This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer File: FL-reUJuPSK-w_xh7kMv6ggnKUY.cer (raw, json) Hash identifier: M0G2vytBet9BfxbCdnh9NNmQb7ngxXLhYkonBtmMmYM= Subject key identifier: 14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B27 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft caRepository: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 04:59:28 +0000 Certificate not after: Thu 28 May 2026 00:00:00 +0000 Subordinate resources: AS: 138601 IP: 103.134.88.0/22 IP: 103.244.247.0/24 IP: 123.176.56.0/24 IP: 123.176.58.0/24 IP: 202.129.193.0/24 IP: 2404:61c0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162599 (0x27b27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 04:59:28 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=A919F46B, serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:3b:5d:d6:9d:1b:d1:02:c3:55:28:10:00: f8:c0:a0:e0:dd:0b:5f:e0:55:dd:e7:9f:31:e4:96: 02:93:22:04:97:08:9a:f7:bf:1e:4a:ad:a0:a1:be: 77:4a:e4:07:0d:2d:2b:cd:e9:8b:0c:63:0b:5a:93: 27:15:16:eb:1b:25:c2:e6:7c:ce:6e:c2:9c:af:ab: fe:ed:49:45:09:67:52:20:ca:c0:29:65:3a:e1:8a: 1c:45:ed:db:ad:47:89:4e:04:7d:1d:02:66:51:02: 39:d8:ef:5f:cb:39:49:1e:a7:b8:87:2e:ab:b1:e9: 0f:8e:e4:8d:b6:66:5c:f8:ea:db:e0:2c:ca:31:9b: cf:ef:07:1a:49:09:f4:28:36:c6:f6:82:35:c0:a5: 71:d1:56:a8:f8:3a:e4:d4:97:9e:c5:fc:25:34:96: d0:d8:ae:49:3e:b2:dd:48:40:b9:73:c2:be:ed:e2: 85:c3:67:2e:6d:4e:91:e9:00:d0:c8:3b:4f:6f:cf: 5c:47:8c:9c:9d:76:fe:b9:a5:76:7f:5f:0c:c7:0d: b6:64:49:af:bf:73:cb:b8:b7:72:ad:1a:a3:13:e4: 5f:1a:63:9a:49:29:ec:98:8d:f7:3a:90:bb:f9:2a: b6:b6:37:28:c6:96:28:d0:2e:28:e9:6d:9f:15:85: 36:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138601 sbgp-ipAddrBlock: critical IPv4: 103.134.88.0/22 103.244.247.0/24 123.176.56.0/24 123.176.58.0/24 202.129.193.0/24 IPv6: 2404:61c0::/32 Signature Algorithm: sha256WithRSAEncryption 08:80:39:59:4a:71:6f:01:be:29:73:53:f1:0d:c9:0a:59:c3: a1:5d:4e:7b:8d:3b:c0:08:50:ca:cf:32:31:8a:4a:c4:34:58: 60:d3:a0:c4:06:85:d1:f4:68:bb:57:e6:06:39:1b:04:af:73: 0d:57:0b:6c:d6:3b:44:14:d2:85:e1:b8:80:19:d3:81:57:87: 47:fb:54:ee:d7:2c:4f:11:a8:1d:38:fd:48:77:ad:79:58:75: 2a:3a:f6:b2:ef:c0:bf:38:60:9c:67:33:16:65:14:9a:20:81: b8:09:ab:00:e1:98:77:ab:a8:1b:e1:1c:6b:2c:a2:e3:de:63: b7:65:14:80:b9:c2:89:f0:fc:91:d8:af:b9:06:02:9d:d2:0b: 18:fb:4c:91:a6:87:50:b3:fc:73:96:2a:83:f1:c8:46:f0:a7: 2e:c5:86:ef:7b:b6:1b:e3:3a:b7:5f:07:2e:9a:ec:0b:a9:95: 0c:92:ab:62:f0:a2:76:c7:e5:f3:cf:c2:1b:12:6a:a3:3d:da: 5a:da:0e:7f:8f:7a:6f:51:1a:09:5b:eb:2b:c7:bd:03:8b:d3: 98:35:a7:84:b2:82:3d:ed:7d:0e:55:3e:58:b8:40:5a:df:6c: 95:c7:d1:81:90:ef:30:7c:06:58:e0:89:f4:67:5b:b4:66:ab: 88:64:eb:62 -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIDAnsnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzA0NTkyOFoXDTI2MDUyODAwMDAwMFowRjERMA8G A1UEAxMIQTkxOUY0NkIxMTAvBgNVBAUTKDE0QkZBQjc5NDI2RTNEMjJCRUMzRkM2 MUVFNDMyRkVBMDgyNzI5NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDApDtd1p0b0QLDVSgQAPjAoODdC1/gVd3nnzHklgKTIgSXCJr3vx5KraChvndK 5AcNLSvN6YsMYwtakycVFusbJcLmfM5uwpyvq/7tSUUJZ1IgysApZTrhihxF7dut R4lOBH0dAmZRAjnY71/LOUkep7iHLqux6Q+O5I22Zlz46tvgLMoxm8/vBxpJCfQo Nsb2gjXApXHRVqj4OuTUl57F/CU0ltDYrkk+st1IQLlzwr7t4oXDZy5tTpHpANDI O09vz1xHjJyddv65pXZ/XwzHDbZkSa+/c8u4t3KtGqMT5F8aY5pJKeyYjfc6kLv5 Kra2NyjGlijQLijpbZ8VhTbZAgMBAAGjggM2MIIDMjAdBgNVHQ4EFgQUFL+reUJu PSK+w/xh7kMv6ggnKUYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlGNDZCLzU2RUVCQUU4NTkyODExRTk5RkZGN0EyMUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5RjQ2Qi81NkVFQkFFODU5MjgxMUU5OUZGRjdBMjFDNEY5QUUwMi9GTC1yZVVK dVBTSy13X3hoN2tNdjZnZ25LVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAh1pMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCZ4ZYAwQAZ/T3 AwQAe7A4AwQAe7A6AwQAyoHBMA0EAgACMAcDBQAkBGHAMA0GCSqGSIb3DQEBCwUA A4IBAQAIgDlZSnFvAb4pc1PxDckKWcOhXU57jTvACFDKzzIxikrENFhg06DEBoXR 9Gi7V+YGORsEr3MNVwts1jtEFNKF4biAGdOBV4dH+1Tu1yxPEagdOP1Id615WHUq Ovay78C/OGCcZzMWZRSaIIG4CasA4Zh3q6gb4RxrLKLj3mO3ZRSAucKJ8PyR2K+5 BgKd0gsY+0yRpodQs/xzliqD8chG8KcuxYbve7Yb4zq3XwcumuwLqZUMkqti8KJ2 x+Xzz8IbEmqjPdpa2g5/j3pvURoJW+srx70Di9OYNaeEsoI97X0OVT5YuEBa32yV x9GBkO8wfAZY4In0Z1u0ZquIZOti -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:22 2025 by rpki-client