This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer File: Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer (raw, json) Hash identifier: et6P93PtnH60Ee8OeKAGXySpYoSHGgzy2G4zJ8s8C4Q= Subject key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0272DF Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft caRepository: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 04 Nov 2025 14:30:19 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 9940 AS: 23966 AS: 45779 AS: 132788 AS: 133502 AS: 135342 AS: 136046 IP: 119.30.64.0/18 IP: 119.73.0.0/17 IP: 202.61.32.0/19 IP: 202.147.160.0/19 IP: 202.154.224.0/19 IP: 203.223.160.0/20 IP: 210.2.128.0/18 IP: 2401::/31 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160479 (0x272df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 4 14:30:19 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:72:1b:d7:9e:30:38:d6:02:fd:54:61:24: c3:14:5a:a9:6f:2f:46:9c:30:29:32:1b:1a:81:89: c9:c4:83:95:d9:46:d5:d6:ea:bb:27:45:0a:c5:1c: 7d:2e:1c:8e:e6:db:e3:b3:8b:b4:36:9f:29:3a:b9: 5c:59:ba:db:6b:d6:ae:bb:cb:b1:11:14:2f:f8:c8: 1c:a4:45:9d:13:48:db:f7:3d:25:b2:5d:6f:5c:50: 00:5b:ac:7e:c5:c8:aa:3c:ef:9b:52:d0:d2:ae:1e: 41:2a:7b:3a:e6:8f:ec:2d:2b:5d:04:5b:ae:92:32: b8:77:35:8e:fc:2e:2d:78:c6:50:57:dc:4d:fa:ce: 23:07:2b:fb:4e:99:75:cf:ff:7c:33:9e:ba:0f:ce: 2e:9e:42:5c:32:c6:ec:df:c6:ca:fe:19:b2:69:ef: 05:50:e9:3e:b2:e1:6a:02:2b:d8:41:e6:a0:f5:8e: c4:15:fb:a1:45:d6:39:f6:2d:cc:4d:f0:df:08:8f: 47:57:70:02:0c:1d:38:f7:06:db:d7:de:e4:96:c5: 6c:52:8e:b4:eb:59:b7:30:67:1a:45:7a:a5:fa:95: b3:8c:ee:1a:83:a3:1c:ad:ef:6d:33:e3:0b:29:b7: 92:d1:0d:8b:86:ef:c5:78:43:6b:96:11:5f:91:73: cf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9940 23966 45779 132788 133502 135342 136046 sbgp-ipAddrBlock: critical IPv4: 119.30.64.0/18 119.73.0.0/17 202.61.32.0/19 202.147.160.0/19 202.154.224.0/19 203.223.160.0/20 210.2.128.0/18 IPv6: 2401::/31 Signature Algorithm: sha256WithRSAEncryption 49:09:68:fc:5c:22:da:67:1e:a3:5e:56:d0:3d:57:e9:0c:c3: 5b:22:bc:57:b2:d3:4e:e1:e8:aa:fb:1c:18:7f:8a:76:84:0d: 86:bc:63:f6:15:b0:1b:58:aa:d9:60:78:ef:57:88:e9:13:78: 1e:d5:93:50:46:b4:f9:ac:62:76:0a:79:cd:39:51:d4:7d:f7: be:1f:02:91:73:94:1a:27:bd:1a:90:a8:8f:c9:1d:cc:be:85: c3:f7:5d:94:ae:45:22:d3:49:5b:71:ca:3e:4d:fb:fb:bf:2c: 13:a4:92:c5:da:b6:06:9b:4c:2d:26:ef:03:27:be:cd:e0:ee: 8c:01:1e:02:af:82:ad:e1:5d:e7:4d:b9:88:1a:c2:25:0e:aa: f0:d0:13:c1:eb:a0:64:6b:00:09:4d:da:41:00:33:c0:2f:34: 74:62:ba:a3:44:c2:a0:da:ff:e8:8e:ca:82:2c:76:a9:e4:2d: 26:77:a7:a2:4c:1c:f9:ca:18:87:b2:32:de:82:36:a0:8f:24: 82:35:7f:1d:b8:71:97:61:26:df:13:fd:ca:cd:a3:00:ff:67: 0d:10:b8:af:a5:40:ef:ae:aa:3d:ea:50:24:39:30:c7:aa:7e: 69:ec:e1:14:a6:85:62:0a:1f:a1:40:c5:88:c5:c9:22:ae:f7: ea:7e:59:c7 -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgIDAnLfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNDE0MzAxOVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAx NkEyRDVCNUI4NkE5QjNGRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9NnIb154wONYC/VRhJMMUWqlvL0acMCkyGxqBicnEg5XZRtXW6rsnRQrFHH0u HI7m2+Ozi7Q2nyk6uVxZuttr1q67y7ERFC/4yBykRZ0TSNv3PSWyXW9cUABbrH7F yKo875tS0NKuHkEqezrmj+wtK10EW66SMrh3NY78Li14xlBX3E36ziMHK/tOmXXP /3wznroPzi6eQlwyxuzfxsr+GbJp7wVQ6T6y4WoCK9hB5qD1jsQV+6FF1jn2LcxN 8N8Ij0dXcAIMHTj3BtvX3uSWxWxSjrTrWbcwZxpFeqX6lbOM7hqDoxyt720z4wsp t5LRDYuG78V4Q2uWEV+Rc8+TAgMBAAGjggNeMIIDWjAdBgNVHQ4EFgQUZwl+SS9z 1tvTH6AWotW1uGqbP9gwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTY1NTY4L0JEMUE5NUQyMUQ4NzExRTI5QkUzRTZERjA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2NTU2OC9CRDFBOTVEMjFEODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5 ejF0dlRINkFXb3RXMXVHcWJQOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQgBAf8EJzAl oCMwIQICJtQCAl2eAgMAstMCAwIGtAIDAgl+AgMCEK4CAwITbjBSBggrBgEFBQcB BwEB/wRDMEEwMAQCAAEwKgMEBnceQAMEB3dJAAMEBco9IAMEBcqToAMEBcqa4AME BMvfoAMEBtICgDANBAIAAjAHAwUBJAEAADANBgkqhkiG9w0BAQsFAAOCAQEASQlo /Fwi2mceo15W0D1X6QzDWyK8V7LTTuHoqvscGH+KdoQNhrxj9hWwG1iq2WB471eI 6RN4HtWTUEa0+axidgp5zTlR1H33vh8CkXOUGie9GpCoj8kdzL6Fw/ddlK5FItNJ W3HKPk37+78sE6SSxdq2BptMLSbvAye+zeDujAEeAq+CreFd5025iBrCJQ6q8NAT weugZGsACU3aQQAzwC80dGK6o0TCoNr/6I7Kgix2qeQtJnenokwc+coYh7Iy3oI2 oI8kgjV/Hbhxl2Em3xP9ys2jAP9nDRC4r6VA766qPepQJDkwx6p+aezhFKaFYgof oUDFiMXJIq736n5Zxw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:05 2025 by rpki-client