This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer (raw, json) Hash identifier: XgS42C+ITj+mCo4oFqD4xQEK95FUdEbQVrx/slC7P0U= Subject key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0285F8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 13 Jan 2026 14:20:08 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 134992 IP: 103.204.252.0/22 IP: 203.76.232.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165368 (0x285f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 13 14:20:08 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:69:59:b2:ce:6d:48:67:69:3f:4a:ca:5a:93: 1f:95:50:12:a6:22:54:5a:c3:99:f7:6a:cb:26:6f: c7:44:35:82:be:05:fa:8c:3c:d2:db:31:5e:c5:dd: da:db:dc:d3:49:82:25:05:6c:ac:d3:3e:f6:b5:31: fe:3a:a4:63:7f:4c:cb:8b:80:aa:e4:fb:c3:5c:3d: 0f:9d:66:1d:0c:38:08:db:0c:6f:24:87:7e:a6:04: fa:3c:8d:8e:1b:5c:e8:1f:50:67:b3:82:e2:9c:c9: 07:3f:7f:ca:b5:d3:36:66:1a:d6:07:00:45:32:0f: 84:31:08:29:25:28:08:f8:8f:1e:2e:ad:34:68:55: fa:0c:47:6b:42:e7:30:c1:a7:e8:df:a1:4e:33:7a: 24:06:88:6a:30:6d:f2:60:c7:45:0f:ba:20:6a:fd: bd:d2:01:df:a5:80:de:1e:11:f2:b0:75:58:80:85: e6:d3:32:e8:4c:4d:bb:02:a8:42:d2:fb:e4:b6:c4: a0:6c:63:7c:d1:62:bc:42:83:f3:48:5c:19:df:a7: ef:48:27:47:6c:26:79:da:fe:d4:9e:f8:6d:3f:17: d1:c2:10:7c:9e:97:c2:9d:4f:26:23:b1:f7:ed:7c: 11:2a:d3:a8:fe:c5:40:2b:e5:8e:ba:5a:6d:a1:32: 18:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134992 sbgp-ipAddrBlock: critical IPv4: 103.204.252.0/22 203.76.232.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:2a:7c:3d:29:6f:50:93:e8:3a:88:4e:a3:11:38:81:53:cb: d3:0e:70:ca:7c:04:d0:f1:3b:14:dc:d6:b1:81:d2:6b:9d:12: 28:bb:cf:92:fb:34:fb:09:75:25:26:11:7b:91:c5:e1:6e:be: a4:e8:c6:83:a7:ea:ba:06:69:6c:cf:85:6a:b6:cb:64:6a:be: dc:e5:cb:1f:80:69:44:72:d1:0a:b3:cb:63:5d:3d:3e:20:59: 27:69:9b:ce:62:d2:63:da:7e:49:82:02:ce:0c:d6:b1:cc:d8: 3d:4e:67:bf:c4:2f:4f:24:d2:ca:81:a2:34:2f:f1:22:79:cd: 61:2e:9c:2a:3b:90:ba:7f:6a:7e:03:7a:fb:a3:2b:39:a7:79: 58:6f:de:62:fa:45:13:0b:0d:55:f5:e6:e0:40:ee:4f:b3:01: d5:a9:ed:5f:d1:3d:be:f3:e6:21:61:34:da:48:9d:a5:f1:6f: 83:df:ff:cd:94:88:d7:24:ab:eb:d8:ae:97:40:7a:87:64:d8: 78:3f:6a:8d:66:65:af:da:46:0f:df:8a:8d:53:ee:9a:bd:77: 19:9c:3b:54:f5:8d:73:82:a8:0e:15:bc:28:a6:d9:07:fd:62: e4:5b:3d:29:39:5b:c7:c2:2c:1b:a1:02:1d:ea:47:9d:c8:65: 96:61:98:b0 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAoX4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExMzE0MjAwOFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRTc3RjMxMTAvBgNVBAUTKDY1MTE0QjE3NDNGRDYwREQ3NzI4REVF MUU4NUI0OUVFQTFCRjBEQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfaVmyzm1IZ2k/Sspakx+VUBKmIlRaw5n3assmb8dENYK+BfqMPNLbMV7F3drb 3NNJgiUFbKzTPva1Mf46pGN/TMuLgKrk+8NcPQ+dZh0MOAjbDG8kh36mBPo8jY4b XOgfUGezguKcyQc/f8q10zZmGtYHAEUyD4QxCCklKAj4jx4urTRoVfoMR2tC5zDB p+jfoU4zeiQGiGowbfJgx0UPuiBq/b3SAd+lgN4eEfKwdViAhebTMuhMTbsCqELS ++S2xKBsY3zRYrxCg/NIXBnfp+9IJ0dsJnna/tSe+G0/F9HCEHyel8KdTyYjsfft fBEq06j+xUAr5Y66Wm2hMhhVAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUZRFLF0P9 YN13KN7h6FtJ7qG/Da0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU3N0YzLzk0RUZDQzBDNUI5QzExRUY4Q0VBMzE0NUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFNzdGMy85NEVGQ0MwQzVCOUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQ OVlOMTNLTjdoNkZ0SjdxR19EYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAg9QMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZ8z8AwQCy0zo MA0GCSqGSIb3DQEBCwUAA4IBAQA9Knw9KW9Qk+g6iE6jETiBU8vTDnDKfATQ8TsU 3NaxgdJrnRIou8+S+zT7CXUlJhF7kcXhbr6k6MaDp+q6Bmlsz4Vqtstkar7c5csf gGlEctEKs8tjXT0+IFknaZvOYtJj2n5JggLODNaxzNg9Tme/xC9PJNLKgaI0L/Ei ec1hLpwqO5C6f2p+A3r7oys5p3lYb95i+kUTCw1V9ebgQO5PswHVqe1f0T2+8+Yh YTTaSJ2l8W+D3//NlIjXJKvr2K6XQHqHZNh4P2qNZmWv2kYP34qNU+6avXcZnDtU 9Y1zgqgOFbwoptkH/WLkWz0pOVvHwiwboQId6kedyGWWYZiw -----END CERTIFICATE-----Generated at Sun Jan 25 01:14:33 2026 by rpki-client