This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer File: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer (raw, json) Hash identifier: HqRnH+QtC6zgtYX0Nxa4m5CRiQSE7BhfxuC0BCALI7s= Subject key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 026F78 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft caRepository: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 27 Oct 2025 14:54:53 +0000 Certificate not after: Thu 30 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 123.253.4.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159608 (0x26f78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Oct 27 14:54:53 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:71:75:2b:22:a6:bc:34:2a:1d:b4:fa:65: fb:11:bf:ff:31:0e:16:9f:e6:e6:94:18:3f:e3:77: 98:dd:8c:34:aa:33:2b:4c:9b:53:56:ff:36:86:0c: 34:9f:2f:e2:8b:e6:b6:f1:55:99:d5:bd:65:30:f1: 13:cf:d7:d6:2f:e6:fc:8f:fb:4f:2b:5a:35:96:9d: 62:21:ed:59:dd:60:b4:d8:78:cf:9d:8f:66:6b:42: 46:77:1c:51:95:55:87:86:58:b0:2a:1f:a6:bf:db: 14:d3:9a:3c:61:c1:2c:dd:fe:75:1b:f3:c4:d3:61: 8a:57:e6:df:36:7f:69:76:cb:09:60:60:30:e3:14: d6:e0:03:e6:59:65:57:ec:60:d6:a7:9c:4d:40:7a: 4c:21:b9:c0:42:c4:4d:83:df:c4:6f:66:a6:5f:12: f6:e5:8d:56:1d:68:9b:2a:11:15:90:1f:7a:ad:85: 1b:93:4b:c5:92:3a:84:a3:eb:11:34:29:8a:03:b4: 63:56:3c:52:cf:81:8c:a5:81:ea:88:85:1e:e2:af: ee:27:54:b4:a0:b0:2c:49:b9:2f:9f:4b:8d:b6:44: 57:1c:d3:3b:6d:4a:a3:89:33:0d:2c:ad:bc:ba:bc: ba:13:8d:96:44:d1:5f:71:d0:39:42:44:55:ea:ee: a9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.253.4.0/22 Signature Algorithm: sha256WithRSAEncryption cd:73:7d:7f:17:65:72:82:38:72:b8:53:3d:0f:19:85:1e:5a: 1a:f0:84:f6:32:ab:ce:1b:97:89:af:fe:d9:52:cc:68:2b:e2: 75:f5:2f:a5:96:fc:38:00:75:e0:74:f8:68:b5:0f:6a:0c:85: 5a:4a:10:f9:70:28:d2:1b:f3:6c:97:05:92:00:34:8b:a7:46: f7:21:d7:34:af:ef:5f:1c:b7:82:a5:aa:e7:33:73:27:af:ec: b7:87:5c:13:4a:5b:90:d6:d8:26:08:4f:bc:b6:49:c9:4f:41: 2e:b2:99:58:fa:09:8f:86:ac:01:f2:39:7c:2f:00:c1:56:b8: 81:b7:97:29:19:af:3f:52:8b:f8:e1:6b:42:13:53:f4:22:e1: fe:55:9f:86:90:db:c9:d7:48:2d:13:01:49:c5:0d:60:d1:cc: e2:51:0f:3d:0a:fe:38:1a:b9:98:f4:44:4c:08:3f:18:04:6a: 99:85:72:96:74:16:7d:32:24:61:f5:0c:d1:81:2e:e6:ca:24: 4d:81:55:81:92:57:be:d5:8e:1d:f3:f8:94:c3:aa:d7:d5:f6: f5:f8:97:34:8d:d7:65:e3:d3:3c:2b:08:a1:05:e2:01:01:03: b5:f4:e4:d3:c6:9a:63:c9:2f:98:57:4d:af:2d:11:92:8b:69: f8:ce:48:5b -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAm94MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTAyNzE0NTQ1M1oXDTI2MDczMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxNkNBRTYxMTAvBgNVBAUTKDY0Q0E1NDI2QUM3QTU1MEJEQTEwNTNB MDEyODMxNDRFMkRDRDJCRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAMHF1KyKmvDQqHbT6ZfsRv/8xDhaf5uaUGD/jd5jdjDSqMytMm1NW/zaGDDSf L+KL5rbxVZnVvWUw8RPP19Yv5vyP+08rWjWWnWIh7VndYLTYeM+dj2ZrQkZ3HFGV VYeGWLAqH6a/2xTTmjxhwSzd/nUb88TTYYpX5t82f2l2ywlgYDDjFNbgA+ZZZVfs YNannE1AekwhucBCxE2D38RvZqZfEvbljVYdaJsqERWQH3qthRuTS8WSOoSj6xE0 KYoDtGNWPFLPgYylgeqIhR7ir+4nVLSgsCxJuS+fS422RFcc0zttSqOJMw0srby6 vLoTjZZE0V9x0DlCRFXq7qndAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUZMpUJqx6 VQvaEFOgEoMUTi3NK9cwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZDQUU2LzY1RDA0NEM0OTQxODExRUE5NDBGQjUzMEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2Q0FFNi82NUQwNDRDNDk0MTgxMUVBOTQwRkI1MzBDNEY5QUUwMi9aTXBVSnF4 NlZRdmFFRk9nRW9NVVRpM05LOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAJ7/QQwDQYJKoZIhvcNAQELBQADggEBAM1zfX8XZXKCOHK4Uz0P GYUeWhrwhPYyq84bl4mv/tlSzGgr4nX1L6WW/DgAdeB0+Gi1D2oMhVpKEPlwKNIb 82yXBZIANIunRvch1zSv718ct4Klquczcyev7LeHXBNKW5DW2CYIT7y2SclPQS6y mVj6CY+GrAHyOXwvAMFWuIG3lykZrz9Si/jha0ITU/Qi4f5Vn4aQ28nXSC0TAUnF DWDRzOJRDz0K/jgauZj0REwIPxgEapmFcpZ0Fn0yJGH1DNGBLubKJE2BVYGSV77V jh3z+JTDqtfV9vX4lzSN12Xj0zwrCKEF4gEBA7X05NPGmmPJL5hXTa8tEZKLafjO SFs= -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:17 2025 by rpki-client