This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer File: szF8Z90Vsor6OYAEwZ0deLG_3oY.cer (raw, json) Hash identifier: nABQHrXEFdp/7MpjNYY5wMX9uSs2hUSlWyAZS8lb1i8= Subject key identifier: B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0282D9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft caRepository: rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:45:07 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 141218 IP: 2001:df6:8840::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164569 (0x282d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 1 08:45:07 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A91736F5, serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:fe:9d:21:42:63:d9:4c:8b:5c:dd:00:2b: 60:e0:86:0f:b1:10:98:fb:e8:55:df:65:a3:d1:73: 14:02:27:27:d8:66:3d:31:73:1c:87:9d:6b:3d:70: a5:3d:84:4d:6d:de:6e:07:7a:d0:f6:dc:43:d5:d8: 41:14:75:39:4d:03:d6:d6:ed:0e:2c:96:8c:23:83: 91:6b:84:8d:d8:41:31:aa:fd:cd:90:49:fc:0e:ac: 5d:95:4d:cc:b6:d1:a2:16:13:e0:a3:c1:32:9c:a5: e7:18:35:79:c0:4f:0c:ce:75:b1:c4:87:04:5e:f7: 9c:ec:27:94:ab:d3:3e:91:cb:88:f0:0e:05:01:4d: 15:50:c6:1f:78:e3:58:5f:28:18:06:1d:36:33:a3: 80:f2:85:3a:f7:f0:e2:e9:e8:d9:b8:73:41:93:f5: fa:2f:aa:29:b8:a8:fd:4f:cd:2e:92:62:72:8e:62: eb:d7:a3:37:48:5e:43:76:4e:83:84:e5:77:a3:f2: a4:99:01:44:eb:9e:fc:8a:54:a2:8f:88:db:ee:0e: 62:07:1b:fa:12:39:f3:e4:84:5c:28:49:93:fe:78: 8c:e2:b6:4b:3b:50:fe:9e:e4:cd:f5:9e:ed:bf:5c: ce:8c:4a:36:d5:4d:6b:06:ac:c8:3e:84:92:01:44: 5a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 141218 sbgp-ipAddrBlock: critical IPv6: 2001:df6:8840::/48 Signature Algorithm: sha256WithRSAEncryption 26:39:b3:f1:f4:cb:14:46:89:d0:d4:5c:15:ce:0a:fc:63:a7: 51:a0:da:b2:8c:06:b8:99:22:fd:76:42:71:99:db:7c:59:b7: 7c:27:f0:f7:34:fa:74:20:ad:0c:35:fb:a7:4e:1a:99:a0:a6: 96:49:17:a6:8b:99:9d:b2:4b:2c:89:cd:1c:af:ec:dd:d2:19: 67:9e:a8:85:37:21:36:96:0d:3f:d6:b6:cd:f8:8f:df:aa:79: e8:a1:06:ac:e6:be:30:76:09:0f:34:70:a2:56:16:0f:7e:51: 59:01:96:bb:80:5a:71:93:c7:e8:f7:b7:8e:75:e1:7b:e2:18: 05:3f:ed:ae:8e:14:27:f7:4f:10:d1:4d:56:92:fd:b2:bc:d7: 1b:f6:c1:83:6a:ba:74:99:67:f8:09:95:09:16:26:f8:54:d2: 21:4b:43:c4:27:f1:8f:8b:aa:1e:3f:ee:c2:d7:27:c4:b9:97: 3c:cc:19:d3:2a:e1:a9:6a:e0:83:a6:e4:40:28:9c:d4:9d:71: ba:89:42:d5:ef:ba:41:d3:4e:2c:44:f3:be:94:e5:af:4b:ae: 7a:22:5a:7c:e8:e0:fe:3c:3a:63:01:65:ef:d0:da:14:53:99: 11:9f:f2:0c:3b:78:f1:aa:6b:cc:e5:f7:79:63:9a:26:7f:94: 86:05:ac:cf -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAoLZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMTA4NDUwN1oXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxNzM2RjUxMTAvBgNVBAUTKEIzMzE3QzY3REQxNUIyOEFGQTM5ODAw NEMxOUQxRDc4QjFCRkRFODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnWv6dIUJj2UyLXN0AK2Dghg+xEJj76FXfZaPRcxQCJyfYZj0xcxyHnWs9cKU9 hE1t3m4HetD23EPV2EEUdTlNA9bW7Q4slowjg5FrhI3YQTGq/c2QSfwOrF2VTcy2 0aIWE+CjwTKcpecYNXnATwzOdbHEhwRe95zsJ5Sr0z6Ry4jwDgUBTRVQxh9441hf KBgGHTYzo4DyhTr38OLp6Nm4c0GT9fovqim4qP1PzS6SYnKOYuvXozdIXkN2ToOE 5Xej8qSZAUTrnvyKVKKPiNvuDmIHG/oSOfPkhFwoSZP+eIzitks7UP6e5M31nu2/ XM6MSjbVTWsGrMg+hJIBRFp7AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUszF8Z90V sor6OYAEwZ0deLG/3oYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTczNkY1LzJBNTBCNjQ4RTZFRTExRjBBRDA5NTc5MjYzNkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3MzZGNS8yQTUwQjY0OEU2RUUxMUYwQUQwOTU3OTI2MzZGNTZCQy9zekY4Wjkw VnNvcjZPWUFFd1owZGVMR18zb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAieiMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9ohAMA0G CSqGSIb3DQEBCwUAA4IBAQAmObPx9MsURonQ1FwVzgr8Y6dRoNqyjAa4mSL9dkJx mdt8Wbd8J/D3NPp0IK0MNfunThqZoKaWSRemi5mdskssic0cr+zd0hlnnqiFNyE2 lg0/1rbN+I/fqnnooQas5r4wdgkPNHCiVhYPflFZAZa7gFpxk8fo97eOdeF74hgF P+2ujhQn908Q0U1Wkv2yvNcb9sGDarp0mWf4CZUJFib4VNIhS0PEJ/GPi6oeP+7C 1yfEuZc8zBnTKuGpauCDpuRAKJzUnXG6iULV77pB004sRPO+lOWvS656Ilp86OD+ PDpjAWXv0NoUU5kRn/IMO3jxqmvM5fd5Y5omf5SGBazP -----END CERTIFICATE-----Generated at Sun Jan 25 04:15:50 2026 by rpki-client