This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zamee9M_jsdx_ROc1rNwDJyY8jA.cer
File:                     zamee9M_jsdx_ROc1rNwDJyY8jA.cer (raw, json)
Hash identifier:          IToO/1nog1i2yeFVElYsqZy4oSrrPd/MKz+mrZiGekI=
Subject key identifier:   CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0285E1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 13 Jan 2026 13:28:32 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 103.146.80.0/23
                          IP: 2001:df2:5480::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165345 (0x285e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 13 13:28:32 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A9182DEA, serialNumber=CDA99E7BD33F8EC771FD139CD6B3700C9C98F230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:40:6b:68:ff:a7:fc:12:03:09:20:df:33:3d:
                    7d:59:2b:06:9d:eb:f2:fd:83:9a:cd:10:c2:84:47:
                    f5:72:16:4e:fd:8c:9c:66:79:da:e6:7c:46:6f:f2:
                    46:50:95:af:1f:ad:6f:13:42:b7:60:8e:54:af:e0:
                    a4:b9:a4:5e:ae:f2:27:7b:9f:21:17:43:18:b9:37:
                    82:39:13:79:63:91:ec:57:47:b3:6c:56:4a:bd:fc:
                    58:8b:8e:2b:75:74:80:32:08:db:a4:05:53:c7:37:
                    44:16:30:cd:4a:f3:d2:5e:93:dc:fe:d3:c1:cd:3b:
                    33:7a:50:da:77:a7:0c:fb:c8:aa:f3:52:a1:3c:d0:
                    e9:4f:3e:85:0c:1f:f1:b0:87:9d:3b:76:fd:5c:4c:
                    48:37:74:97:14:37:66:5d:86:c5:2c:7d:f7:04:07:
                    36:ec:08:56:69:f9:ab:dd:e3:74:f7:fa:76:5d:f6:
                    82:55:97:d0:1a:d3:f1:93:40:56:7a:8b:3b:fb:b7:
                    77:a3:d4:da:77:fe:67:35:0c:8b:21:34:70:96:e8:
                    ed:72:94:31:f4:0d:e6:30:2b:f4:bd:e6:01:aa:70:
                    0d:0f:4a:c0:ec:7a:be:1a:95:04:a6:52:d3:bf:0d:
                    1e:25:d9:c9:d0:2a:76:78:09:86:a6:7d:23:aa:e3:
                    6a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A9:9E:7B:D3:3F:8E:C7:71:FD:13:9C:D6:B3:70:0C:9C:98:F2:30
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9182DEA/F01DE30CC69F11EAA55CB040C4F9AE02/zamee9M_jsdx_ROc1rNwDJyY8jA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.80.0/23
                IPv6:
                  2001:df2:5480::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:c7:0e:62:24:2d:35:57:0c:01:d7:eb:04:8c:af:6e:92:38:
         1d:53:46:43:a5:c7:25:72:a3:f1:db:60:eb:ba:38:47:2c:83:
         31:4d:fe:da:a2:13:81:4d:b1:66:d9:b1:c7:14:0b:cb:a1:c1:
         b5:1e:22:ce:c3:d6:f6:d0:62:da:31:6f:c0:7a:23:b4:46:20:
         74:27:35:91:07:66:a5:dd:26:63:4b:ea:3a:e9:d2:28:c0:c6:
         ae:da:a7:1c:2b:40:5d:66:3e:54:55:86:55:01:24:9e:ec:c9:
         86:c5:c1:a4:4d:56:12:b7:89:93:9d:ee:38:b5:16:ec:26:57:
         27:db:eb:c4:d8:9c:2b:2e:a2:22:f9:14:4c:ba:12:60:79:e4:
         82:65:01:5e:e6:57:8f:85:ee:aa:c7:90:97:c5:b6:19:0c:ee:
         4d:51:ea:94:83:b6:f8:2c:dd:59:bb:4a:e7:cd:c8:60:d2:63:
         df:b3:f6:2f:fb:13:c7:31:e7:f2:bb:e0:ea:1b:79:f0:56:fd:
         8e:16:0a:8e:d1:07:59:e1:91:41:af:b1:7d:b1:36:35:a1:46:
         69:52:fe:06:ad:7a:6e:8c:10:0f:2b:1c:18:ec:77:24:25:37:
         26:38:da:3a:55:78:41:17:27:02:9b:f4:57:9c:c5:16:e0:6a:
         c5:28:95:70
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIDAoXhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDExMzEzMjgzMloXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAwwIQTkxODJERUExMTAvBgNVBAUTKENEQTk5RTdCRDMzRjhFQzc3MUZEMTM5
Q0Q2QjM3MDBDOUM5OEYyMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiQGto/6f8EgMJIN8zPX1ZKwad6/L9g5rNEMKER/VyFk79jJxmedrmfEZv8kZQ
la8frW8TQrdgjlSv4KS5pF6u8id7nyEXQxi5N4I5E3ljkexXR7NsVkq9/FiLjit1
dIAyCNukBVPHN0QWMM1K89Jek9z+08HNOzN6UNp3pwz7yKrzUqE80OlPPoUMH/Gw
h507dv1cTEg3dJcUN2ZdhsUsffcEBzbsCFZp+avd43T3+nZd9oJVl9Aa0/GTQFZ6
izv7t3ej1Np3/mc1DIshNHCW6O1ylDH0DeYwK/S95gGqcA0PSsDser4alQSmUtO/
DR4l2cnQKnZ4CYamfSOq42pFAgMBAAGjggMEMIIDADAdBgNVHQ4EFgQUzamee9M/
jsdx/ROc1rNwDJyY8jAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTgyREVBL0YwMURFMzBDQzY5RjExRUFBNTVDQjA0MEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4MkRFQS9GMDFERTMwQ0M2OUYxMUVBQTU1Q0IwNDBDNEY5QUUwMi96YW1lZTlN
X2pzZHhfUk9jMXJOd0RKeVk4akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8EITAf
MAwEAgABMAYDBAFnklAwDwQCAAIwCQMHACABDfJUgDANBgkqhkiG9w0BAQsFAAOC
AQEADccOYiQtNVcMAdfrBIyvbpI4HVNGQ6XHJXKj8dtg67o4RyyDMU3+2qITgU2x
ZtmxxxQLy6HBtR4izsPW9tBi2jFvwHojtEYgdCc1kQdmpd0mY0vqOunSKMDGrtqn
HCtAXWY+VFWGVQEknuzJhsXBpE1WEreJk53uOLUW7CZXJ9vrxNicKy6iIvkUTLoS
YHnkgmUBXuZXj4XuqseQl8W2GQzuTVHqlIO2+CzdWbtK583IYNJj37P2L/sTxzHn
8rvg6ht58Fb9jhYKjtEHWeGRQa+xfbE2NaFGaVL+Bq16bowQDyscGOx3JCU3Jjja
OlV4QRcnApv0V5zFFuBqxSiVcA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:13 2026 by rpki-client