This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer File: 1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer (raw, json) Hash identifier: pTD5/fDas4C0wWqIUjJb3GA9BWdf0TRget6v7wVXvqc= Subject key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027EC4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft caRepository: rsync://0.sb/repo/sb/38/ Notify URL: https://0.sb/rrdp/notification.xml Certificate not before: Tue 16 Dec 2025 22:47:58 +0000 Certificate not after: Tue 01 Dec 2026 00:00:00 +0000 Subordinate resources: IP: 103.121.208.0/22 IP: 2403:71c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 11:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163524 (0x27ec4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 16 22:47:58 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=A91FD4CC0000, serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:34:48:b8:a6:8d:50:5c:50:2d:f9:ce:0f: 4d:de:f0:c8:c0:98:93:e0:d3:f9:db:80:0a:04:41: cb:c6:91:e5:78:2b:07:d7:bb:d9:34:a1:fb:9a:e9: 02:2b:d6:87:09:bb:ce:73:d7:3b:38:7f:5d:78:e0: 0c:df:eb:54:1a:2c:99:74:5b:ed:b3:08:c5:d4:5a: 88:8f:38:66:2d:f6:fc:00:cb:08:da:87:9b:ac:9a: 55:49:af:d9:3d:68:58:74:fd:c4:c3:33:d2:89:06: 48:7b:39:7a:b8:eb:c7:22:05:0f:a1:1d:10:64:ad: ab:f5:1d:bb:c4:82:30:51:6c:35:bc:05:0e:2a:f3: 6a:cf:6c:83:ba:9f:b2:6b:c0:b6:f6:15:f0:9d:15: 0b:9e:c8:12:92:95:fb:d5:91:fc:b7:08:0d:dc:aa: 69:8d:53:5d:bc:50:9d:ab:74:5b:13:de:00:0c:6e: c9:b7:eb:bf:7c:37:d4:97:38:37:58:ae:bb:f1:d4: 88:6c:10:d1:dd:7a:7a:7d:33:69:50:7c:c3:2f:20: 1b:f7:7b:f9:ad:e2:49:30:c7:19:2f:f4:da:d4:36: f1:ac:8a:83:2d:ed:1b:20:b7:9d:04:53:ea:66:36: af:a6:6f:0f:d5:57:e5:15:68:c4:f2:ef:24:40:dc: cf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://0.sb/repo/sb/38/ RPKI Manifest - URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft RPKI Notify - URI:https://0.sb/rrdp/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.208.0/22 IPv6: 2403:71c0::/32 Signature Algorithm: sha256WithRSAEncryption 7c:62:e4:1a:a4:40:62:b4:b9:7f:9c:cd:46:6d:d5:49:1b:9b: 26:f9:d4:b8:21:c7:4a:59:c2:25:21:e8:1d:41:f3:d3:2e:fd: 1d:5c:51:46:09:cd:b2:8f:7f:65:a1:21:d6:c0:36:d3:be:73: 3c:25:97:c8:7e:68:c0:48:64:56:8b:ca:4e:3f:b4:f6:3c:b9: f3:3b:69:30:07:b7:94:6a:29:81:b4:95:c5:61:f8:54:bc:e3: 66:85:12:f7:ad:a4:cb:93:27:80:b9:c9:28:84:01:73:fa:79: a4:51:23:15:c6:98:da:92:15:65:50:46:fa:a3:e6:9c:85:44: 2c:7a:b8:bc:a0:1b:66:4f:f3:72:3c:61:b5:a6:2a:94:48:ca: db:ec:fe:08:30:36:95:b7:e0:87:98:28:d4:4b:c4:10:6c:15: 1d:5e:a8:24:27:4c:05:44:52:ae:3f:2e:57:c8:b2:fe:c0:83: 43:da:89:43:c8:a7:d3:41:fc:c5:f9:17:c4:f8:87:a3:f8:16: 15:a3:ef:21:5a:68:24:22:51:ca:71:1f:57:32:55:07:96:63: 6e:93:f2:36:3b:bf:0a:39:bd:23:d6:61:53:71:bd:9e:36:8b: 77:03:fa:22:a7:1a:fe:6c:bc:43:19:1f:d8:86:2f:6d:9d:b7: 0e:b8:09:33 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIDAn7EMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNjIyNDc1OFoXDTI2MTIwMTAwMDAwMFowSjEVMBMG A1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhENjdDNTMwQzhFMTZCNjFGRjUy QzA4NUIyNzg2QzY3RUNDRDZBOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEApKc0SLimjVBcUC35zg9N3vDIwJiT4NP524AKBEHLxpHleCsH17vZNKH7 mukCK9aHCbvOc9c7OH9deOAM3+tUGiyZdFvtswjF1FqIjzhmLfb8AMsI2oebrJpV Sa/ZPWhYdP3EwzPSiQZIezl6uOvHIgUPoR0QZK2r9R27xIIwUWw1vAUOKvNqz2yD up+ya8C29hXwnRULnsgSkpX71ZH8twgN3KppjVNdvFCdq3RbE94ADG7Jt+u/fDfU lzg3WK678dSIbBDR3Xp6fTNpUHzDLyAb93v5reJJMMcZL/Ta1DbxrIqDLe0bILed BFPqZjavpm8P1VflFWjE8u8kQNzPpQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFNZ8 UwyOFrYf9SwIWyeGxn7M1qkJMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1 MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h cG5pYy5uZXQvUlBLSS9DUFMucGRmMIG4BggrBgEFBQcBCwSBqzCBqDAkBggrBgEF BQcwBYYYcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMzgvMFAGCCsGAQUFBzAKhkRyc3lu YzovLzAuc2IvcmVwby9zYi8zOC9ENjdDNTMwQzhFMTZCNjFGRjUyQzA4NUIyNzg2 QzY3RUNDRDZBOTA5Lm1mdDAuBggrBgEFBQcwDYYiaHR0cHM6Ly8wLnNiL3JyZHAv bm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAmd5 0DANBAIAAjAHAwUAJANxwDANBgkqhkiG9w0BAQsFAAOCAQEAfGLkGqRAYrS5f5zN Rm3VSRubJvnUuCHHSlnCJSHoHUHz0y79HVxRRgnNso9/ZaEh1sA2075zPCWXyH5o wEhkVovKTj+09jy58ztpMAe3lGopgbSVxWH4VLzjZoUS962ky5MngLnJKIQBc/p5 pFEjFcaY2pIVZVBG+qPmnIVELHq4vKAbZk/zcjxhtaYqlEjK2+z+CDA2lbfgh5go 1EvEEGwVHV6oJCdMBURSrj8uV8iy/sCDQ9qJQ8in00H8xfkXxPiHo/gWFaPvIVpo JCJRynEfVzJVB5ZjbpPyNju/Cjm9I9ZhU3G9njaLdwP6Iqca/my8Qxkf2IYvbZ23 DrgJMw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:48:46 2025 by rpki-client