This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer File: _fbWlYIK89Dw56dNs0RTLFfa7kA.cer (raw, json) Hash identifier: IPNA/6yxB1QMvSpMdo7+QwLjpAZASWmjaQVUylU9uf4= Subject key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0284ED Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft caRepository: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 09 Jan 2026 05:00:24 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 202.14.66.0/24 IP: 203.0.123.0/24 IP: 203.15.65.0/24 IP: 203.19.102.0/24 IP: 203.32.106.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165101 (0x284ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 9 05:00:24 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:da:d3:2e:90:f4:13:38:c4:93:ed:80:a5: 4d:3c:31:eb:e1:8a:36:ca:b3:85:10:ab:f8:0d:8c: 91:27:e6:0c:2c:81:d3:cf:e5:fb:8b:39:10:cd:5f: d6:9b:62:a5:6e:5c:26:8d:39:9a:97:23:d2:33:e9: a4:e4:10:97:81:03:97:f1:20:fe:6e:69:37:b0:7c: b1:96:12:12:27:03:bb:94:74:6e:1a:63:54:0a:eb: 1f:dd:27:62:9b:a9:17:f8:57:ad:52:40:a9:6e:de: e8:d8:f9:fb:74:e3:21:e7:e0:a3:b8:01:fe:e0:b1: 21:db:10:d7:ad:f5:9a:74:28:97:b4:dc:2e:ea:6f: 65:eb:a5:fa:7a:e9:f0:d6:fd:95:da:53:a4:bf:97: 67:34:8d:9d:e7:c7:76:f7:8e:8d:3b:3e:47:9b:fa: a2:f3:57:61:73:7c:15:df:f1:6d:db:7c:86:84:b8: b6:6d:d4:97:1c:c2:49:80:95:73:b4:54:ae:df:da: 63:3f:6c:63:78:98:ec:b4:a1:4e:cc:1b:62:21:39: 67:45:0e:0f:fc:b3:8c:84:ba:c3:31:25:80:62:90: ab:64:19:ac:b4:97:43:04:be:a4:b6:62:02:6a:49: 99:cd:80:ac:00:24:a7:ee:be:af:e0:c3:33:1a:bf: 6e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.14.66.0/24 203.0.123.0/24 203.15.65.0/24 203.19.102.0/24 203.32.106.0/23 Signature Algorithm: sha256WithRSAEncryption c9:dd:88:49:15:26:30:07:85:27:a1:c3:91:22:13:22:a5:47: b8:bf:ed:07:82:64:bc:61:8e:b4:f0:d5:6f:b4:04:4a:de:b6: bd:21:67:42:97:bd:46:57:ee:f0:9c:23:fa:73:33:3b:04:f4: aa:35:fe:27:98:14:cd:cc:33:84:ee:bd:a0:88:35:03:62:20: fe:c6:11:fe:d7:7c:21:a8:7f:ed:8c:22:b6:0b:2f:ef:ce:e7: ba:66:a3:a8:05:0e:89:c3:8f:19:a2:dc:c9:e9:fc:b5:41:03: 33:e5:4b:a7:82:00:9f:6f:7f:7e:76:cf:49:05:39:2d:ed:de: 75:3f:66:ad:1c:2f:88:cd:b7:35:a2:a9:b3:57:74:a4:31:13: cc:0e:ad:bc:ae:4d:b2:8b:1a:c7:ee:e3:66:fa:da:f1:de:f2: 13:19:35:79:2d:da:1d:51:15:6b:d0:47:c9:3d:17:d8:39:41: 9e:3f:40:14:81:4b:ef:cd:d2:89:34:69:b3:10:c5:24:cd:24: 8a:bd:90:cb:ee:15:bc:fe:42:cf:06:78:bf:ca:c6:6d:b6:6f: 88:6b:ca:69:53:36:18:ae:41:6a:7c:eb:49:1f:35:59:5c:45: 3c:2a:3a:41:cf:28:55:0f:d5:7d:ae:3c:54:c5:7f:c2:8a:34: dc:12:6d:7c -----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgIDAoTtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwOTA1MDAyNFoXDTI2MTIwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxMjU4NjQxMTAvBgNVBAUTKEZERjZENjk1ODIwQUYzRDBGMEU3QTc0 REIzNDQ1MzJDNTdEQUVFNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFDNrTLpD0EzjEk+2ApU08MevhijbKs4UQq/gNjJEn5gwsgdPP5fuLORDNX9ab YqVuXCaNOZqXI9Iz6aTkEJeBA5fxIP5uaTewfLGWEhInA7uUdG4aY1QK6x/dJ2Kb qRf4V61SQKlu3ujY+ft04yHn4KO4Af7gsSHbENet9Zp0KJe03C7qb2Xrpfp66fDW /ZXaU6S/l2c0jZ3nx3b3jo07Pkeb+qLzV2FzfBXf8W3bfIaEuLZt1JccwkmAlXO0 VK7f2mM/bGN4mOy0oU7MG2IhOWdFDg/8s4yEusMxJYBikKtkGay0l0MEvqS2YgJq SZnNgKwAJKfuvq/gwzMav25FAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQU/fbWlYIK 89Dw56dNs0RTLFfa7kAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI1ODY0LzE5MjMxNUYyRUQxODExRjA4RTFDMDYwMjQwNkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyNTg2NC8xOTIzMTVGMkVEMTgxMUYwOEUxQzA2MDI0MDZGNTZCQy9fZmJXbFlJ Szg5RHc1NmROczBSVExGZmE3a0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8EKDAm MCQEAgABMB4DBADKDkIDBADLAHsDBADLD0EDBADLE2YDBAHLIGowDQYJKoZIhvcN AQELBQADggEBAMndiEkVJjAHhSehw5EiEyKlR7i/7QeCZLxhjrTw1W+0BEretr0h Z0KXvUZX7vCcI/pzMzsE9Ko1/ieYFM3MM4TuvaCINQNiIP7GEf7XfCGof+2MIrYL L+/O57pmo6gFDonDjxmi3Mnp/LVBAzPlS6eCAJ9vf352z0kFOS3t3nU/Zq0cL4jN tzWiqbNXdKQxE8wOrbyuTbKLGsfu42b62vHe8hMZNXkt2h1RFWvQR8k9F9g5QZ4/ QBSBS+/N0ok0abMQxSTNJIq9kMvuFbz+Qs8GeL/Kxm22b4hrymlTNhiuQWp860kf NVlcRTwqOkHPKFUP1X2uPFTFf8KKNNwSbXw= -----END CERTIFICATE-----Generated at Sun Jan 18 12:03:40 2026 by rpki-client