This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer File: CZJdtntKud9gBue9K8HY7cjMfhk.cer (raw, json) Hash identifier: nWP2UwPTtvBJF1DTc2NQhThKJRgJP16phIMbAhLIAWc= Subject key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A0D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft caRepository: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 01 Dec 2025 14:12:31 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 103.6.20.0/22 IP: 103.11.236.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162317 (0x27a0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 1 14:12:31 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c8:8b:ba:88:70:ac:86:74:ea:41:37:d8:d1: fb:f6:49:28:bb:eb:0a:ae:aa:a7:40:3e:cf:fc:c1: 57:f0:00:f7:a1:1a:a0:f0:a3:6b:d1:8e:0a:a1:03: d2:eb:8b:d4:93:1b:b2:11:9b:45:dc:14:92:09:c4: 5c:67:8c:e5:da:35:77:12:2e:a3:6a:d6:26:4e:02: af:8c:d6:55:c7:ba:f0:cb:01:0c:ae:3b:a3:76:22: 2c:77:47:9d:04:3f:6e:9d:5b:9c:d5:43:d2:2d:39: 2b:2b:1d:eb:96:5b:6f:3e:a9:d8:54:0e:a8:58:b2: d8:2e:2f:97:15:8a:f5:7f:62:d8:4a:cb:d5:ed:4f: dc:b4:4f:5e:18:c9:3c:41:11:37:07:a2:2d:67:82: d6:b2:bd:3d:0d:72:cc:b8:c7:47:c9:c6:23:62:0a: 59:50:56:41:c0:48:bb:82:f7:5a:be:22:29:d7:46: a2:70:39:37:97:ff:c3:e3:75:6e:28:02:74:c6:68: 85:c1:59:f2:cf:be:81:9d:cd:14:d6:34:5f:81:78: ce:b8:be:b2:d9:3d:56:f2:62:ef:a9:e4:68:c7:ef: 6b:b4:35:f9:3e:e8:40:80:68:30:0d:36:a0:7a:52: 16:40:a2:df:d8:22:df:32:c6:59:6e:cf:41:c1:49: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.6.20.0/22 103.11.236.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:07:38:17:da:a7:cf:ce:52:f0:f2:27:44:c6:37:2b:30:c3: 5a:11:c9:db:2a:2a:6c:1c:b2:b4:44:09:f9:fa:58:b1:54:a4: 76:9c:4b:64:af:68:25:7f:35:fb:28:89:e8:0c:95:eb:f0:ea: ee:64:6c:86:c2:21:fb:d3:22:70:71:cb:d6:55:cb:20:e4:ad: a9:32:b3:e2:14:f4:f6:9e:75:0b:b6:01:0b:ad:4b:69:7d:24: 28:ee:4c:71:26:7f:4c:05:d0:70:1e:f6:5a:8c:1a:ea:ce:be: ad:67:df:66:84:9d:fe:0d:d6:0d:80:06:53:8a:58:89:79:44: 61:4d:21:ab:a8:a9:f7:f2:2a:51:55:09:63:32:5a:53:bf:cc: 04:c6:00:a8:bd:02:1a:a2:b0:23:ca:f8:bb:6c:26:9b:c1:a9: fe:5e:cf:fd:42:76:67:82:4c:1d:0b:e1:55:65:60:a0:88:05: 11:76:2b:a2:92:64:86:5a:18:21:57:82:a3:2d:4f:0c:3d:3e: a4:28:d0:60:42:c7:dd:5b:c4:7e:9c:48:ee:20:40:70:1f:2a: 15:c2:3a:d2:a5:47:5f:cb:95:c3:ff:d6:5c:8a:68:ce:f4:fd: ea:2e:b6:93:2c:bf:54:be:ad:a0:8b:d2:97:65:55:9d:66:8e: 72:51:47:92 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIDAnoNMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMTE0MTIzMVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxM0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdC RDJCQzFEOEVEQzhDQzdFMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzyIu6iHCshnTqQTfY0fv2SSi76wquqqdAPs/8wVfwAPehGqDwo2vRjgqhA9Lr i9STG7IRm0XcFJIJxFxnjOXaNXcSLqNq1iZOAq+M1lXHuvDLAQyuO6N2Iix3R50E P26dW5zVQ9ItOSsrHeuWW28+qdhUDqhYstguL5cVivV/YthKy9XtT9y0T14YyTxB ETcHoi1ngtayvT0Ncsy4x0fJxiNiCllQVkHASLuC91q+IinXRqJwOTeX/8PjdW4o AnTGaIXBWfLPvoGdzRTWNF+BeM64vrLZPVbyYu+p5GjH72u0Nfk+6ECAaDANNqB6 UhZAot/YIt8yxlluz0HBSVr9AgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUCZJdtntK ud9gBue9K8HY7cjMfhkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNCN0IyLzQwNjY1MDA4NDE2RjExRUFCNUM3Q0E2NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzQjdCMi80MDY2NTAwODQxNkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50 S3VkOWdCdWU5SzhIWTdjak1maGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU MBIEAgABMAwDBAJnBhQDBAJnC+wwDQYJKoZIhvcNAQELBQADggEBABwHOBfap8/O UvDyJ0TGNysww1oRydsqKmwcsrRECfn6WLFUpHacS2SvaCV/NfsoiegMlevw6u5k bIbCIfvTInBxy9ZVyyDkrakys+IU9PaedQu2AQutS2l9JCjuTHEmf0wF0HAe9lqM GurOvq1n32aEnf4N1g2ABlOKWIl5RGFNIauoqffyKlFVCWMyWlO/zATGAKi9Ahqi sCPK+LtsJpvBqf5ez/1CdmeCTB0L4VVlYKCIBRF2K6KSZIZaGCFXgqMtTww9PqQo 0GBCx91bxH6cSO4gQHAfKhXCOtKlR1/LlcP/1lyKaM70/eoutpMsv1S+raCL0pdl VZ1mjnJRR5I= -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:46 2025 by rpki-client