This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer File: FBD9h4cUD_mXb-nB-lhE7V3R48U.cer (raw, json) Hash identifier: 2lN0EewYx0z5cKgy6jtkk4UIyj1dV/neZRUTNc9e51k= Subject key identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D9D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft caRepository: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 11 Dec 2025 20:39:03 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 141389 IP: 103.158.14.0/23 IP: 2406:ac40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 05:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163229 (0x27d9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 11 20:39:03 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91FDD88, serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:f9:6b:9d:68:d4:53:28:7e:4d:09:38:30: 1e:a1:8a:95:2c:28:87:19:40:01:dd:0b:23:37:0b: 89:d2:5d:68:d6:bc:1d:23:8f:99:14:43:bc:24:ff: 9b:27:af:34:7b:1d:d2:dd:60:c9:45:f4:0e:aa:57: f9:4c:06:76:d0:95:79:a8:39:3f:f2:bf:fa:96:43: b0:28:36:d5:0c:4c:00:fc:ca:8f:68:be:64:b8:08: b1:65:76:2a:20:d3:87:b9:0d:e2:12:1f:fe:8f:08: 7b:e6:41:e3:93:7b:c9:b7:cb:fb:d2:28:48:13:60: dc:95:b2:3d:fb:b6:3e:08:0c:97:4f:ae:ec:1a:ea: 62:aa:57:7c:18:eb:56:90:77:40:59:23:db:4b:5a: 3d:d3:5b:ff:f8:1a:4c:66:83:95:8c:a9:0d:78:af: fe:bb:85:09:2f:da:ae:ee:5c:e5:00:9e:86:ff:13: 00:92:9c:71:c3:28:84:59:ee:04:a2:44:9e:39:4a: 7e:eb:ab:6d:6d:05:5a:9e:1f:ea:df:65:a4:2d:a3: fb:51:0a:b1:c8:9b:a3:ed:77:2c:f4:52:1b:27:08: 13:49:03:5c:32:6b:93:00:13:e2:59:af:b9:27:fc: bb:f0:fa:a4:2f:06:cc:76:4b:6f:19:77:07:a8:c8: de:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141389 sbgp-ipAddrBlock: critical IPv4: 103.158.14.0/23 IPv6: 2406:ac40::/32 Signature Algorithm: sha256WithRSAEncryption 6f:99:7c:d7:0d:03:2c:b5:28:36:65:59:3e:c8:39:15:f5:ff: 8f:a3:2d:99:6b:08:ee:e2:bb:fb:ac:71:f7:eb:e6:9f:13:8b: 36:3c:34:e4:ca:ef:24:75:50:98:9a:30:c2:2c:45:63:da:59: a8:3c:91:5a:0c:03:66:bf:66:3c:13:04:79:6e:ae:dd:f7:f9: ed:02:95:53:22:26:8d:2d:fd:01:cb:2e:4a:a1:55:4a:1f:6e: 31:f4:50:d6:73:90:f8:2d:5c:0b:08:a0:7a:35:c8:66:cd:51: 9e:d3:f2:a9:ad:7e:f2:dc:3d:e9:c1:ac:84:8e:c7:ce:cc:48: 28:20:c0:35:cf:e5:6f:b7:32:40:14:70:e9:10:78:c3:d1:11: 1b:fd:4c:f3:17:0d:73:8f:5d:d3:84:17:8f:ab:7b:6a:1e:64: 8a:3a:81:2e:e9:f2:dd:cc:5d:a7:fe:b6:ec:fb:cb:38:ae:b3: 1f:1a:12:10:0c:30:d2:a1:35:95:59:da:31:55:7c:73:af:9b: ba:c3:97:03:1a:1e:bb:98:70:de:3f:16:4a:ed:c9:be:16:e6: b4:2b:47:73:77:6d:35:a1:f9:c2:15:2a:7b:7c:98:04:bd:c8: cf:b4:f3:c1:10:50:c1:10:f5:75:98:a6:4a:2b:2b:d8:0f:ef: 41:da:af:36 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAn2dMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMTIwMzkwM1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRkREODgxMTAvBgNVBAUTKDE0MTBGRDg3ODcxNDBGRjk5NzZGRTlD MUZBNTg0NEVENUREMUUzQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIc/lrnWjUUyh+TQk4MB6hipUsKIcZQAHdCyM3C4nSXWjWvB0jj5kUQ7wk/5sn rzR7HdLdYMlF9A6qV/lMBnbQlXmoOT/yv/qWQ7AoNtUMTAD8yo9ovmS4CLFldiog 04e5DeISH/6PCHvmQeOTe8m3y/vSKEgTYNyVsj37tj4IDJdPruwa6mKqV3wY61aQ d0BZI9tLWj3TW//4Gkxmg5WMqQ14r/67hQkv2q7uXOUAnob/EwCSnHHDKIRZ7gSi RJ45Sn7rq21tBVqeH+rfZaQto/tRCrHIm6Ptdyz0UhsnCBNJA1wya5MAE+JZr7kn /Lvw+qQvBsx2S28ZdweoyN59AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUFBD9h4cU D/mXb+nB+lhE7V3R48UwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUZERDg4L0M4MjM2QUMyMDQ5MDExRUM4Q0MxQTM4NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGREQ4OC9DODIzNkFDMjA0OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRj VURfbVhiLW5CLWxoRTdWM1I0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAihNMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ54OMA0EAgAC MAcDBQAkBqxAMA0GCSqGSIb3DQEBCwUAA4IBAQBvmXzXDQMstSg2ZVk+yDkV9f+P oy2Zawju4rv7rHH36+afE4s2PDTkyu8kdVCYmjDCLEVj2lmoPJFaDANmv2Y8EwR5 bq7d9/ntApVTIiaNLf0Byy5KoVVKH24x9FDWc5D4LVwLCKB6NchmzVGe0/KprX7y 3D3pwayEjsfOzEgoIMA1z+VvtzJAFHDpEHjD0REb/UzzFw1zj13ThBePq3tqHmSK OoEu6fLdzF2n/rbs+8s4rrMfGhIQDDDSoTWVWdoxVXxzr5u6w5cDGh67mHDePxZK 7cm+Fua0K0dzd201ofnCFSp7fJgEvcjPtPPBEFDBEPV1mKZKKyvYD+9B2q82 -----END CERTIFICATE-----Generated at Mon Dec 22 08:49:22 2025 by rpki-client