This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer File: zupmODV1Y6xVdo8A2E0nezpjxEk.cer (raw, json) Hash identifier: N7p64ajZEaYbpsKNOPt1Wvzu5HgjhGyIVaO1be3i05k= Subject key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027A95 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 02 Dec 2025 11:28:24 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 103.244.148.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162453 (0x27a95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 2 11:28:24 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:27:ae:9f:ac:0e:45:f6:81:5e:77:fc:ff: f7:8a:f4:15:22:74:f8:b7:9e:61:c6:25:7f:36:1b: 04:b8:a4:38:21:a2:14:79:7f:37:45:df:15:56:13: 64:56:63:9d:e6:07:4b:59:6b:fc:a7:4c:e5:7f:8b: b7:e1:66:87:08:59:4f:31:a8:43:8c:d0:73:b1:08: 4a:1d:68:de:ce:2b:d6:ae:6c:b5:f4:05:cb:7f:ee: 7f:c6:2b:8c:c7:fc:4c:74:5c:be:d6:ae:f2:3f:32: 9f:23:8a:2d:f8:0b:67:ee:4a:b8:0e:fb:ae:2f:3d: 41:62:2b:9a:75:00:4f:6b:b1:a8:46:9b:bc:b0:df: ae:7a:7a:2f:ba:5c:de:df:fb:e7:0f:a6:bc:6c:fd: 2c:76:56:1f:2d:63:f4:98:dd:57:c9:e1:21:c4:c3: e0:6f:6f:61:4b:69:84:61:c4:97:50:f9:e8:14:4b: 1b:f2:de:a4:c9:af:be:67:31:03:35:1d:5d:38:e9: 2c:24:e7:29:ad:55:bb:92:f8:b0:2e:6d:cf:44:07: 1d:1b:40:9c:28:68:55:d6:aa:a5:17:7d:af:1b:b4: b1:57:a5:74:d8:81:59:14:45:cf:d5:ad:a2:4a:b8: 71:c9:43:60:e1:50:d6:86:40:f6:06:81:e4:e7:49: bb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.244.148.0/22 Signature Algorithm: sha256WithRSAEncryption ca:da:96:a5:19:e7:5a:1e:a4:6e:56:c6:f5:27:76:73:9c:13: 4b:c5:4b:bc:81:42:eb:e6:73:39:ce:be:c2:c2:e8:2b:a7:37: 8b:43:e2:f7:d2:e0:26:f7:70:5c:e5:2d:7d:74:51:ff:c3:f1: 9c:c1:48:5e:6e:07:65:fa:b2:89:9b:b5:00:23:4c:f2:89:ab: c1:e7:e7:d6:c7:4a:e6:3e:69:13:e4:32:f0:d4:ef:dc:c2:17: 98:d0:31:e8:83:03:26:7b:bc:78:8b:11:73:10:0c:25:58:55: a9:c7:85:e0:c8:c6:f7:32:5c:41:92:a7:d9:63:f6:b3:8b:28: 3e:74:54:7a:b2:93:c5:c8:63:1d:73:89:42:09:7a:18:cc:85: ad:a2:64:f7:dd:3b:be:66:d6:3c:43:52:69:7a:c0:82:ae:7d: 41:f9:0d:82:5b:93:d7:a8:1d:1b:97:ee:82:5c:ed:9f:aa:4f: d8:90:4f:3c:80:c8:69:fa:28:29:ef:fd:bd:22:a0:f9:b4:2c: 0b:4b:2c:63:de:b5:b4:97:df:d9:4f:6d:e1:90:d5:2a:b7:6c: dd:e1:e9:67:69:ff:41:81:3f:d7:72:9b:fa:23:5e:a9:fe:39: 05:1a:21:32:ea:03:0b:01:10:04:21:74:f7:08:cc:f7:8b:1e: ed:30:fa:21 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIDAnqVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwMjExMjgyNFoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjJGMTgxMTAvBgNVBAUTKENFRUE2NjM4MzU3NTYzQUM1NTc2OEYw MEQ4NEQyNzdCM0E2M0M0NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxpyeun6wORfaBXnf8//eK9BUidPi3nmHGJX82GwS4pDghohR5fzdF3xVWE2RW Y53mB0tZa/ynTOV/i7fhZocIWU8xqEOM0HOxCEodaN7OK9aubLX0Bct/7n/GK4zH /Ex0XL7WrvI/Mp8jii34C2fuSrgO+64vPUFiK5p1AE9rsahGm7yw3656ei+6XN7f ++cPprxs/Sx2Vh8tY/SY3VfJ4SHEw+Bvb2FLaYRhxJdQ+egUSxvy3qTJr75nMQM1 HV046Swk5ymtVbuS+LAubc9EBx0bQJwoaFXWqqUXfa8btLFXpXTYgVkURc/VraJK uHHJQ2DhUNaGQPYGgeTnSbtFAgMBAAGjggLzMIIC7zAdBgNVHQ4EFgQUzupmODV1 Y6xVdo8A2E0nezpjxEkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUYyRjE4LzA5NTA0MzQ4RkI2NTExRUZCNDVBODk2NkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGMkYxOC8wOTUwNDM0OEZCNjUxMUVGQjQ1QTg5NjZDNEY5QUUwMi96dXBtT0RW MVk2eFZkbzhBMkUwbmV6cGp4RWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAJn9JQwDQYJKoZIhvcNAQELBQADggEBAMralqUZ51oepG5WxvUn dnOcE0vFS7yBQuvmcznOvsLC6CunN4tD4vfS4Cb3cFzlLX10Uf/D8ZzBSF5uB2X6 sombtQAjTPKJq8Hn59bHSuY+aRPkMvDU79zCF5jQMeiDAyZ7vHiLEXMQDCVYVanH heDIxvcyXEGSp9lj9rOLKD50VHqyk8XIYx1ziUIJehjMha2iZPfdO75m1jxDUml6 wIKufUH5DYJbk9eoHRuX7oJc7Z+qT9iQTzyAyGn6KCnv/b0ioPm0LAtLLGPetbSX 39lPbeGQ1Sq3bN3h6Wdp/0GBP9dym/ojXqn+OQUaITLqAwsBEAQhdPcIzPeLHu0w +iE= -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:50 2025 by rpki-client