This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer (raw, json) Hash identifier: xWfq7Uf7x4s+RR69+rhyA0lUXp0kEUXqHEHZ4PS3oBA= Subject key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A39 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft caRepository: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 20:05:16 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 43.249.92.0/22 IP: 103.23.72.0/22 IP: 103.246.252.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162361 (0x27a39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 20:05:16 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a6:1c:e9:77:cc:e2:18:c4:d9:cc:6e:dc:74: 9f:8e:c5:71:56:1b:be:3e:4a:e5:d6:fb:6c:ba:5f: 97:7e:bc:25:4c:38:00:a6:d6:c8:cb:e6:37:1a:cf: e5:bf:74:1d:99:5f:1d:81:0d:ce:15:3b:4b:df:25: 53:a6:6e:64:62:b8:08:8a:d1:a6:2f:dc:49:32:13: ce:e8:ed:88:71:ec:f0:c7:64:c7:e3:fb:d6:77:d6: 85:0d:8c:86:8f:51:aa:ef:52:a9:cc:3b:38:3c:58: 1d:fa:bf:43:3e:dd:90:60:89:90:1f:38:e1:39:e7: 62:8a:56:25:0f:09:43:3f:65:a0:0f:62:af:60:a6: 90:45:28:29:36:75:d5:ab:57:b5:c4:c0:f9:f2:78: 66:3f:1a:ee:6c:8e:01:04:fd:4b:1d:62:e2:a7:70: c3:35:22:17:e8:86:35:21:9e:58:02:e3:0f:c6:2a: bf:a1:28:8b:ae:75:67:77:fe:bd:a8:b1:27:1a:96: 4f:6d:b8:f2:1b:28:62:82:51:0a:6e:0e:a6:48:7c: 74:89:f1:5d:39:a1:8a:04:d5:3b:6b:83:24:24:44: 1d:ee:75:d3:1e:42:d2:e9:ea:12:c9:a7:63:93:75: f4:0c:00:84:70:54:9b:2c:7c:11:e0:08:b8:c8:e8: c3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.92.0/22 103.23.72.0/22 103.246.252.0/22 Signature Algorithm: sha256WithRSAEncryption d9:f9:63:ab:94:8e:18:b5:74:fb:cd:8e:1c:48:f9:f6:42:82: f9:eb:70:79:44:b3:ea:cc:c0:57:4b:38:d3:da:06:ce:d5:01: b3:9b:de:83:fa:26:6e:42:4d:d1:86:96:59:d3:f2:ff:b8:94: 36:f4:8b:20:99:75:6a:31:27:09:11:b9:19:d5:a7:61:ac:a8: 5c:9b:88:22:9c:27:4b:1f:47:66:93:44:c2:e6:7d:06:d3:a0: a6:85:bf:1b:8c:04:0d:05:e5:21:2e:6a:5f:10:1a:04:36:79: 30:df:04:c2:9b:7f:b7:f8:2a:26:2f:0d:4e:69:c3:61:45:a6: 09:e4:b9:6e:15:35:1e:a1:54:0d:88:45:e1:1d:92:fa:bf:81: d4:90:55:ac:23:bd:01:50:db:4e:40:0f:72:fb:24:a6:b6:ca: 76:f8:c2:df:ec:55:b0:c6:4c:50:0a:88:c9:58:e7:0b:18:19: 4e:3f:dc:60:5e:6d:ee:3f:e8:6e:bd:72:64:97:b2:99:19:da: c8:7b:81:c2:5c:0c:9b:1b:71:d5:d0:0d:81:08:6f:d9:55:55: c5:e7:65:07:79:e4:07:c4:d5:1b:1e:62:de:a3:d4:bd:07:92: 5b:c0:ae:ff:cf:e0:62:59:f7:ec:77:ef:c2:df:42:7c:5b:16: 39:6e:03:75 -----BEGIN CERTIFICATE----- MIIGCjCCBPKgAwIBAgIDAno5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTIwMDUxNloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxOEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNC MjMzRkY2NUFFM0RBRDE1NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMphzpd8ziGMTZzG7cdJ+OxXFWG74+SuXW+2y6X5d+vCVMOACm1sjL5jcaz+W/ dB2ZXx2BDc4VO0vfJVOmbmRiuAiK0aYv3EkyE87o7Yhx7PDHZMfj+9Z31oUNjIaP UarvUqnMOzg8WB36v0M+3ZBgiZAfOOE552KKViUPCUM/ZaAPYq9gppBFKCk2ddWr V7XEwPnyeGY/Gu5sjgEE/UsdYuKncMM1IhfohjUhnlgC4w/GKr+hKIuudWd3/r2o sScalk9tuPIbKGKCUQpuDqZIfHSJ8V05oYoE1TtrgyQkRB3uddMeQtLp6hLJp2OT dfQMAIRwVJssfBHgCLjI6MOXAgMBAAGjggL/MIIC+zAdBgNVHQ4EFgQUFgHYZQ3V VrKvsIOyM/9lrj2tFXEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThGQzQwLzYxN0YzNTM2NDBFMTExRUFCQzYyREIyNkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4RkM0MC82MTdGMzUzNjQwRTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEz VlZyS3ZzSU95TV85bHJqMnRGWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8EHDAa MBgEAgABMBIDBAIr+VwDBAJnF0gDBAJn9vwwDQYJKoZIhvcNAQELBQADggEBANn5 Y6uUjhi1dPvNjhxI+fZCgvnrcHlEs+rMwFdLONPaBs7VAbOb3oP6Jm5CTdGGllnT 8v+4lDb0iyCZdWoxJwkRuRnVp2GsqFybiCKcJ0sfR2aTRMLmfQbToKaFvxuMBA0F 5SEual8QGgQ2eTDfBMKbf7f4KiYvDU5pw2FFpgnkuW4VNR6hVA2IReEdkvq/gdSQ VawjvQFQ205AD3L7JKa2ynb4wt/sVbDGTFAKiMlY5wsYGU4/3GBebe4/6G69cmSX spkZ2sh7gcJcDJsbcdXQDYEIb9lVVcXnZQd55AfE1RseYt6j1L0HklvArv/P4GJZ 9+x378LfQnxbFjluA3U= -----END CERTIFICATE-----Generated at Sun Dec 7 07:34:31 2025 by rpki-client