This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer (raw, json) Hash identifier: BtTrigDBtS0HRKTKrK9xD5Amr+qw47RSyKzTjSmcvt8= Subject key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02882A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft caRepository: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 23 Jan 2026 13:38:38 +0000 Certificate not after: Thu 28 May 2026 00:00:00 +0000 Subordinate resources: AS: 131259 AS: 132910 IP: 36.255.124.0/22 IP: 43.249.12.0/22 IP: 103.23.76.0/22 IP: 103.209.120.0/22 IP: 2407:1a80::/32 IP: 2407:8500::/32 IP: 2407:eb00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165930 (0x2882a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 23 13:38:38 2026 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b9:b9:06:15:8a:ef:ed:3e:15:90:25:47:d3: fe:4d:38:96:cf:41:06:04:02:80:e1:e1:70:0f:9b: 35:a6:9e:99:f1:c4:6f:9d:f8:29:ef:85:a8:b0:3f: f5:8b:85:e7:36:42:e4:1f:00:c9:21:43:b7:32:df: 91:a0:5c:53:3a:ac:b8:e8:26:32:84:21:5b:c2:b1: 5a:cd:a8:74:bf:32:ca:d8:0c:d0:10:14:9c:37:ce: a0:8e:12:c4:12:b7:9c:24:5f:60:d0:d0:2c:97:45: 83:4c:93:62:40:75:49:b9:c9:fb:a8:1a:43:5e:c4: c3:01:c3:a2:92:55:66:8d:6e:4c:b1:43:30:bf:0f: 19:63:e2:09:2c:6a:06:8a:d1:28:24:93:1c:18:84: f2:a8:77:ac:6c:dd:89:9b:eb:7a:80:3b:1b:75:92: ef:5d:58:a0:b8:1f:fd:e5:3a:19:43:28:8d:d1:38: f4:15:b2:32:1f:0b:a7:67:da:39:70:b7:b2:38:dd: 32:54:0a:f9:8c:96:f1:7c:f0:7e:a9:07:0a:fc:d4: d8:2a:0f:23:7b:00:99:0b:9c:cc:ad:6e:08:2a:12: 67:af:aa:1f:1c:d0:27:93:bd:b7:c8:fc:49:69:08: de:28:8b:d1:6c:15:58:87:08:b8:b0:58:90:b8:ad: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 131259 132910 sbgp-ipAddrBlock: critical IPv4: 36.255.124.0/22 43.249.12.0/22 103.23.76.0/22 103.209.120.0/22 IPv6: 2407:1a80::/32 2407:8500::/32 2407:eb00::/32 Signature Algorithm: sha256WithRSAEncryption 00:8c:c9:c9:bd:48:57:ae:06:19:b6:54:8c:f7:74:94:34:f7: a0:ac:e8:01:b9:94:24:e1:59:a2:8b:e3:64:eb:a5:30:d0:19: a9:23:67:52:4a:24:f6:bd:35:71:8e:57:1c:1a:1e:a9:78:2d: 80:dc:cc:f3:d6:37:ae:d1:45:b0:1e:12:d7:05:6f:b1:57:2f: a0:4e:a9:7e:be:ea:53:35:e2:51:aa:a5:9e:4b:8e:0b:cf:b4: e2:36:4f:42:f8:b6:48:3e:5d:fd:c2:1b:3b:d6:94:e2:c2:2f: ab:28:7f:62:4f:30:92:57:4c:be:d7:9a:57:bf:66:a8:aa:3b: 0b:71:83:28:a9:33:0b:f9:5e:6c:a8:d8:a4:25:6f:86:de:c3: 0f:95:6e:32:03:1c:64:02:75:9f:6c:24:35:72:5c:c7:ef:31: 16:0d:06:a3:a5:cd:b1:a6:8e:12:ad:0e:cc:8d:60:37:d7:50: e0:c7:3a:c5:db:eb:d0:5f:f9:b4:99:53:59:d3:69:05:b3:9e: 5b:03:bf:26:ae:7c:a8:45:a5:9e:a0:b9:14:c6:04:66:9d:cb: 26:e9:34:ff:c1:3d:00:d7:51:bb:5b:e6:a9:09:75:84:f8:78: d0:3e:ca:f6:de:05:35:dd:f5:51:57:3e:20:c5:74:a5:96:fa: 46:8c:7f:70 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIDAogqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEyMzEzMzgzOFoXDTI2MDUyODAwMDAwMFowRjERMA8G A1UEAwwIQTkxOTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0 REYxN0E1NENFMzMzNEMyMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKubkGFYrv7T4VkCVH0/5NOJbPQQYEAoDh4XAPmzWmnpnxxG+d+CnvhaiwP/WL hec2QuQfAMkhQ7cy35GgXFM6rLjoJjKEIVvCsVrNqHS/MsrYDNAQFJw3zqCOEsQS t5wkX2DQ0CyXRYNMk2JAdUm5yfuoGkNexMMBw6KSVWaNbkyxQzC/Dxlj4gksagaK 0SgkkxwYhPKod6xs3Ymb63qAOxt1ku9dWKC4H/3lOhlDKI3ROPQVsjIfC6dn2jlw t7I43TJUCvmMlvF88H6pBwr81NgqDyN7AJkLnMytbggqEmevqh8c0CeTvbfI/Elp CN4oi9FsFViHCLiwWJC4rRx1AgMBAAGjggNDMIIDPzAdBgNVHQ4EFgQUZpGr7BpG /bzSYHxN8XpUzjM0whIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTk5RTNGL0Q4QzUxQUNBNUNGMzExRTk5MkZENjIyQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0Jw R19ielNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAgC7AgMCBy4wTgYIKwYBBQUHAQcBAf8EPzA9MB4EAgABMBgDBAIk/3wD BAIr+QwDBAJnF0wDBAJn0XgwGwQCAAIwFQMFACQHGoADBQAkB4UAAwUAJAfrADAN BgkqhkiG9w0BAQsFAAOCAQEAAIzJyb1IV64GGbZUjPd0lDT3oKzoAbmUJOFZoovj ZOulMNAZqSNnUkok9r01cY5XHBoeqXgtgNzM89Y3rtFFsB4S1wVvsVcvoE6pfr7q UzXiUaqlnkuOC8+04jZPQvi2SD5d/cIbO9aU4sIvqyh/Yk8wkldMvteaV79mqKo7 C3GDKKkzC/lebKjYpCVvht7DD5VuMgMcZAJ1n2wkNXJcx+8xFg0Go6XNsaaOEq0O zI1gN9dQ4Mc6xdvr0F/5tJlTWdNpBbOeWwO/Jq58qEWlnqC5FMYEZp3LJuk0/8E9 ANdRu1vmqQl1hPh40D7K9t4FNd31UVc+IMV0pZb6Rox/cA== -----END CERTIFICATE-----Generated at Sun Jan 25 01:19:49 2026 by rpki-client