This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer File: KFO9oWOMWZqEwwlTEOab_SYKqXg.cer (raw, json) Hash identifier: PQQfhIxpEQ5MJ3eNnFhauHeTl4aS770PybmCzVtM7tM= Subject key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027F8B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft caRepository: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 19 Dec 2025 13:12:18 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 63975 AS: 137075 IP: 43.230.8.0/22 IP: 43.255.116.0/22 IP: 103.49.60.0/22 IP: 103.103.244.0/22 IP: 103.235.16.0/22 IP: 103.239.100.0/22 IP: 150.129.216.0/22 IP: 2001:df3:1f00::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163723 (0x27f8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 19 13:12:18 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:47:9b:73:77:c7:3a:cb:b7:3e:e8:4a:6d: 10:f4:bf:57:55:fd:b4:dc:15:d9:10:48:be:ff:76: 44:1f:53:7e:b6:4d:99:bf:69:8d:43:05:1d:19:56: 35:8a:cf:d0:f2:38:96:44:f3:71:2e:2d:38:34:19: 89:64:43:7e:e1:60:0b:a1:71:2e:bb:8c:ea:3d:29: cc:0b:e7:49:74:d8:33:1e:00:39:0f:89:b9:e5:e4: 66:ac:b6:98:5a:f5:81:b3:60:ce:6b:12:e9:77:80: 60:a2:e7:ff:d0:ac:e9:80:68:96:8c:13:27:47:84: 65:53:07:0e:8e:bb:79:86:1c:35:5d:ac:da:0f:45: 0a:37:34:fc:e9:fc:56:46:ea:ef:b4:36:b8:85:ad: 8d:59:dc:55:54:5e:35:7d:98:a4:5d:3c:7e:b7:4e: c5:24:44:a4:a8:6b:18:f7:3e:f0:b4:a4:18:b9:6b: aa:7c:f8:bb:ed:89:af:da:04:50:2b:78:b0:cf:ca: 5a:e5:fd:3e:dc:e1:d7:76:4c:11:fb:87:96:62:9a: 1d:c8:1c:e7:8e:4c:4b:53:2d:91:d0:b1:fe:d3:ea: 14:7c:1b:ab:e2:cb:9a:64:9c:e7:91:8a:0d:22:b3: 1e:63:af:5f:71:ad:5d:a5:ec:01:14:11:49:83:0b: 1c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63975 137075 sbgp-ipAddrBlock: critical IPv4: 43.230.8.0/22 43.255.116.0/22 103.49.60.0/22 103.103.244.0/22 103.235.16.0/22 103.239.100.0/22 150.129.216.0/22 IPv6: 2001:df3:1f00::/48 Signature Algorithm: sha256WithRSAEncryption 01:ed:b9:04:d6:6c:eb:00:34:df:ab:6f:40:8e:39:2f:52:4d: be:05:df:d1:6a:02:32:5f:b4:8b:59:6d:74:be:11:15:07:68: e4:f1:ba:ac:76:42:59:3a:41:28:b5:8b:ee:a4:3b:16:05:20: e5:d4:4e:db:1d:4b:71:42:22:36:a6:bd:fe:8a:82:96:6d:46: f6:41:fa:f2:ab:9e:98:db:dc:26:1e:3f:58:d6:a9:3b:e0:6c: 69:8e:17:4e:0d:94:68:f3:eb:57:a3:a3:82:2e:eb:5c:20:af: 74:fb:b6:cf:42:d2:1b:d5:8e:65:eb:1f:c3:75:98:69:dc:87: aa:61:48:9f:5c:25:69:6b:fe:46:c8:92:fa:a3:e4:02:41:5a: a4:65:b4:5e:4c:f0:fd:d5:ff:5e:f7:ef:5a:33:b2:d5:aa:d9: 6e:9b:43:57:48:33:55:86:a4:ef:c8:a3:26:c1:59:50:81:99: 7f:e7:70:3b:4c:19:33:2d:bd:99:e0:7c:87:21:79:b2:5a:3f: 3a:a7:92:65:9e:bc:ff:d1:d2:d5:a0:30:77:1b:29:ce:89:3d: fe:be:bb:0f:7f:cc:af:05:6a:f4:85:a9:75:40:be:5f:b5:b8: 47:c8:4d:53:d4:6f:56:fe:02:90:2c:61:1f:59:f3:b2:72:f4: e6:7d:68:e2 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIDAn+LMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxOTEzMTIxOFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxNjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1 MzEwRTY5QkZEMjYwQUE5NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5vUebc3fHOsu3PuhKbRD0v1dV/bTcFdkQSL7/dkQfU362TZm/aY1DBR0ZVjWK z9DyOJZE83EuLTg0GYlkQ37hYAuhcS67jOo9KcwL50l02DMeADkPibnl5Gastpha 9YGzYM5rEul3gGCi5//QrOmAaJaMEydHhGVTBw6Ou3mGHDVdrNoPRQo3NPzp/FZG 6u+0NriFrY1Z3FVUXjV9mKRdPH63TsUkRKSoaxj3PvC0pBi5a6p8+Lvtia/aBFAr eLDPylrl/T7c4dd2TBH7h5Zimh3IHOeOTEtTLZHQsf7T6hR8G6viy5pknOeRig0i sx5jr19xrV2l7AEUEUmDCxx/AgMBAAGjggNJMIIDRTAdBgNVHQ4EFgQUKFO9oWOM WZqEwwlTEOab/SYKqXgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY1NTdCLzhEQTcyNjQwQzFGQTExRUNCMzBFRTIxQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2NTU3Qi84REE3MjY0MEMxRkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dP TVdacUV3d2xURU9hYl9TWUtxWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAPnnAgMCF3MwVAYIKwYBBQUHAQcBAf8ERTBDMDAEAgABMCoDBAIr5ggD BAIr/3QDBAJnMTwDBAJnZ/QDBAJn6xADBAJn72QDBAKWgdgwDwQCAAIwCQMHACAB DfMfADANBgkqhkiG9w0BAQsFAAOCAQEAAe25BNZs6wA036tvQI45L1JNvgXf0WoC Ml+0i1ltdL4RFQdo5PG6rHZCWTpBKLWL7qQ7FgUg5dRO2x1LcUIiNqa9/oqClm1G 9kH68quemNvcJh4/WNapO+BsaY4XTg2UaPPrV6Ojgi7rXCCvdPu2z0LSG9WOZesf w3WYadyHqmFIn1wlaWv+RsiS+qPkAkFapGW0Xkzw/dX/XvfvWjOy1arZbptDV0gz VYak78ijJsFZUIGZf+dwO0wZMy29meB8hyF5slo/OqeSZZ68/9HS1aAwdxspzok9 /r67D3/MrwVq9IWpdUC+X7W4R8hNU9RvVv4CkCxhH1nzsnL05n1o4g== -----END CERTIFICATE-----Generated at Sun Dec 21 09:45:48 2025 by rpki-client