This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer File: ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer (raw, json) Hash identifier: 9rICVUyL6kBuW9zBx4yRdRwAaGNWlQSx6bVjcknYdNU= Subject key identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02769F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft caRepository: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 20 Nov 2025 14:43:36 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 141426 IP: 103.159.2.0/24 IP: 2001:df5:7080::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161439 (0x2769f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 20 14:43:36 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9159298, serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:6e:c1:7e:1b:0f:4d:7f:8a:34:8d:d6:6c: d4:49:57:6e:78:7b:f3:90:4f:21:50:f1:4b:e7:3b: 3e:37:ad:d1:52:ad:71:05:da:e7:76:ff:e0:f9:69: c6:29:2e:4f:ad:d5:5d:18:d4:21:5e:75:c1:b8:3c: be:b0:e0:da:1d:44:80:83:13:b2:a2:37:5c:7e:d6: 61:0a:91:76:b9:00:e0:90:56:aa:fb:bd:15:75:43: 36:7d:c6:25:59:c3:2e:64:bc:60:86:71:9d:11:f6: 99:e9:2f:52:c8:4f:4d:11:2e:b5:9b:49:26:2e:e1: b9:16:b8:38:2b:7b:84:3f:ad:70:28:2f:16:07:cc: 4c:52:3e:3f:57:b1:ed:de:f6:2d:7a:30:37:f6:fc: 8e:fc:06:70:cb:24:f8:0a:a2:e2:69:b9:9b:64:3f: 06:49:93:e4:a5:5b:ce:1b:68:71:94:24:10:2f:e8: 0f:fb:8a:eb:59:a6:ba:53:f0:46:57:1f:a1:05:24: cc:17:2a:bd:18:46:22:65:31:34:57:d3:83:7b:04: cd:ea:e9:0c:f3:90:af:16:fa:df:1c:1a:be:21:2c: 98:a1:b7:e8:3b:79:67:59:99:16:91:7a:4c:b5:fc: 15:e8:60:d3:cb:41:ee:45:65:37:b3:a5:6e:c4:ee: e1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141426 sbgp-ipAddrBlock: critical IPv4: 103.159.2.0/24 IPv6: 2001:df5:7080::/48 Signature Algorithm: sha256WithRSAEncryption 79:2f:ca:b7:a1:12:ff:7b:d3:dd:52:14:ce:aa:33:33:4f:e0: 6b:87:57:61:82:0e:32:cf:8e:c3:c6:0d:00:92:f0:31:72:2a: 91:27:42:9b:6e:fa:54:1b:db:a4:6c:76:e8:c9:82:39:e3:f2: 5a:0d:df:ef:97:21:13:29:db:7f:a7:9d:8d:af:8f:61:a7:c1: 7a:aa:e4:7e:5b:44:2f:2c:e4:89:52:b6:4a:87:31:8e:55:c1: e3:47:26:db:73:d9:72:be:de:5f:ab:7e:78:80:55:26:f1:70: f1:96:88:01:c9:2d:2c:3d:83:15:aa:9a:2f:99:dd:0e:61:06: f5:54:e9:98:e0:4c:37:9f:78:a3:16:72:2a:37:37:f3:c4:0a: 47:4e:5c:cd:40:cd:b6:28:d0:ff:55:24:7b:fb:7f:68:9b:f9: ae:e4:f3:67:81:27:95:ec:d4:0d:62:b7:93:e3:82:2a:39:cb: c4:f7:0a:9e:51:60:e5:c2:b0:4b:3a:15:b2:02:19:1f:63:4f: 99:39:44:c2:3c:4f:4f:e9:b5:c7:f3:f0:90:80:40:0d:a9:62: 3f:b1:c5:2d:6a:46:ac:5c:fa:ee:67:1f:9b:ea:64:26:e0:6c: 0d:29:28:f7:a7:b2:25:70:e8:70:43:b3:ba:e9:ac:e4:aa:fd: bd:46:0f:d0 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnafMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMDE0NDMzNloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNTkyOTgxMTAvBgNVBAUTKDY0Q0UwNkExNkNBODkxMjM1NTZBQTlB RkQ3MjQ4REJFRjBFNjlBODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5EG7BfhsPTX+KNI3WbNRJV254e/OQTyFQ8UvnOz43rdFSrXEF2ud2/+D5acYp Lk+t1V0Y1CFedcG4PL6w4NodRICDE7KiN1x+1mEKkXa5AOCQVqr7vRV1QzZ9xiVZ wy5kvGCGcZ0R9pnpL1LIT00RLrWbSSYu4bkWuDgre4Q/rXAoLxYHzExSPj9Xse3e 9i16MDf2/I78BnDLJPgKouJpuZtkPwZJk+SlW84baHGUJBAv6A/7iutZprpT8EZX H6EFJMwXKr0YRiJlMTRX04N7BM3q6QzzkK8W+t8cGr4hLJiht+g7eWdZmRaReky1 /BXoYNPLQe5FZTezpW7E7uHVAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUZM4GoWyo kSNVaqmv1ySNvvDmmoYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTU5Mjk4LzYyMjI5RUYyQjYxRTExRUJCMEZDNEM3N0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE1OTI5OC82MjIyOUVGMkI2MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5 b2tTTlZhcW12MXlTTnZ2RG1tb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAihyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ58CMA8EAgAC MAkDBwAgAQ31cIAwDQYJKoZIhvcNAQELBQADggEBAHkvyrehEv97091SFM6qMzNP 4GuHV2GCDjLPjsPGDQCS8DFyKpEnQptu+lQb26RsdujJgjnj8loN3++XIRMp23+n nY2vj2GnwXqq5H5bRC8s5IlStkqHMY5VweNHJttz2XK+3l+rfniAVSbxcPGWiAHJ LSw9gxWqmi+Z3Q5hBvVU6ZjgTDefeKMWcio3N/PECkdOXM1AzbYo0P9VJHv7f2ib +a7k82eBJ5Xs1A1it5Pjgio5y8T3Cp5RYOXCsEs6FbICGR9jT5k5RMI8T0/ptcfz 8JCAQA2pYj+xxS1qRqxc+u5nH5vqZCbgbA0pKPensiVw6HBDs7rprOSq/b1GD9A= -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:43 2025 by rpki-client