This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer File: zNz_ISpraZpXC0qdF18WI3GDLKU.cer (raw, json) Hash identifier: O7DKIOKekzJmMTJxsMqRINNBG5qkqJEi2lmMss3Slts= Subject key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0273A8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 06 Nov 2025 17:25:49 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 24074 IP: 202.12.248.0/21 IP: 202.27.140.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160680 (0x273a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 6 17:25:49 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2d:7d:04:34:b2:0c:66:82:cd:89:ac:79:f0: 7f:56:4a:6b:5b:82:7f:2f:b4:02:1d:0d:56:ac:35: 0a:64:9c:09:f0:dd:fa:b9:22:cb:b1:de:d4:c6:80: 0e:1b:8b:75:f8:31:fe:f0:c1:49:6a:d8:d8:ed:d1: 96:6f:d6:57:40:46:99:3e:8d:35:4f:13:28:a6:f5: 41:f5:cf:af:a9:1e:6a:5e:dc:d3:b6:28:23:5b:36: 86:43:55:00:f4:ec:4a:8c:c4:29:4a:0a:70:1d:dd: ea:70:ba:e7:5d:dd:2c:b3:ab:47:42:ce:a8:de:b5: 65:fa:81:cd:74:bc:b3:45:47:f7:ad:ba:11:b9:73: 17:bd:3b:25:ed:ea:23:70:63:97:3c:02:59:da:99: f9:c9:88:0d:6d:f0:1d:33:a8:a5:28:d0:fb:b0:a7: f7:42:06:0b:14:d8:eb:8f:01:c3:83:63:53:ff:0e: 12:82:a4:41:84:32:98:bf:9b:d2:1c:e2:09:cb:ad: 66:c1:67:8c:b8:a3:e7:46:11:fe:b2:64:87:8c:28: 6f:79:d8:89:25:02:46:ee:bb:b6:da:90:57:8b:0e: 31:eb:4a:fb:4c:e6:01:60:87:99:a0:c1:bf:cf:10: f8:6b:d9:bc:5d:51:7a:b0:3a:88:3f:fd:d5:07:60: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24074 sbgp-ipAddrBlock: critical IPv4: 202.12.248.0/21 202.27.140.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:ec:52:9b:0a:dd:f1:88:9c:87:4b:83:29:9e:90:8b:d1:d2: 28:66:b6:c6:7f:9f:16:6b:35:4f:a5:9a:38:ba:0c:ae:5d:63: 4f:b8:bb:d7:23:fe:cd:e7:5a:0d:a2:f3:84:55:4d:06:ff:29: 9e:15:2a:7e:34:2d:50:90:59:3a:d6:fc:5a:e1:50:a0:8b:47: 21:bc:29:42:25:1e:2a:8e:14:95:27:63:32:35:3e:23:0f:22: ad:d7:9e:fb:ab:bb:8b:c9:7d:74:e0:d4:ec:d2:cb:2d:ca:70: a8:23:c2:f8:47:d1:4d:98:b3:4c:a3:b6:fc:0e:d3:06:bd:6a: 3f:c9:f1:c0:aa:4a:db:e8:b4:14:72:c7:23:4e:19:0e:56:ee: b2:93:9f:a0:09:be:21:09:b1:37:59:4f:70:1c:56:00:d5:83: 30:b1:64:fb:01:23:58:00:34:db:95:10:36:82:9c:4c:13:c1: 0e:da:56:1d:c5:e0:fc:3d:d9:2f:d7:ff:eb:18:cb:c1:14:cc: 49:65:96:46:8d:0e:ce:56:b3:8b:46:8d:92:9e:1f:56:1d:84: bf:f9:24:0c:4f:9d:ea:1a:75:33:99:31:0b:7e:60:a6:28:bf: 0d:5f:ea:7e:8a:57:ea:ab:67:01:63:2c:c2:4d:2c:9e:31:68: 06:f6:c7:af -----BEGIN CERTIFICATE----- MIIGHzCCBQegAwIBAgIDAnOoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEwNjE3MjU0OVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkYyM0YxMTAvBgNVBAUTKENDRENGRjIxMkE2QjY5OUE1NzBCNEE5 RDE3NUYxNjIzNzE4MzJDQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYLX0ENLIMZoLNiax58H9WSmtbgn8vtAIdDVasNQpknAnw3fq5Isux3tTGgA4b i3X4Mf7wwUlq2Njt0ZZv1ldARpk+jTVPEyim9UH1z6+pHmpe3NO2KCNbNoZDVQD0 7EqMxClKCnAd3epwuudd3Syzq0dCzqjetWX6gc10vLNFR/etuhG5cxe9OyXt6iNw Y5c8AlnamfnJiA1t8B0zqKUo0Puwp/dCBgsU2OuPAcODY1P/DhKCpEGEMpi/m9Ic 4gnLrWbBZ4y4o+dGEf6yZIeMKG952IklAkbuu7bakFeLDjHrSvtM5gFgh5mgwb/P EPhr2bxdUXqwOog//dUHYK5DAgMBAAGjggMUMIIDEDAdBgNVHQ4EFgQUzNz/ISpr aZpXC0qdF18WI3GDLKUwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJGMjNGLzMzOEIyRjQ4NEEyRjExRUZBRTk2QzkxNUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCRjIzRi8zMzhCMkY0ODRBMkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNw cmFacFhDMHFkRjE4V0kzR0RMS1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICXgowJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAPKDPgDBALKG4ww DQYJKoZIhvcNAQELBQADggEBAE/sUpsK3fGInIdLgymekIvR0ihmtsZ/nxZrNU+l mji6DK5dY0+4u9cj/s3nWg2i84RVTQb/KZ4VKn40LVCQWTrW/FrhUKCLRyG8KUIl HiqOFJUnYzI1PiMPIq3Xnvuru4vJfXTg1OzSyy3KcKgjwvhH0U2Ys0yjtvwO0wa9 aj/J8cCqStvotBRyxyNOGQ5W7rKTn6AJviEJsTdZT3AcVgDVgzCxZPsBI1gANNuV EDaCnEwTwQ7aVh3F4Pw92S/X/+sYy8EUzElllkaNDs5Ws4tGjZKeH1YdhL/5JAxP neoadTOZMQt+YKYovw1f6n6KV+qrZwFjLMJNLJ4xaAb2x68= -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:46 2025 by rpki-client