This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer File: iwbd_ObxnEG-OZ07x74q4-O_1F8.cer (raw, json) Hash identifier: 7UssTPiUkQgmA7yJ+MLGBlJa2J4jbKdJiEi1PA04ElM= Subject key identifier: 8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027EE1 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 17 Dec 2025 10:32:43 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 154435 IP: 2402:4120::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163553 (0x27ee1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 17 10:32:43 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91A2946, serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:f5:2f:5c:4f:7d:d3:bf:6a:bf:fd:56:2c: 87:01:ad:9c:84:1b:8c:b4:de:71:af:c7:f4:02:07: b2:b7:86:16:de:5b:fa:84:df:8f:76:d8:b8:f9:5a: 18:8f:49:d7:03:3d:61:8f:71:e0:2c:95:99:7a:a3: b9:5c:00:01:a9:0d:c8:6d:7a:8d:35:49:4c:a8:e7: c2:66:e4:70:59:5c:19:d2:de:0b:f0:ab:2b:11:94: 71:76:34:55:6e:2d:3b:6f:eb:59:69:06:23:3f:8d: 53:d9:99:ad:58:cf:1b:89:a0:a0:a3:be:fa:a7:0c: d3:a9:db:f4:5d:e5:8a:01:e4:5b:5e:df:88:7d:fd: 9e:5e:28:5b:06:6e:e0:32:b9:79:00:e1:cf:d5:7c: 67:98:80:a2:3c:13:a8:52:9d:db:ec:03:8b:9c:b5: 96:fb:5a:05:0b:86:ee:ec:8b:fb:95:29:87:83:9d: ff:43:3f:5f:d5:62:f0:5a:d6:78:e2:61:f1:7b:a2: 22:fb:64:b3:84:36:8b:7c:12:41:74:06:c5:63:71: 8d:78:0b:de:24:8e:6e:1b:e6:77:14:1c:28:3e:10: 7e:29:8a:e7:58:05:09:55:3b:51:03:71:70:59:78: 8a:66:98:c2:26:46:c6:d2:57:9a:c1:a5:d6:f5:24: 4c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154435 sbgp-ipAddrBlock: critical IPv6: 2402:4120::/32 Signature Algorithm: sha256WithRSAEncryption 30:78:81:38:b7:5f:26:32:0b:99:1f:8e:89:c9:78:3c:0b:8d: 9d:14:ed:a9:d5:6a:1d:08:52:b5:f1:3e:72:59:e6:3c:55:79: 83:87:ed:2a:b3:bd:ab:6f:12:22:19:e8:1a:48:6a:53:82:4e: a7:ef:50:2c:9b:c4:1d:32:c9:92:6d:3c:66:09:83:cf:8e:9b: 1a:9d:de:0b:23:9a:1e:83:83:fc:c9:6b:81:45:04:31:f4:a9: 20:10:22:49:de:6b:96:b3:fd:56:cc:55:59:82:58:30:f3:a6: 69:21:64:3b:89:0d:ea:f1:cd:38:96:e4:2d:dc:0c:c1:43:0a: af:e4:54:4b:ea:10:17:36:0f:18:d6:16:ca:d9:70:de:ed:10: fe:91:15:ab:c8:5f:09:0c:43:f1:01:01:99:5d:b5:dd:6c:a4: c7:d4:00:03:fb:c9:67:71:28:0b:e7:6a:a8:29:b4:66:b5:e6: 01:8e:52:84:de:4c:8b:a8:4b:6c:ed:83:4b:60:dc:1b:52:35: 41:2b:8b:8a:1b:0f:a3:a7:07:bb:15:b8:c4:c9:7c:ba:c9:c5: 77:7a:5a:4b:6f:3d:8e:c1:a1:0e:eb:87:c4:cf:a1:59:91:4c: 58:28:87:56:70:e8:7f:81:7c:09:69:fc:86:40:06:90:0c:f6: db:4f:a9:67 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAn7hMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxNzEwMzI0M1oXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQTI5NDYxMTAvBgNVBAUTKDhCMDZEREZDRTZGMTlDNDFCRTM5OUQz QkM3QkUyQUUzRTNCRkQ0NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe0vUvXE99079qv/1WLIcBrZyEG4y03nGvx/QCB7K3hhbeW/qE34922Lj5WhiP SdcDPWGPceAslZl6o7lcAAGpDchteo01SUyo58Jm5HBZXBnS3gvwqysRlHF2NFVu LTtv61lpBiM/jVPZma1YzxuJoKCjvvqnDNOp2/Rd5YoB5Fte34h9/Z5eKFsGbuAy uXkA4c/VfGeYgKI8E6hSndvsA4uctZb7WgULhu7si/uVKYeDnf9DP1/VYvBa1nji YfF7oiL7ZLOENot8EkF0BsVjcY14C94kjm4b5ncUHCg+EH4piudYBQlVO1EDcXBZ eIpmmMImRsbSV5rBpdb1JEwjAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUiwbd/Obx nEG+OZ07x74q4+O/1F8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUEyOTQ2L0I2NzEwMTMwREIzMzExRjBBMkNFNTM2ODhDRDM2NDFELzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBMjk0Ni9CNjcxMDEzMERCMzMxMUYwQTJDRTUzNjg4Q0QzNjQxRC9pd2JkX09i eG5FRy1PWjA3eDc0cTQtT18xRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAltDMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAJBIDANBgkq hkiG9w0BAQsFAAOCAQEAMHiBOLdfJjILmR+Oicl4PAuNnRTtqdVqHQhStfE+clnm PFV5g4ftKrO9q28SIhnoGkhqU4JOp+9QLJvEHTLJkm08ZgmDz46bGp3eCyOaHoOD /MlrgUUEMfSpIBAiSd5rlrP9VsxVWYJYMPOmaSFkO4kN6vHNOJbkLdwMwUMKr+RU S+oQFzYPGNYWytlw3u0Q/pEVq8hfCQxD8QEBmV213Wykx9QAA/vJZ3EoC+dqqCm0 ZrXmAY5ShN5Mi6hLbO2DS2DcG1I1QSuLihsPo6cHuxW4xMl8usnFd3paS289jsGh DuuHxM+hWZFMWCiHVnDof4F8CWn8hkAGkAz220+pZw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:06:34 2025 by rpki-client