This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer File: Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer (raw, json) Hash identifier: B+4nPa0vRav1GDhbndNJiaO4trgqsZkKhi/fbDmpF/I= Subject key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B83 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 21:44:00 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 148983 IP: 103.175.98.0/23 IP: 2400:a6a0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162691 (0x27b83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 21:44:00 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9192A7F, serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ec:90:52:1e:1a:9d:15:bb:5d:ba:36:bd:ed: 32:d9:12:b0:00:52:ce:fe:35:c9:01:85:84:fa:25: 4a:2c:34:0c:36:27:95:64:ea:03:44:78:d1:57:ae: 86:1a:24:79:84:01:52:9f:a0:9e:c3:8b:82:a3:0f: 30:f3:61:f0:10:f0:3c:60:4d:7b:90:9a:4c:1b:12: 5a:77:99:19:bb:12:24:bd:c7:3f:e5:30:8c:8d:43: 66:a3:ad:80:c6:6f:90:57:fa:2d:0f:af:46:53:d7: d0:ad:00:e0:a3:3a:84:f8:4e:2c:c0:c8:1d:84:5d: ed:22:b2:8f:99:f8:a3:c4:db:88:99:d8:ec:c9:be: f9:33:f7:6d:69:a0:20:29:a9:4d:0e:f5:d5:06:5d: c6:84:cf:5b:f4:a9:af:63:89:42:f3:fd:a5:1c:8e: 66:31:b2:77:8b:e3:c5:f6:e0:83:f6:f2:d0:dd:42: d9:1f:ab:41:d1:f8:4e:d7:de:71:ff:9d:97:3d:3d: f1:d1:49:aa:d2:f9:d4:53:35:fa:d1:9f:c7:fa:db: 35:f2:4e:c3:ad:16:bb:f7:f5:df:e4:e2:81:e6:f8: 1e:3f:ed:d5:85:e7:82:c2:9a:ff:2c:16:ad:f2:f5: 72:d9:4d:d4:91:7e:9b:b5:91:97:a5:2a:b8:d3:73: 7a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 148983 sbgp-ipAddrBlock: critical IPv4: 103.175.98.0/23 IPv6: 2400:a6a0::/32 Signature Algorithm: sha256WithRSAEncryption 6b:bf:65:f6:22:f6:05:a9:4f:ac:c3:74:de:72:0d:24:36:72: ce:89:df:f0:1d:5e:77:d1:a3:97:0e:7e:45:60:3d:74:96:53: 51:ae:9c:85:fd:7e:57:9e:26:92:03:d4:a6:dd:f0:db:5f:70: ba:7b:fa:af:46:37:15:68:ea:31:06:52:04:50:6a:76:62:f1: 29:d4:a5:5a:f5:10:6a:39:f8:24:6b:9d:a7:b1:68:7d:b8:33: 35:07:79:a6:71:43:68:64:8c:a7:11:d2:b1:fe:97:c8:56:34: b1:f8:1e:3f:94:31:4f:c1:17:a2:5f:c8:2e:64:5c:9c:1b:08: df:1f:61:5e:d9:fe:ea:f9:a8:ce:89:b3:34:54:8a:44:d5:fd: b9:eb:2a:e3:62:55:94:ac:aa:e0:1e:a7:6a:c7:2e:a3:84:f2: 58:89:49:ea:66:ec:03:71:4b:4f:0d:8e:f7:0f:99:c8:07:e9: 44:33:91:8c:ce:62:ae:1b:5f:33:c1:99:46:64:02:89:1b:70: 70:9f:f5:1d:e8:b9:bb:17:10:c7:84:53:08:65:7d:1e:cc:17: 5f:26:25:e8:72:d4:67:59:52:80:ba:ff:cd:28:c8:a6:aa:23: 42:18:b6:2e:0f:89:8d:5c:68:72:4b:5f:48:fe:d9:1f:fc:31: 5a:69:a5:2e -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnuDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzIxNDQwMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOTJBN0YxMTAvBgNVBAUTKDY3RjM3QzUwQ0EzM0NGNEY1MDg1NzhE M0FDQ0M2REFBNEM1MThDQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDl7JBSHhqdFbtduja97TLZErAAUs7+NckBhYT6JUosNAw2J5Vk6gNEeNFXroYa JHmEAVKfoJ7Di4KjDzDzYfAQ8DxgTXuQmkwbElp3mRm7EiS9xz/lMIyNQ2ajrYDG b5BX+i0Pr0ZT19CtAOCjOoT4TizAyB2EXe0iso+Z+KPE24iZ2OzJvvkz921poCAp qU0O9dUGXcaEz1v0qa9jiULz/aUcjmYxsneL48X24IP28tDdQtkfq0HR+E7X3nH/ nZc9PfHRSarS+dRTNfrRn8f62zXyTsOtFrv39d/k4oHm+B4/7dWF54LCmv8sFq3y 9XLZTdSRfpu1kZelKrjTc3oRAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUZ/N8UMoz z09QhXjTrMxtqkxRjLQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTkyQTdGLzc2MEUyMjhFMzdEQzExRUNCNTcyMEEyOEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5MkE3Ri83NjBFMjI4RTM3REMxMUVDQjU3MjBBMjhDNEY5QUUwMi9aX044VU1v enowOVFoWGpUck14dHFreFJqTFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkX3MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ69iMA0EAgAC MAcDBQAkAKagMA0GCSqGSIb3DQEBCwUAA4IBAQBrv2X2IvYFqU+sw3Tecg0kNnLO id/wHV530aOXDn5FYD10llNRrpyF/X5XniaSA9Sm3fDbX3C6e/qvRjcVaOoxBlIE UGp2YvEp1KVa9RBqOfgka52nsWh9uDM1B3mmcUNoZIynEdKx/pfIVjSx+B4/lDFP wReiX8guZFycGwjfH2Fe2f7q+ajOibM0VIpE1f256yrjYlWUrKrgHqdqxy6jhPJY iUnqZuwDcUtPDY73D5nIB+lEM5GMzmKuG18zwZlGZAKJG3Bwn/Ud6Lm7FxDHhFMI ZX0ezBdfJiXoctRnWVKAuv/NKMimqiNCGLYuD4mNXGhyS19I/tkf/DFaaaUu -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:22 2025 by rpki-client