This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer (raw, json) Hash identifier: X/5bbFnbo/CjpzOkb7LBOuxR4BhWvda14m6u/YbB2FI= Subject key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02815F Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 03:10:22 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 150446 IP: 103.42.62.0/23 IP: 2401:ede0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164191 (0x2815f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 29 03:10:22 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:33:a5:ec:fd:e0:66:f3:16:e8:ce:76:4b:12: 21:b1:cf:c3:27:a1:90:52:37:fb:93:c5:98:08:83: c0:84:1e:3c:82:c8:fd:60:eb:63:0d:fa:b3:82:41: 4c:5d:b5:07:31:4c:5a:d7:b1:71:9a:be:34:fe:fb: 75:31:6b:8c:02:9d:96:1b:ca:30:e4:e4:d8:ca:bb: 12:a0:cf:1d:8b:65:a3:ea:99:fe:f5:6f:56:17:bf: 4f:23:44:38:65:4e:06:dc:2a:8b:8d:30:f0:e5:4e: 09:9f:d0:eb:f0:4e:7a:15:e8:f8:de:e6:9e:ea:e6: 60:96:8d:94:27:08:8b:55:a2:e1:f9:7a:36:a9:3c: b2:63:a0:c0:9e:49:7e:b6:81:8e:ce:a4:ab:cc:80: 0c:af:80:3b:44:6d:0b:14:f6:a4:6f:14:58:97:43: ef:ce:c1:cb:07:9f:0e:64:b2:68:d7:a1:22:c4:64: 1f:ca:21:70:8e:a4:23:52:16:4c:d4:e5:17:cd:20: bb:b5:5b:2b:ed:53:d8:2e:6b:81:49:e4:5c:38:2d: c3:d2:86:ba:f2:f9:c9:8e:02:96:07:89:80:81:55: 2b:74:d1:6a:40:26:15:30:35:e0:d6:26:f3:a5:3a: bf:0d:af:9c:93:e9:d2:33:ca:98:4e:06:96:b7:21: 56:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 150446 sbgp-ipAddrBlock: critical IPv4: 103.42.62.0/23 IPv6: 2401:ede0::/32 Signature Algorithm: sha256WithRSAEncryption 30:ad:57:95:cb:c7:f8:0d:72:27:0c:09:be:6c:35:bf:2c:88: b1:ac:05:04:0f:cd:70:68:2e:a9:f9:04:38:26:38:b7:63:64: fc:7d:28:e4:21:68:47:0f:3e:88:a3:a5:20:49:15:b4:42:31: e5:84:aa:e9:67:9a:e0:02:cc:70:47:03:29:78:5c:32:db:94: df:ef:af:d1:71:bd:76:35:b2:4f:2a:f7:46:fd:6d:64:98:0d: f0:33:08:6f:19:bd:9d:35:a6:f4:77:e6:c6:d0:6c:21:26:21: 30:46:88:11:70:76:cc:c0:af:d1:8d:f0:61:7e:b7:91:a7:99: b9:3f:64:60:d4:93:0f:47:5e:3a:50:89:84:aa:1f:3c:72:40: b2:52:59:f1:38:76:97:09:c9:cd:15:08:98:e7:02:7f:f4:8f: 9c:c2:b4:a4:3a:04:cc:b4:2c:e4:20:90:3d:98:6d:b0:00:87: c1:3c:dc:43:bd:f5:e2:3f:ba:72:b5:25:ba:be:36:e0:07:82: ed:7a:f5:ae:19:ed:48:dd:84:61:2a:92:91:d7:5a:95:64:41: 2a:6b:23:36:b3:c1:1a:04:62:8c:57:5e:89:8c:a0:45:0c:bb: d0:35:36:02:97:e5:5e:d3:86:59:d5:a8:04:59:6d:f1:a1:b4: 6a:18:45:2e -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoFfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyOTAzMTAyMloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxQzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVC MjA3MDQ3MEExMjYyRTM0M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOM6Xs/eBm8xboznZLEiGxz8MnoZBSN/uTxZgIg8CEHjyCyP1g62MN+rOCQUxd tQcxTFrXsXGavjT++3Uxa4wCnZYbyjDk5NjKuxKgzx2LZaPqmf71b1YXv08jRDhl TgbcKouNMPDlTgmf0OvwTnoV6Pje5p7q5mCWjZQnCItVouH5ejapPLJjoMCeSX62 gY7OpKvMgAyvgDtEbQsU9qRvFFiXQ+/OwcsHnw5ksmjXoSLEZB/KIXCOpCNSFkzU 5RfNILu1WyvtU9gua4FJ5Fw4LcPShrry+cmOApYHiYCBVSt00WpAJhUwNeDWJvOl Or8Nr5yT6dIzyphOBpa3IVYrAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUZYCRC1X6 5f9g9x6yBwRwoSYuNDswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUM0RTYyLzcwMkEwMjhDQzk5RjExRUVBODE1OEU3OUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDNEU2Mi83MDJBMDI4Q0M5OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFY NjVmOWc5eDZ5QndSd29TWXVORHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkuuMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZyo+MA0EAgAC MAcDBQAkAe3gMA0GCSqGSIb3DQEBCwUAA4IBAQAwrVeVy8f4DXInDAm+bDW/LIix rAUED81waC6p+QQ4Jji3Y2T8fSjkIWhHDz6Io6UgSRW0QjHlhKrpZ5rgAsxwRwMp eFwy25Tf76/Rcb12NbJPKvdG/W1kmA3wMwhvGb2dNab0d+bG0GwhJiEwRogRcHbM wK/RjfBhfreRp5m5P2Rg1JMPR146UImEqh88ckCyUlnxOHaXCcnNFQiY5wJ/9I+c wrSkOgTMtCzkIJA9mG2wAIfBPNxDvfXiP7pytSW6vjbgB4LtevWuGe1I3YRhKpKR 11qVZEEqayM2s8EaBGKMV16JjKBFDLvQNTYCl+Ve04ZZ1agEWW3xobRqGEUu -----END CERTIFICATE-----Generated at Sun Jan 25 02:53:15 2026 by rpki-client