This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer (raw, json) Hash identifier: 8TFG4HPFmz626o/brBYtHOvnm4CKGN97phkaz7B4e94= Subject key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027460 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 10 Nov 2025 15:51:52 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 9484 AS: 55546 IP: 45.117.32.0/22 IP: 202.21.96.0/19 IP: 202.126.92.0/22 IP: 202.131.224.0/19 IP: 2407:6400::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160864 (0x27460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 10 15:51:52 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b0:5f:76:06:29:41:8c:8b:68:78:67:57:52: 29:14:d1:04:75:fa:8c:2e:4d:36:5b:6e:3a:29:f0: bd:11:47:fb:c1:06:51:06:83:bd:9e:d5:61:bc:fa: 2e:2d:49:cf:cb:51:ec:c9:99:5b:a6:f0:47:59:6c: 8f:9f:ce:87:7f:f7:8e:ec:15:d4:ac:3c:75:24:98: bf:e3:a8:65:95:f9:51:f7:64:a5:03:07:92:e1:b5: 90:4b:f4:8d:ed:11:e2:4c:77:70:dc:4f:e7:21:46: 72:e6:13:ca:ef:e6:64:72:69:7c:4c:1c:d3:0f:a5: a9:c0:45:41:0a:a5:be:26:47:21:0c:6f:fb:c8:94: 01:1b:6c:d3:9d:1d:49:60:83:1e:13:bb:4b:2c:14: 39:a3:98:e5:50:0b:0a:78:bb:b6:b9:5e:70:e7:e0: 76:1a:cc:1b:89:0e:5f:6f:36:fc:ad:27:13:5c:19: b8:0f:da:8a:f0:bf:8d:4f:02:a8:80:f7:f2:23:15: 55:2d:2b:0b:16:b9:c5:24:f3:79:1d:b6:96:c7:ca: c9:9d:d0:18:f0:3c:88:f8:c0:3b:d9:8e:65:41:a1: d1:16:ba:81:2f:90:60:63:ee:55:e0:87:ef:9b:70: 4c:a6:64:ac:a5:51:d2:aa:f8:a8:3b:fe:9e:1f:3e: 5c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9484 55546 sbgp-ipAddrBlock: critical IPv4: 45.117.32.0/22 202.21.96.0/19 202.126.92.0/22 202.131.224.0/19 IPv6: 2407:6400::/32 Signature Algorithm: sha256WithRSAEncryption 90:3d:57:b8:93:98:79:54:07:6b:9a:13:a0:55:24:00:f3:46: b0:18:0a:8b:95:6b:8b:4d:64:6b:e6:71:98:47:34:b7:36:f0: c0:e3:22:af:6e:9d:a7:9e:a8:ee:56:2b:c7:c6:15:30:7c:fe: 7c:05:07:48:80:81:83:23:5a:75:21:65:8a:37:17:57:da:82: da:70:1e:46:c6:db:d7:45:0e:12:cc:c2:96:21:71:49:82:48: 17:41:76:42:0b:0e:8d:e5:a9:da:2e:29:ad:fb:4d:50:2b:e0: f6:b2:dd:0c:2f:f3:18:96:24:86:f3:04:8e:be:49:3a:bd:b3: d8:26:c3:c2:52:cf:37:b0:75:c6:df:fc:56:7c:9c:ca:bb:f4: da:1c:76:c1:a4:a2:69:5b:a0:14:fe:b2:64:a0:3c:db:17:ad: 6a:16:13:07:d5:f5:14:91:74:0f:ab:fc:49:de:ab:04:63:ea: da:a8:8c:93:9f:56:9a:19:57:98:2b:82:75:ab:bd:03:29:5e: 77:fe:d2:4a:6f:0c:8e:3f:af:ba:cf:bf:05:07:8b:78:8c:d0: 3a:db:fa:5d:40:c3:a8:00:9b:c9:85:ad:d1:01:16:60:e0:0e: 5f:03:1f:e0:2a:5e:7e:b3:46:a1:c9:13:26:58:be:43:c6:54: c5:77:13:6f -----BEGIN CERTIFICATE----- MIIGPzCCBSegAwIBAgIDAnRgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMDE1NTE1MloXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgx REU2MzBGNTA5RkY0NENENDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVsF92BilBjItoeGdXUikU0QR1+owuTTZbbjop8L0RR/vBBlEGg72e1WG8+i4t Sc/LUezJmVum8EdZbI+fzod/947sFdSsPHUkmL/jqGWV+VH3ZKUDB5LhtZBL9I3t EeJMd3DcT+chRnLmE8rv5mRyaXxMHNMPpanARUEKpb4mRyEMb/vIlAEbbNOdHUlg gx4Tu0ssFDmjmOVQCwp4u7a5XnDn4HYazBuJDl9vNvytJxNcGbgP2orwv41PAqiA 9/IjFVUtKwsWucUk83kdtpbHysmd0BjwPIj4wDvZjmVBodEWuoEvkGBj7lXgh++b cEymZKylUdKq+Kg7/p4fPlwXAgMBAAGjggM0MIIDMDAdBgNVHQ4EFgQUz3Ess4nu hNoZypgd5jD1Cf9EzUUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQ0NjJBLzRDQkQzRjg0NTBENTExRTc5MzEzQUUxMkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFENDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRu dWhOb1p5cGdkNWpEMUNmOUV6VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICJQwCAwDY+jBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAi11IAME BcoVYAMEAsp+XAMEBcqD4DANBAIAAjAHAwUAJAdkADANBgkqhkiG9w0BAQsFAAOC AQEAkD1XuJOYeVQHa5oToFUkAPNGsBgKi5Vri01ka+ZxmEc0tzbwwOMir26dp56o 7lYrx8YVMHz+fAUHSICBgyNadSFlijcXV9qC2nAeRsbb10UOEszCliFxSYJIF0F2 QgsOjeWp2i4prftNUCvg9rLdDC/zGJYkhvMEjr5JOr2z2CbDwlLPN7B1xt/8Vnyc yrv02hx2waSiaVugFP6yZKA82xetahYTB9X1FJF0D6v8Sd6rBGPq2qiMk59WmhlX mCuCdau9Ayled/7SSm8Mjj+vus+/BQeLeIzQOtv6XUDDqACbyYWt0QEWYOAOXwMf 4CpefrNGockTJli+Q8ZUxXcTbw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:30 2025 by rpki-client