This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer File: ZTiBnzv0kyyggsFGry_qy--HjLg.cer (raw, json) Hash identifier: WPqrN5yNXTK1hAvZmuUKuxa2ghICedZcf/+jcV4a5cQ= Subject key identifier: 65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02791A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft caRepository: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 28 Nov 2025 16:52:50 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 141438 IP: 203.145.32.0/23 IP: 2001:df3:2640::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162074 (0x2791a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 28 16:52:50 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A918134E, serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5e:ab:2f:a2:00:71:4e:ad:fb:f3:9e:f5:cf: 06:19:ea:5f:8d:ce:35:03:78:de:81:b5:b1:5a:a5: a6:88:70:69:2d:dd:e0:cd:05:db:04:fe:55:98:1e: fd:5f:c6:2a:5a:80:0c:1a:90:62:9b:c1:06:1c:6d: f6:14:a0:7e:3e:14:b3:65:03:8d:9d:27:7b:81:f7: 2f:14:ab:43:e2:57:48:d0:d8:e9:83:d8:ad:05:c5: a3:9e:9e:a8:48:5e:66:4b:ba:28:d4:6a:fc:da:b1: 9c:33:99:b5:84:2a:61:f1:0f:dc:55:ac:66:8a:28: 14:01:45:ed:d5:21:6e:4a:87:00:f7:49:ee:7a:8e: c3:cb:48:8d:44:6a:02:70:3a:f1:bd:58:f3:6d:36: 68:16:d4:51:97:58:11:04:d4:d4:18:25:42:45:56: 42:20:e0:14:f2:cb:53:a4:56:05:10:97:1b:90:bc: 49:88:e9:31:56:0b:2f:96:83:81:c5:26:ec:3b:a5: c3:93:4e:f9:1f:89:bb:9e:20:0a:fa:34:83:ef:77: c5:bb:99:1d:cf:80:51:de:0c:dc:ff:98:db:0d:89: 0f:8a:8e:bc:57:2e:be:7f:ab:5d:cb:dc:f7:39:09: a6:29:0d:e9:fb:35:9c:74:a6:ca:69:d5:59:16:84: 1a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141438 sbgp-ipAddrBlock: critical IPv4: 203.145.32.0/23 IPv6: 2001:df3:2640::/48 Signature Algorithm: sha256WithRSAEncryption 47:94:29:e5:0f:df:60:2c:21:99:85:67:e4:b0:94:7f:2f:b8: e1:c7:db:cf:23:e4:82:f6:30:3e:4d:89:02:46:b4:37:ea:6f: 23:65:fc:f4:78:36:f0:c5:cc:a8:7a:be:01:d1:cf:62:9b:a6: 4d:7d:d0:6b:7f:f1:cc:9b:d5:26:8c:27:5e:fc:7f:2d:41:34: a4:5a:f5:90:f7:ca:41:3b:b5:46:64:ba:6e:37:0f:6c:e1:14: eb:ba:47:6a:65:18:e0:70:31:29:6a:d0:fa:cc:76:3a:02:7f: c6:22:a5:ce:bb:d3:dd:ca:90:4b:27:5a:58:d6:f4:22:15:cf: ca:7d:a0:ad:cf:5e:f0:89:2a:24:e3:7d:e9:fb:cb:22:4f:be: 3f:cd:e5:72:7b:03:88:39:79:14:02:ae:b9:36:c3:72:4b:92: 00:05:3a:25:8e:e8:ad:e2:1a:53:56:87:0f:50:0f:a3:20:c5: cd:93:30:b6:ae:e8:64:a1:dd:cd:b2:8b:28:37:39:3a:31:11: c5:e5:de:b9:69:dd:f4:0f:b1:b9:3d:7e:f2:d7:2a:5d:58:95: ad:9e:70:b7:37:7a:da:1f:37:26:cb:e9:b9:52:96:99:91:c3: cd:df:48:ab:06:77:6f:4e:30:fa:12:45:1d:82:0f:66:5c:f8: a9:32:3a:a6 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAnkaMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyODE2NTI1MFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxODEzNEUxMTAvBgNVBAUTKDY1Mzg4MTlGM0JGNDkzMkNBMDgyQzE0 NkFGMkZFQUNCRUY4NzhDQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxXqsvogBxTq378571zwYZ6l+NzjUDeN6BtbFapaaIcGkt3eDNBdsE/lWYHv1f xipagAwakGKbwQYcbfYUoH4+FLNlA42dJ3uB9y8Uq0PiV0jQ2OmD2K0FxaOenqhI XmZLuijUavzasZwzmbWEKmHxD9xVrGaKKBQBRe3VIW5KhwD3Se56jsPLSI1EagJw OvG9WPNtNmgW1FGXWBEE1NQYJUJFVkIg4BTyy1OkVgUQlxuQvEmI6TFWCy+Wg4HF Juw7pcOTTvkfibueIAr6NIPvd8W7mR3PgFHeDNz/mNsNiQ+KjrxXLr5/q13L3Pc5 CaYpDen7NZx0pspp1VkWhBqbAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUZTiBnzv0 kyyggsFGry/qy++HjLgwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTgxMzRFLzJCRkYxNDEyQkI1RDExRUU4MzMwMjA3M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE4MTM0RS8yQkZGMTQxMkJCNUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2 MGt5eWdnc0ZHcnlfcXktLUhqTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAih+MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBy5EgMA8EAgAC MAkDBwAgAQ3zJkAwDQYJKoZIhvcNAQELBQADggEBAEeUKeUP32AsIZmFZ+SwlH8v uOHH288j5IL2MD5NiQJGtDfqbyNl/PR4NvDFzKh6vgHRz2Kbpk190Gt/8cyb1SaM J178fy1BNKRa9ZD3ykE7tUZkum43D2zhFOu6R2plGOBwMSlq0PrMdjoCf8Yipc67 093KkEsnWljW9CIVz8p9oK3PXvCJKiTjfen7yyJPvj/N5XJ7A4g5eRQCrrk2w3JL kgAFOiWO6K3iGlNWhw9QD6Mgxc2TMLau6GSh3c2yiyg3OToxEcXl3rlp3fQPsbk9 fvLXKl1Yla2ecLc3etofNybL6blSlpmRw83fSKsGd29OMPoSRR2CD2Zc+KkyOqY= -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:51 2025 by rpki-client