This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer (raw, json) Hash identifier: MCFvmrCw1g4zPppF72bFHYp8i36ZoA9NxlRZEhzSE/I= Subject key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02791F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 28 Nov 2025 17:40:28 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 38600 AS: 45498 IP: 27.109.112.0/22 IP: 103.145.136.0/23 IP: 117.20.112.0/21 IP: 202.56.0.0/22 IP: 202.93.153.0/24 IP: 202.129.236.0/24 IP: 203.18.216.0/21 IP: 203.118.242.0/24 IP: 2401:9700::/32 IP: 2405:3900::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162079 (0x2791f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 28 17:40:28 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b0:2a:00:35:10:1e:f7:fd:bd:24:10:2a:35: d0:11:97:a1:fd:a1:97:9f:10:61:6e:ff:4c:a4:dc: 11:9a:67:dc:e4:13:66:8d:2b:be:8d:57:ad:7a:b7: fb:04:db:ef:0e:63:b2:3e:25:ee:29:11:c2:79:45: 35:9c:12:98:d1:f9:98:b1:7d:d7:c6:04:ac:84:c6: 20:d6:b0:71:68:fb:6d:a7:5b:ba:77:95:13:42:fc: a8:a2:0a:4b:06:3c:e7:9e:4a:70:86:82:6c:f6:cf: 39:ee:5a:c1:f6:82:eb:4f:ba:99:07:c7:a8:2c:20: 16:00:82:d0:ad:e8:e7:e5:63:48:29:b2:d5:d4:be: 51:d4:84:ee:66:6e:0c:8a:6f:a3:25:90:66:f5:f0: 79:70:11:e4:93:7d:6f:df:9c:74:ad:85:2d:11:1b: 8c:5e:64:d0:1d:74:74:67:2a:65:88:fb:43:67:34: 50:61:b9:6c:be:f0:7e:e8:fd:4f:09:d9:a8:bd:9a: 86:b2:75:50:d9:99:34:74:c3:d2:ac:db:74:be:d7: 8a:af:a7:65:b8:c4:ca:36:33:e8:81:18:fe:37:f6: 9c:f2:e8:c9:91:fc:1a:be:a8:fa:1b:d0:2b:f8:a8: 73:3f:e2:0e:4c:90:26:54:d4:62:e6:1f:3a:5e:da: 88:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 38600 45498 sbgp-ipAddrBlock: critical IPv4: 27.109.112.0/22 103.145.136.0/23 117.20.112.0/21 202.56.0.0/22 202.93.153.0/24 202.129.236.0/24 203.18.216.0/21 203.118.242.0/24 IPv6: 2401:9700::/32 2405:3900::/32 Signature Algorithm: sha256WithRSAEncryption cc:59:cf:ab:85:4d:36:01:a1:c5:a2:aa:8b:40:dc:0b:82:3c: 3d:99:d3:6c:54:a6:1c:52:1e:46:4f:e0:ff:09:c5:3b:15:e6: 88:58:17:6b:b1:cf:aa:77:fd:43:6a:a2:51:67:6a:b0:a7:bd: 1f:6a:e8:04:f1:7a:4e:2f:fa:b8:c4:5d:bd:d3:0e:a5:c0:26: 3e:63:45:22:6a:9c:e5:e1:34:6b:cb:5e:e8:ad:49:85:64:a8: f4:d6:36:d4:25:44:c8:53:d8:5b:f9:7c:17:9b:99:5b:c8:dc: c7:3b:69:a4:06:29:ad:c4:b3:d8:e0:88:eb:8c:53:97:3d:95: 8b:a2:ca:09:80:11:20:f6:be:02:41:c9:78:34:1d:f5:ec:b4: 40:58:42:3e:95:ec:ff:4b:9a:ff:cd:cd:fd:43:7f:f6:8f:90: 46:bb:20:0a:3a:1b:b2:f0:e1:00:b5:2d:d1:4e:38:ff:e4:d9: d2:52:49:cb:20:eb:5c:d6:b0:f7:1b:36:f5:9c:74:15:af:7e: 92:62:9d:0e:24:95:ac:a6:f9:2e:c9:ed:f9:e5:9e:90:01:10: 1b:85:47:d4:62:88:d2:44:4c:32:1e:42:3f:fe:e3:2c:29:c5: 77:e5:c6:0e:66:74:26:ea:3d:d0:15:b5:8e:60:93:c8:e9:6b: c1:a0:c9:4c -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIDAnkfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyODE3NDAyOFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3 MzBGMTMzRTAwMkMwRTdGQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvsCoANRAe9/29JBAqNdARl6H9oZefEGFu/0yk3BGaZ9zkE2aNK76NV616t/sE 2+8OY7I+Je4pEcJ5RTWcEpjR+ZixfdfGBKyExiDWsHFo+22nW7p3lRNC/KiiCksG POeeSnCGgmz2zznuWsH2gutPupkHx6gsIBYAgtCt6OflY0gpstXUvlHUhO5mbgyK b6MlkGb18HlwEeSTfW/fnHSthS0RG4xeZNAddHRnKmWI+0NnNFBhuWy+8H7o/U8J 2ai9moaydVDZmTR0w9Ks23S+14qvp2W4xMo2M+iBGP439pzy6MmR/Bq+qPob0Cv4 qHM/4g5MkCZU1GLmHzpe2oi7AgMBAAGjggNUMIIDUDAdBgNVHQ4EFgQUZHsUnvAW zFNWp+1zDxM+ACwOf6owHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUUyMzY0LzhGRTcxNzg2RkY5QjExRTlCN0Y0QTc3MkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFMjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZB V3pGTldwLTF6RHhNLUFDd09mNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAJbIAgMAsbowXwYIKwYBBQUHAQcBAf8EUDBOMDYEAgABMDADBAIbbXAD BAFnkYgDBAN1FHADBALKOAADBADKXZkDBADKgewDBAPLEtgDBADLdvIwFAQCAAIw DgMFACQBlwADBQAkBTkAMA0GCSqGSIb3DQEBCwUAA4IBAQDMWc+rhU02AaHFoqqL QNwLgjw9mdNsVKYcUh5GT+D/CcU7FeaIWBdrsc+qd/1DaqJRZ2qwp70faugE8XpO L/q4xF290w6lwCY+Y0Uiapzl4TRry17orUmFZKj01jbUJUTIU9hb+XwXm5lbyNzH O2mkBimtxLPY4IjrjFOXPZWLosoJgBEg9r4CQcl4NB317LRAWEI+lez/S5r/zc39 Q3/2j5BGuyAKOhuy8OEAtS3RTjj/5NnSUknLIOtc1rD3Gzb1nHQVr36SYp0OJJWs pvkuye355Z6QARAbhUfUYojSREwyHkI//uMsKcV35cYOZnQm6j3QFbWOYJPI6WvB oMlM -----END CERTIFICATE-----Generated at Sat Dec 6 10:36:59 2025 by rpki-client