This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer File: Z0fEVgFDfWEgWyv7QGfO0i6358E.cer (raw, json) Hash identifier: BRLeW8Ck9g9m3CqUdq/j79mIoqQsePL/Gu/grcD8G0Y= Subject key identifier: 67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02757A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft caRepository: rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 16 Nov 2025 10:00:23 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 153770 IP: 163.227.48.0/24 IP: 2001:df5:5840::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161146 (0x2757a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 16 10:00:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A914AA99, serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:b0:9c:40:6a:75:46:fb:99:f8:e8:9e:8e: 1e:7f:c5:1d:c2:4d:25:e4:d1:8f:8d:8c:d4:d5:24: 86:32:25:79:74:9a:ca:80:bb:a1:0f:3c:54:e3:58: 91:fe:f4:17:81:51:42:ca:a7:dd:69:65:5e:cd:25: f2:bf:7a:3f:8f:4d:f1:bf:d5:ad:1c:fc:75:06:15: 82:5a:40:a1:8f:0d:68:92:de:84:eb:93:92:e0:76: 71:e6:94:12:a4:ae:3e:30:71:23:6c:ba:58:96:0c: d0:88:48:2f:41:44:3e:bc:70:d9:90:3c:b2:8f:bf: b5:1d:27:01:63:c7:23:f4:c3:64:f5:13:49:14:4c: e9:d4:32:c6:80:d5:2e:d5:09:a8:a0:aa:94:f3:d7: 00:27:a0:8f:96:58:16:d1:72:f7:06:a5:cf:9c:80: 5c:e5:d7:d3:03:29:58:b9:19:01:78:14:4e:e8:7d: c5:31:5f:0d:79:70:83:10:36:1b:a2:80:d3:f9:61: 85:a8:fb:44:ed:a1:68:da:9a:48:00:fb:1e:78:5e: 68:e5:58:cb:9b:be:0a:39:ee:97:df:c1:95:fe:f5: a4:a7:cb:4c:c2:5e:21:6c:6e:50:c9:cd:2d:83:9c: 24:7d:29:e5:28:e6:bb:f2:08:8d:d1:86:30:ac:1f: 22:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153770 sbgp-ipAddrBlock: critical IPv4: 163.227.48.0/24 IPv6: 2001:df5:5840::/48 Signature Algorithm: sha256WithRSAEncryption 2a:41:ab:38:1c:9a:87:9c:30:67:42:cd:6d:54:c8:22:18:aa: cc:bb:61:7e:17:7a:7a:8f:71:c4:7c:80:20:26:dc:e2:f7:73: a0:94:1f:83:fc:d2:90:cf:45:a3:6d:d1:3f:30:ed:21:3e:61: 9c:8c:02:57:c7:1d:af:c3:08:4b:c3:e1:80:a9:c6:f3:f4:a1: dd:64:38:f4:a6:63:fa:48:cf:03:50:ec:5f:df:f1:c6:13:6b: ac:12:a6:63:ce:22:56:f0:24:36:e4:97:d8:bf:63:6b:63:06: 59:c1:69:48:2d:d0:13:33:66:52:e5:43:d2:49:22:23:e1:a8: e5:0c:e3:d0:11:f9:eb:8b:a9:1f:b5:f8:0a:c5:28:00:4e:a1: c8:a8:66:1f:f3:30:0f:dd:df:72:f3:df:a9:9c:ae:03:7b:4a: bc:bf:6f:e1:50:64:30:ad:18:20:0c:93:e2:5f:86:b5:c3:27: 2b:c5:59:90:bc:cb:80:2a:1a:43:1f:d8:b7:e7:8a:f6:e2:dc: 47:73:d9:66:b0:c0:75:b5:03:0b:ee:8e:d0:10:4f:df:fe:48: 51:d0:de:23:e5:ec:4f:3e:ba:ec:b4:23:23:44:b8:88:cb:1b: 8b:68:56:d1:eb:d4:3c:5c:3b:f0:8c:69:08:11:5b:c3:5a:50: 54:7d:26:d5 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnV6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNjEwMDAyM1oXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNEFBOTkxMTAvBgNVBAUTKDY3NDdDNDU2MDE0MzdENjEyMDVCMkJG QjQwNjdDRUQyMkVCN0U3QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJV7CcQGp1RvuZ+Oiejh5/xR3CTSXk0Y+NjNTVJIYyJXl0msqAu6EPPFTjWJH+ 9BeBUULKp91pZV7NJfK/ej+PTfG/1a0c/HUGFYJaQKGPDWiS3oTrk5LgdnHmlBKk rj4wcSNsuliWDNCISC9BRD68cNmQPLKPv7UdJwFjxyP0w2T1E0kUTOnUMsaA1S7V CaigqpTz1wAnoI+WWBbRcvcGpc+cgFzl19MDKVi5GQF4FE7ofcUxXw15cIMQNhui gNP5YYWo+0TtoWjamkgA+x54XmjlWMubvgo57pffwZX+9aSny0zCXiFsblDJzS2D nCR9KeUo5rvyCI3RhjCsHyK3AgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUZ0fEVgFD fWEgWyv7QGfO0i6358EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRBQTk5LzBGMzdDODg2QzJEMzExRjA5OUMwNjM4NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0QUE5OS8wRjM3Qzg4NkMyRDMxMUYwOTlDMDYzODZDNEY5QUUwMi9aMGZFVmdG RGZXRWdXeXY3UUdmTzBpNjM1OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAliqMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAo+MwMA8EAgAC MAkDBwAgAQ31WEAwDQYJKoZIhvcNAQELBQADggEBACpBqzgcmoecMGdCzW1UyCIY qsy7YX4XenqPccR8gCAm3OL3c6CUH4P80pDPRaNt0T8w7SE+YZyMAlfHHa/DCEvD 4YCpxvP0od1kOPSmY/pIzwNQ7F/f8cYTa6wSpmPOIlbwJDbkl9i/Y2tjBlnBaUgt 0BMzZlLlQ9JJIiPhqOUM49AR+euLqR+1+ArFKABOocioZh/zMA/d33Lz36mcrgN7 Sry/b+FQZDCtGCAMk+JfhrXDJyvFWZC8y4AqGkMf2Lfnivbi3Edz2WawwHW1Awvu jtAQT9/+SFHQ3iPl7E8+uuy0IyNEuIjLG4toVtHr1DxcO/CMaQgRW8NaUFR9JtU= -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:08 2025 by rpki-client