This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer File: z3nGX0tVAQ-yXObEW4yRnbCToy0.cer (raw, json) Hash identifier: r+jT+cVnNIZ3NT8unEckKxJ5Rv9R8tvf+RCXZEKAwV0= Subject key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027B35 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft caRepository: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 03 Dec 2025 08:34:21 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 139921 IP: 2001:df4:8440::/47 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162613 (0x27b35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 3 08:34:21 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:34:67:eb:8b:a0:56:9a:fd:64:bc:0e:ce: b2:bb:a9:f2:8e:ca:a6:b5:82:70:37:d2:7b:50:a3: 4c:de:93:0f:41:9b:68:d8:0d:5a:09:9c:32:52:d3: ec:57:67:30:64:e6:a1:8a:18:7a:f7:ec:59:ef:15: f1:1c:08:24:09:50:fc:e5:53:5b:a4:64:a0:82:97: d6:02:8e:ba:8f:12:77:c7:90:99:1c:62:6c:ad:4f: 23:02:f8:2d:96:d8:7d:f6:95:34:8d:94:a3:63:56: 3a:c1:fd:d9:f6:94:5d:13:05:ce:4e:8d:6c:17:57: 1e:8d:b6:40:36:89:d7:53:73:0c:e8:b0:38:4f:93: b8:e2:46:d2:31:6d:21:c6:ee:55:fe:50:1f:80:65: 6e:95:e3:48:b9:0f:52:cc:ea:93:26:05:31:c1:90: 4f:5a:2f:f4:02:9d:90:8f:28:52:0e:70:e4:df:52: c9:6c:ea:f9:b8:92:d6:d6:4f:85:e0:ea:ae:6b:b9: e5:2e:88:bd:2a:87:1a:84:f0:63:34:87:af:4e:68: bf:04:ce:b6:86:46:2c:bc:d4:d3:56:5b:b5:ca:dc: f5:c9:c5:a0:0a:5a:c0:b5:a6:aa:ad:3a:a1:af:3d: da:66:ce:a9:dd:48:66:b4:30:b3:e3:23:8e:2e:9e: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139921 sbgp-ipAddrBlock: critical IPv6: 2001:df4:8440::/47 Signature Algorithm: sha256WithRSAEncryption 17:39:66:09:02:77:52:1f:68:6b:dc:68:9b:85:59:59:52:34: 32:6b:79:67:fb:8e:cc:45:b5:2c:51:8a:20:82:5f:9b:64:52: eb:8e:0d:d0:3a:92:62:0a:99:31:25:00:cd:79:dc:b7:a7:93: 4e:34:00:55:cf:8f:3d:53:8d:61:47:81:43:56:75:43:1b:25: 14:9f:9a:5a:3e:a0:e3:16:94:14:3c:93:bc:cc:82:0a:aa:d4: 87:82:56:90:a8:d7:1a:3e:67:b9:9c:70:0a:64:38:f6:02:44: 43:c0:19:7f:5c:2d:22:58:c9:06:46:19:97:d6:bd:08:22:b1: 35:0f:cd:88:ae:28:5e:9d:74:f5:fa:da:d5:4e:95:c3:54:30: 4d:b7:46:8b:af:2c:e8:de:06:60:8b:b4:98:52:31:fa:f8:7a: a0:7f:b7:23:b4:e3:31:db:74:1d:7a:22:1b:af:2c:11:0c:1e: e9:b3:af:91:4c:28:2d:5b:47:3e:1c:21:b9:93:c4:76:d1:ad: 1c:b2:6a:c5:fd:24:ea:b9:e9:bf:ee:25:a1:ba:c5:52:48:2a: 2b:f6:e0:5e:9d:b3:04:74:bc:80:90:98:5d:36:e5:d7:f5:57: 7c:3a:55:02:8f:e9:7a:3f:e4:ea:6f:d1:ee:0c:2c:75:70:bd: 3d:f0:72:62 -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAns1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMzA4MzQyMVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMkU4N0UxMTAvBgNVBAUTKENGNzlDNjVGNEI1NTAxMEZCMjVDRTZD NDVCOEM5MTlEQjA5M0EzMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDrjRn64ugVpr9ZLwOzrK7qfKOyqa1gnA30ntQo0zekw9Bm2jYDVoJnDJS0+xX ZzBk5qGKGHr37FnvFfEcCCQJUPzlU1ukZKCCl9YCjrqPEnfHkJkcYmytTyMC+C2W 2H32lTSNlKNjVjrB/dn2lF0TBc5OjWwXVx6NtkA2iddTcwzosDhPk7jiRtIxbSHG 7lX+UB+AZW6V40i5D1LM6pMmBTHBkE9aL/QCnZCPKFIOcOTfUsls6vm4ktbWT4Xg 6q5rueUuiL0qhxqE8GM0h69OaL8EzraGRiy81NNWW7XK3PXJxaAKWsC1pqqtOqGv PdpmzqndSGa0MLPjI44unqcJAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUz3nGX0tV AQ+yXObEW4yRnbCToy0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJFODdFLzg0MjhCOUU2QTFDRjExRUY4NzhFNjA2MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyRTg3RS84NDI4QjlFNkExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0 VkFRLXlYT2JFVzR5Um5iQ1RveTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiKRMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEN9IRAMA0G CSqGSIb3DQEBCwUAA4IBAQAXOWYJAndSH2hr3GibhVlZUjQya3ln+47MRbUsUYog gl+bZFLrjg3QOpJiCpkxJQDNedy3p5NONABVz489U41hR4FDVnVDGyUUn5paPqDj FpQUPJO8zIIKqtSHglaQqNcaPme5nHAKZDj2AkRDwBl/XC0iWMkGRhmX1r0IIrE1 D82IrihenXT1+trVTpXDVDBNt0aLryzo3gZgi7SYUjH6+Hqgf7cjtOMx23QdeiIb rywRDB7ps6+RTCgtW0c+HCG5k8R20a0csmrF/STquem/7iWhusVSSCor9uBenbME dLyAkJhdNuXX9Vd8OlUCj+l6P+Tqb9HuDCx1cL098HJi -----END CERTIFICATE-----Generated at Sun Dec 7 03:00:11 2025 by rpki-client