This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer (raw, json) Hash identifier: mKQArueVxabrTsL8s/JDXigK969oDUEHZR6JIz+weoQ= Subject key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0277AC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 03:35:34 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 153326 IP: 2001:df4:41c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161708 (0x277ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 03:35:34 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:87:48:df:3e:28:45:64:f7:ff:6e:55:03: 94:44:00:d3:b9:53:30:8a:b5:39:2a:9e:91:a4:d9: f0:c6:01:a4:31:c0:ca:da:0c:e1:5c:8e:6d:8b:40: 90:cd:df:6f:7a:84:11:fe:28:5b:df:c9:29:c4:4a: 36:35:2c:d2:36:28:96:44:28:a9:50:94:91:c7:dd: 90:20:d8:ff:ec:47:a1:ce:48:41:cf:d5:47:6e:d4: 5c:4b:2f:8f:69:9f:e5:b6:da:92:45:db:e8:d8:c8: 91:12:26:71:6e:2d:49:91:65:5f:85:57:41:82:94: db:1e:97:94:fe:2a:84:79:8d:62:c4:5a:24:3e:40: 27:41:83:e7:28:51:d2:c7:f3:26:b9:fd:0b:e9:dd: fc:0a:47:2c:15:22:71:31:7c:7d:79:b3:db:f8:d5: aa:bd:bb:60:08:de:c7:3c:82:4a:56:08:86:52:32: 82:5c:d8:21:b3:d7:55:35:28:74:46:21:e3:f4:79: 3d:c8:df:c3:c5:30:b5:52:08:b9:83:9a:cd:81:77: d6:1d:94:83:5e:a9:04:f7:db:53:6d:cd:c0:f9:dc: 19:1e:1a:c5:ec:1c:5b:cd:3c:53:1f:87:e7:82:d6: 77:9c:98:80:c6:f4:5f:f0:3e:42:ee:75:46:56:3c: 17:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 153326 sbgp-ipAddrBlock: critical IPv6: 2001:df4:41c0::/48 Signature Algorithm: sha256WithRSAEncryption 4f:d3:08:05:b0:21:ff:d9:f5:24:74:59:68:24:bc:52:bc:cb: 5e:0c:8b:dc:ba:45:d5:c2:1e:36:d5:bb:62:61:81:13:51:af: fc:ed:21:9f:7e:d5:e4:46:4f:89:ac:8a:f6:fe:60:a2:b9:3f: 4c:a1:17:66:16:81:b4:7a:da:15:51:07:ea:44:56:09:2e:b2: 36:80:55:1c:78:7f:b8:28:fc:09:72:06:cf:5b:10:f3:00:79: 54:d0:27:1d:20:f7:8a:7e:6c:ce:18:7b:a0:e8:ca:aa:29:d2: 17:79:1a:b7:26:24:04:ec:a6:f4:0c:3b:9f:52:e2:78:2d:24: d8:9a:11:51:fe:8b:23:c6:2a:0b:a3:34:93:4b:36:a6:9f:28: b8:30:62:5d:56:59:fd:5b:b6:39:43:53:7f:01:3b:09:61:a2: 25:4a:a4:ca:d1:77:b4:1f:97:41:24:fa:9e:6b:74:ec:08:cd: c2:46:b5:b1:96:ab:50:97:03:c0:5e:0e:cd:92:b2:32:fb:9e: bf:f3:1a:3f:f4:62:27:56:36:d5:fb:6c:42:99:6b:9c:2f:14: cd:b2:a0:6e:6e:d7:d9:8f:45:94:67:94:42:51:06:8d:e2:9c: cf:31:23:37:ad:de:d6:56:b0:49:bf:8a:51:5c:14:eb:21:b4: 39:75:5c:30 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAnesMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTAzMzUzNFoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxQjFFNTUxMTAvBgNVBAUTKDY0MzE5NTY1MkIyMjBEQ0IyMkRBOTFE MDdGRDYzREE2OUVCODE0RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4/YdI3z4oRWT3/25VA5REANO5UzCKtTkqnpGk2fDGAaQxwMraDOFcjm2LQJDN 3296hBH+KFvfySnESjY1LNI2KJZEKKlQlJHH3ZAg2P/sR6HOSEHP1Udu1FxLL49p n+W22pJF2+jYyJESJnFuLUmRZV+FV0GClNsel5T+KoR5jWLEWiQ+QCdBg+coUdLH 8ya5/Qvp3fwKRywVInExfH15s9v41aq9u2AI3sc8gkpWCIZSMoJc2CGz11U1KHRG IeP0eT3I38PFMLVSCLmDms2Bd9YdlINeqQT321NtzcD53BkeGsXsHFvNPFMfh+eC 1necmIDG9F/wPkLudUZWPBcFAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUZDGVZSsi Dcsi2pHQf9Y9pp64FNUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUIxRTU1LzU1NUIwNDBBNzhGQTExRUZBNDRGRTU4NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCMUU1NS81NTVCMDQwQTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNz aURjc2kycEhRZjlZOXBwNjRGTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlbuMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9EHAMA0G CSqGSIb3DQEBCwUAA4IBAQBP0wgFsCH/2fUkdFloJLxSvMteDIvcukXVwh421bti YYETUa/87SGfftXkRk+JrIr2/mCiuT9MoRdmFoG0etoVUQfqRFYJLrI2gFUceH+4 KPwJcgbPWxDzAHlU0CcdIPeKfmzOGHug6MqqKdIXeRq3JiQE7Kb0DDufUuJ4LSTY mhFR/osjxioLozSTSzamnyi4MGJdVln9W7Y5Q1N/ATsJYaIlSqTK0Xe0H5dBJPqe a3TsCM3CRrWxlqtQlwPAXg7NkrIy+56/8xo/9GInVjbV+2xCmWucLxTNsqBubtfZ j0WUZ5RCUQaN4pzPMSM3rd7WVrBJv4pRXBTrIbQ5dVww -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:55 2025 by rpki-client