This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer File: ZI5HI0RBcbar4W19wDDonAbwUNw.cer (raw, json) Hash identifier: mnR+n3SpaUtYHYscGDq5lCha69wJI0Cdil82JiA678w= Subject key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0272E3 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 04 Nov 2025 14:47:08 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 63844 IP: 103.41.244.0/23 IP: 103.77.252.0/23 IP: 116.206.252.0/22 IP: 2405:9140::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160483 (0x272e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 4 14:47:08 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A91408BE, serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:66:70:50:08:13:0a:a0:ec:95:b3:0a:80:50: 4b:60:79:80:c4:4f:eb:35:63:a8:77:46:40:59:b1: 5b:ee:39:b5:75:fa:5c:df:cc:27:2e:29:93:63:4c: c6:2f:40:0b:53:b8:cd:3c:c3:e2:27:05:bd:1b:e0: 04:ba:2d:ac:f0:33:06:d7:0c:dd:05:93:c9:22:0e: c3:15:c4:19:42:1e:da:d0:89:e3:69:92:96:5a:40: 80:ff:f3:14:60:d4:1d:95:f2:85:61:1b:8d:53:e7: e9:0c:ee:0c:98:71:db:ab:1f:01:d8:0c:bc:42:a4: 11:16:e7:d2:41:8d:f9:75:35:19:47:a7:61:bf:ee: a8:a4:0b:a3:cc:44:13:9c:93:25:47:b2:9d:d2:80: 73:fd:cf:ff:e1:67:c4:9c:4f:53:7c:60:17:93:4e: 22:a5:80:cf:83:20:54:2f:5e:c0:c0:97:84:e6:e9: 2e:e2:cd:e9:3b:08:f4:7d:f3:5c:2d:bd:d1:29:50: a8:52:b6:df:17:96:c8:74:f5:de:11:2a:bb:8a:b2: 6d:2a:a3:e4:31:1c:0a:81:97:d8:23:74:f4:88:c0: 30:ec:16:a7:45:1c:33:b9:35:2e:6e:c2:11:42:98: c9:47:d2:ae:ab:36:9e:6d:f8:76:c4:5d:ca:1a:ef: 9a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63844 sbgp-ipAddrBlock: critical IPv4: 103.41.244.0/23 103.77.252.0/23 116.206.252.0/22 IPv6: 2405:9140::/32 Signature Algorithm: sha256WithRSAEncryption 95:37:7c:0f:de:12:f8:d6:d6:62:cb:e5:11:e0:23:ac:ab:ee: 3d:69:a0:1a:86:c0:95:b8:2d:c6:1c:94:7f:6f:bf:56:97:c1: d3:69:02:59:41:9d:dd:29:5e:26:95:ed:f9:af:c2:73:0e:9d: 94:a3:f6:8a:a1:ca:74:42:36:52:29:ef:a2:64:07:7b:be:3b: 78:8d:0f:82:fb:bd:6f:11:68:d3:74:c9:a4:5d:bf:75:96:80: 99:d8:74:be:9f:9c:23:9a:e2:a2:00:83:9b:84:76:37:83:ad: 09:70:3c:d9:86:99:b9:f0:2b:e5:e2:30:f3:8c:d1:1a:c9:1c: bf:42:09:03:1b:7d:07:3a:30:8d:20:21:7f:af:59:3e:72:48: 79:66:d1:43:95:c1:e8:9a:49:46:65:ed:4e:7e:f2:86:b6:5d: a7:c3:ad:4f:4a:03:77:33:8e:d3:e7:2c:f3:4e:8a:82:2f:26: 2b:6d:cb:41:d6:76:b4:e8:aa:ac:f9:bb:43:70:53:f3:fa:07: 78:c4:49:29:41:33:08:4c:cd:17:76:3d:71:d0:ec:e1:de:39: 5c:6f:bd:93:86:f2:ed:19:93:a9:68:14:e3:30:11:fa:c7:6e: fd:95:19:a6:12:31:f1:5f:1b:9e:6f:91:e3:74:cf:db:41:90: 8c:e4:7b:f7 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIDAnLjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNDE0NDcwOFoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNDA4QkUxMTAvBgNVBAUTKDY0OEU0NzIzNDQ0MTcxQjZBQkUxNkQ3 REMwMzBFODlDMDZGMDUwREMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZZnBQCBMKoOyVswqAUEtgeYDET+s1Y6h3RkBZsVvuObV1+lzfzCcuKZNjTMYv QAtTuM08w+InBb0b4AS6LazwMwbXDN0Fk8kiDsMVxBlCHtrQieNpkpZaQID/8xRg 1B2V8oVhG41T5+kM7gyYcdurHwHYDLxCpBEW59JBjfl1NRlHp2G/7qikC6PMRBOc kyVHsp3SgHP9z//hZ8ScT1N8YBeTTiKlgM+DIFQvXsDAl4Tm6S7izek7CPR981wt vdEpUKhStt8Xlsh09d4RKruKsm0qo+QxHAqBl9gjdPSIwDDsFqdFHDO5NS5uwhFC mMlH0q6rNp5t+HbEXcoa75qbAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQUZI5HI0RB cbar4W19wDDonAbwUNwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQwOEJFL0EyQzgyN0VFNDEwQjExRUFCNjk1NEEyQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0MDhCRS9BMkM4MjdFRTQxMEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBS QmNiYXI0VzE5d0REb25BYndVTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAPlkMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBZyn0AwQBZ038 AwQCdM78MA0EAgACMAcDBQAkBZFAMA0GCSqGSIb3DQEBCwUAA4IBAQCVN3wP3hL4 1tZiy+UR4COsq+49aaAahsCVuC3GHJR/b79Wl8HTaQJZQZ3dKV4mle35r8JzDp2U o/aKocp0QjZSKe+iZAd7vjt4jQ+C+71vEWjTdMmkXb91loCZ2HS+n5wjmuKiAIOb hHY3g60JcDzZhpm58Cvl4jDzjNEayRy/QgkDG30HOjCNICF/r1k+ckh5ZtFDlcHo mklGZe1OfvKGtl2nw61PSgN3M47T5yzzToqCLyYrbctB1na06Kqs+btDcFPz+gd4 xEkpQTMITM0Xdj1x0Ozh3jlcb72ThvLtGZOpaBTjMBH6x279lRmmEjHxXxueb5Hj dM/bQZCM5Hv3 -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:40 2025 by rpki-client