This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer (raw, json) Hash identifier: KYuwwx3UmBA3tZKNlpOIOX0v4MtOWhmQJ0ch5vJD5GY= Subject key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02782D Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 26 Nov 2025 03:27:20 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 9301 AS: 10083 AS: 18405 AS: 38276 AS: 55519 IP: 122.200.160.0/20 IP: 203.4.162.0/24 IP: 203.5.127.0/24 IP: 203.31.57.0/24 IP: 203.31.101.0/24 IP: 203.33.71.0/24 IP: 203.55.18.0/24 IP: 203.57.78.0/23 IP: 2402:5600::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161837 (0x2782d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 26 03:27:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:9b:97:43:ed:7c:69:ed:89:05:19:39:5a: 84:4a:1f:ef:59:42:79:93:c3:93:93:05:43:5a:45: 25:f7:cc:55:f3:a9:96:02:8e:f1:80:a9:ab:60:0c: 48:80:9c:63:83:08:da:72:93:d3:39:7b:78:f5:26: f7:6f:2e:80:f1:65:9d:ff:18:91:9e:37:84:0f:ce: 45:53:df:75:f2:27:56:7f:45:66:62:33:ad:d4:ac: 9c:b2:be:55:4c:72:77:52:b4:06:08:79:8c:97:36: 3d:a9:21:ad:2e:83:2c:0b:cc:14:b2:6e:45:09:de: a2:68:fe:b0:b0:73:0d:4a:d8:70:19:84:c5:b1:27: 72:86:0b:81:23:e3:21:9d:35:3e:05:18:75:cb:d7: 12:71:13:79:0b:a1:a3:2e:44:cd:eb:0b:2f:8c:20: 92:7f:8a:1d:96:10:67:4e:67:24:75:38:7a:a1:57: 3f:00:75:f3:08:86:4b:72:99:4c:11:71:dc:63:ee: ea:79:bd:bb:c9:71:cb:15:99:32:83:1f:a7:12:1a: d0:2c:91:8e:03:03:ea:a2:2c:54:7f:3e:c8:a3:08: 5a:79:0c:bf:8a:7a:30:b7:6e:41:47:df:cc:9b:5d: 31:97:05:89:58:fd:84:c1:29:30:92:80:ba:94:d2: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9301 10083 18405 38276 55519 sbgp-ipAddrBlock: critical IPv4: 122.200.160.0/20 203.4.162.0/24 203.5.127.0/24 203.31.57.0/24 203.31.101.0/24 203.33.71.0/24 203.55.18.0/24 203.57.78.0/23 IPv6: 2402:5600::/32 Signature Algorithm: sha256WithRSAEncryption d3:20:22:92:76:66:2b:b8:94:93:e9:29:b7:bd:b2:a6:3e:af: 47:2f:d2:de:55:ec:95:2b:e0:fa:4c:b3:17:46:a0:b6:36:10: 11:a8:25:b6:e9:17:38:04:4b:54:4b:a3:a9:7f:10:eb:45:cf: c7:48:2e:bd:ed:31:6d:d0:7d:6b:e1:69:e2:4e:fa:a2:62:24: e6:b1:a7:d2:0c:2f:d9:44:2a:0a:50:01:a2:44:5e:2e:2f:fe: 6e:19:63:c0:a0:ed:dc:e3:7e:44:c7:2b:c5:48:70:ef:00:58: b6:41:4c:53:c7:74:c8:93:e5:e0:3e:6d:16:5f:c2:82:1f:ff: f3:aa:3d:57:ee:e2:87:4d:36:55:d2:91:3d:17:75:7a:1d:a4: 95:b6:a0:3d:70:e0:d6:1f:57:f9:03:6c:39:f8:9b:dc:b1:e9: 19:ab:82:9e:8c:89:a9:0f:d1:c9:06:77:77:a5:56:61:98:d3: ba:78:3c:79:95:6a:8d:b3:b1:fe:28:57:80:b1:13:6a:c9:5b: ef:13:b7:a1:2d:17:e5:60:c8:08:00:73:8c:0d:65:f8:5d:47: cd:b6:6a:19:50:ef:69:20:34:20:d9:cf:f3:cc:ef:8b:63:2a: e9:b2:b4:94:c7:91:e7:cc:6d:7c:64:b3:c5:6f:99:5a:05:df: 8a:4e:b9:e7 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIDAngtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNjAzMjcyMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4 MENGNDg4OEY3RDQ2MDU4RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvm5uXQ+18ae2JBRk5WoRKH+9ZQnmTw5OTBUNaRSX3zFXzqZYCjvGAqatgDEiA nGODCNpyk9M5e3j1JvdvLoDxZZ3/GJGeN4QPzkVT33XyJ1Z/RWZiM63UrJyyvlVM cndStAYIeYyXNj2pIa0ugywLzBSybkUJ3qJo/rCwcw1K2HAZhMWxJ3KGC4Ej4yGd NT4FGHXL1xJxE3kLoaMuRM3rCy+MIJJ/ih2WEGdOZyR1OHqhVz8AdfMIhktymUwR cdxj7up5vbvJccsVmTKDH6cSGtAskY4DA+qiLFR/PsijCFp5DL+KejC3bkFH38yb XTGXBYlY/YTBKTCSgLqU0v4VAgMBAAGjggNZMIIDVTAdBgNVHQ4EFgQUZgJZdrdf XCn0LB2Az0iI99RgWNcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY2RkMzL0ZDOTA3ODAyMUQ5MjExRTJCM0JDMkNGNjA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGNkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJk ZlhDbjBMQjJBejBpSTk5UmdXTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQgBAf8EHDAa oBgwFgICJFUCAidjAgJH5QIDAJWEAgMA2N8wWAYIKwYBBQUHAQcBAf8ESTBHMDYE AgABMDADBAR6yKADBADLBKIDBADLBX8DBADLHzkDBADLH2UDBADLIUcDBADLNxID BAHLOU4wDQQCAAIwBwMFACQCVgAwDQYJKoZIhvcNAQELBQADggEBANMgIpJ2Ziu4 lJPpKbe9sqY+r0cv0t5V7JUr4PpMsxdGoLY2EBGoJbbpFzgES1RLo6l/EOtFz8dI Lr3tMW3QfWvhaeJO+qJiJOaxp9IML9lEKgpQAaJEXi4v/m4ZY8Cg7dzjfkTHK8VI cO8AWLZBTFPHdMiT5eA+bRZfwoIf//OqPVfu4odNNlXSkT0XdXodpJW2oD1w4NYf V/kDbDn4m9yx6Rmrgp6MiakP0ckGd3elVmGY07p4PHmVao2zsf4oV4CxE2rJW+8T t6EtF+VgyAgAc4wNZfhdR822ahlQ72kgNCDZz/PM74tjKumytJTHkefMbXxks8Vv mVoF34pOuec= -----END CERTIFICATE-----Generated at Sat Dec 6 14:20:47 2025 by rpki-client