97ueNYaCM9LI5SibF2J+c= Subject key identifier: 7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7080 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft caRepository: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 04:19:49 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 160.191.150.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28800 (0x7080) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 19 04:19:49 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A918CC02, serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:48:4c:13:4c:5e:2d:10:a8:70:a1:56:6b: e3:7c:d4:0e:0f:17:e8:86:8f:97:66:8d:54:14:4e: 1c:ef:cc:10:6e:2e:06:2f:c0:60:46:02:1a:5a:ad: 72:9a:28:21:59:7c:67:e0:b9:06:c4:ee:61:b7:c6: 46:d8:f2:ef:98:0e:ab:cc:d9:77:05:72:12:3d:d9: 15:81:88:7a:cf:a3:1c:50:d9:95:8d:28:5e:04:1e: 7c:f0:40:87:9e:96:57:f5:c9:7c:16:cf:12:eb:37: a1:b1:6b:6b:a5:e3:be:c8:8b:19:c0:95:12:fc:8f: a4:a5:46:62:38:27:a4:df:df:38:3f:6e:63:2c:39: 69:e7:00:13:ea:21:9c:7f:0d:65:19:cf:59:e4:fe: 73:a2:d1:a4:0f:12:00:be:81:ff:00:a0:7d:c6:e1: 24:9a:74:9a:30:6d:96:11:8a:4e:91:f4:da:cb:4f: 02:c1:90:62:fc:f7:f5:87:04:5d:2f:f7:f4:e0:e8: 6b:15:b7:29:08:76:55:9b:66:6f:7f:78:e0:51:43: f2:e9:7c:2d:b3:66:5e:67:eb:84:34:1a:ff:00:15: 05:38:eb:20:5f:8b:0a:21:bb:b2:29:aa:eb:d3:70: 8e:f2:c6:5c:c1:4e:4c:42:b7:48:ac:bd:e6:fc:41: ce:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.150.0/23 Signature Algorithm: sha256WithRSAEncryption 42:2e:68:8f:38:7f:42:61:38:7d:fd:00:82:7e:4e:60:c4:1e: 5a:35:9c:3b:3d:7b:ec:9a:a6:9d:c9:e9:da:c9:7a:10:72:1e: f5:b9:fc:dd:6b:93:cb:f8:21:81:13:f6:87:81:fa:57:26:7b: 95:7c:4a:4c:20:58:e5:6d:0b:8a:f5:63:92:86:32:7b:6d:08: fd:ac:98:0c:8b:10:2c:dd:b0:74:e8:e9:b9:ff:81:ac:ca:26: c1:a4:75:97:a0:36:99:ac:db:e6:32:91:df:f2:58:fc:a9:e9: e6:31:cd:55:0f:b3:d9:cb:94:c2:a3:bc:de:9b:97:b9:22:26: ae:ac:67:5d:ac:2d:01:64:cc:3b:8c:0d:a4:ca:ff:86:1c:bb: e3:3b:c1:b7:d0:97:c4:42:f6:9a:f1:81:ed:f6:ba:79:7b:ef: 5d:a9:28:41:b7:b8:17:60:fd:ea:d9:76:bf:68:a7:cf:ac:19: e5:2b:8a:ff:3c:6e:e3:0a:37:50:f2:e6:21:61:56:39:4c:fe: c3:3e:1a:10:b2:76:43:6e:33:c5:a6:84:16:27:fd:c1:c7:71: 09:da:d6:50:ab:a4:fe:c5:d7:04:78:48:43:43:fb:b1:82:dd: 0c:26:b1:be:0b:b4:42:52:d3:8c:0d:a7:8a:0c:3d:e7:82:83: 83:47:37:3c -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjE5MDQxOTQ5WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE4Q0MwMjExMC8GA1UEBRMoN0YwNjdBMjJBNEE5RTA5NkZEODZBNkJB MzU1QTU5MjQ5MDY3RDgwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AK6+SEwTTF4tEKhwoVZr43zUDg8X6IaPl2aNVBROHO/MEG4uBi/AYEYCGlqtcpoo IVl8Z+C5BsTuYbfGRtjy75gOq8zZdwVyEj3ZFYGIes+jHFDZlY0oXgQefPBAh56W V/XJfBbPEus3obFra6XjvsiLGcCVEvyPpKVGYjgnpN/fOD9uYyw5aecAE+ohnH8N ZRnPWeT+c6LRpA8SAL6B/wCgfcbhJJp0mjBtlhGKTpH02stPAsGQYvz39YcEXS/3 9ODoaxW3KQh2VZtmb3944FFD8ul8LbNmXmfrhDQa/wAVBTjrIF+LCiG7simq69Nw jvLGXMFOTEK3SKy95vxBzk0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBR/BnoipKng lv2Gpro1WlkkkGfYDDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OENDMDIvNjgwQzYyNDZCODZCMTFFRjlBNkE1MDU4QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThDQzAyLzY4MEM2MjQ2Qjg2QjExRUY5QTZBNTA1OEM0RjlBRTAyL2Z3WjZJcVNw NEpiOWhxYTZOVnBaSkpCbjJBdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaC/ljANBgkqhkiG9w0BAQsFAAOCAQEAQi5ojzh/QmE4ff0Agn5O YMQeWjWcOz177Jqmncnp2sl6EHIe9bn83WuTy/ghgRP2h4H6VyZ7lXxKTCBY5W0L ivVjkoYye20I/ayYDIsQLN2wdOjpuf+BrMomwaR1l6A2mazb5jKR3/JY/Knp5jHN VQ+z2cuUwqO83puXuSImrqxnXawtAWTMO4wNpMr/hhy74zvBt9CXxEL2mvGB7fa6 eXvvXakoQbe4F2D96tl2v2inz6wZ5SuK/zxu4wo3UPLmIWFWOUz+wz4aELJ2Q24z xaaEFif9wcdxCdrWUKuk/sXXBHhIQ0P7sYLdDCaxvgu0QlLTjA2nigw954KDg0c3 PA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:08:43 2025 by rpki-client