This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer File: SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer (raw, json) Hash identifier: y9RanhHJuCeQGUdUs4lAz8o4DLzlk+F3FjfRBE04OJk= Subject key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4F53 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 14 Jan 2026 08:24:42 +0000 Certificate not after: Sat 01 May 2027 00:00:00 +0000 Subordinate resources: IP: 151.158.14.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 02:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20307 (0x4f53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Jan 14 08:24:42 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:b7:f9:14:a7:99:8a:84:96:2e:0f:88:9c: 4a:e4:36:fa:6a:e6:65:b7:e2:e3:d9:f5:8e:13:6d: 26:d4:97:ed:05:47:5e:10:15:40:0f:c2:73:63:22: bb:ea:4b:b5:1d:56:96:c6:37:fe:52:b2:15:06:07: 1a:c1:13:38:ae:ab:32:86:1f:aa:a8:08:a2:89:ee: 8c:c7:0c:e6:cd:16:8a:5a:51:2f:9b:2f:93:5e:d0: e7:5c:54:5d:98:12:0a:56:37:f2:bf:67:ca:e1:07: 0e:54:60:be:7d:1d:3f:7e:b2:24:c5:7e:27:0a:2b: e7:83:e5:6d:bd:80:82:22:6b:d1:30:8f:e9:00:2c: c8:f7:60:cd:2c:00:cb:31:06:df:f2:4a:aa:2b:e1: 55:a8:6e:f4:c9:fa:f6:a7:65:e8:8e:db:3c:be:07: ec:a3:2c:8b:40:dc:34:77:23:da:94:8f:2a:44:73: ba:69:4c:bb:6a:cf:4d:93:39:24:d4:4d:a5:6a:fd: 00:fb:19:5a:0b:ff:6f:0d:78:77:c2:a5:64:5e:85: 32:aa:db:79:ae:f5:b3:22:8e:4c:61:c7:e2:2f:6a: d1:c0:0e:2e:27:9e:43:60:ea:3c:44:96:f7:71:e4: cd:fc:ca:c1:38:56:f5:ef:7e:c6:3c:90:8c:48:0a: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 151.158.14.0/23 Signature Algorithm: sha256WithRSAEncryption d6:10:02:62:d7:f7:d0:30:c1:32:10:43:47:fa:9d:d4:cd:da: bb:c9:1b:65:d1:69:61:8d:1e:e8:10:88:1e:98:a3:b0:e8:5a: b8:36:02:5c:19:29:b2:86:10:19:12:91:2c:99:69:00:38:18: 96:2d:7a:9e:b3:fb:38:e9:10:95:6b:d0:c3:c3:3f:96:a5:57: 40:6a:5d:c7:a8:0c:15:28:ae:db:eb:54:f4:71:34:e3:84:18: ad:9f:f2:c8:b5:0a:79:93:3f:b1:60:33:cb:8a:16:93:de:a4: ce:a8:aa:b4:2b:c4:c3:6b:15:7c:2d:4f:65:c3:eb:6f:f2:a9: db:5d:b3:cb:ed:a8:48:d0:18:cf:d8:9f:0f:9f:75:7f:1d:e3: 3f:98:a1:f9:eb:83:f3:4d:eb:9f:07:86:6b:bc:a4:5e:87:eb: e8:0b:b9:7b:78:9d:ed:cf:a5:21:2f:84:53:27:45:08:0a:88: ca:6e:f2:78:ee:5e:dd:4b:cf:6f:a0:99:5b:0c:6a:d1:0e:d6: 71:1c:e8:b1:aa:42:5c:a9:73:f1:04:f1:7e:12:e9:03:73:7a: ee:ff:13:83:bf:36:aa:e2:08:4f:48:d5:73:b6:f1:5a:5a:e1: fa:66:7c:3f:fa:3f:c3:98:ab:96:f7:2a:75:8e:d7:81:ea:72: 1a:f6:a6:ef -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICT1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjYwMTE0MDgyNDQyWhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTFEMkI5QTExMC8GA1UEBRMoNDk5RDY5MUIwRjczMkQ5MDA2RTk1MTND NjBCNzM2NkI0RTY5MDQwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKlPt/kUp5mKhJYuD4icSuQ2+mrmZbfi49n1jhNtJtSX7QVHXhAVQA/Cc2Miu+pL tR1WlsY3/lKyFQYHGsETOK6rMoYfqqgIoonujMcM5s0WilpRL5svk17Q51xUXZgS ClY38r9nyuEHDlRgvn0dP36yJMV+Jwor54Plbb2AgiJr0TCP6QAsyPdgzSwAyzEG 3/JKqivhVahu9Mn69qdl6I7bPL4H7KMsi0DcNHcj2pSPKkRzumlMu2rPTZM5JNRN pWr9APsZWgv/bw14d8KlZF6FMqrbea71syKOTGHH4i9q0cAOLieeQ2DqPESW93Hk zfzKwThW9e9+xjyQjEgKcTECAwEAAaOCAvMwggLvMB0GA1UdDgQWBBRJnWkbD3Mt kAbpUTxgtzZrTmkEADAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2 MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDJCOUEvNzc5NjlCOENGMTIyMTFGMEFDNUNEQTdFNEU2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQyQjlBLzc3OTY5QjhDRjEyMjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6 TFpBRzZWRThZTGMyYTA1cEJBQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZeeDjANBgkqhkiG9w0BAQsFAAOCAQEA1hACYtf30DDBMhBDR/qd 1M3au8kbZdFpYY0e6BCIHpijsOhauDYCXBkpsoYQGRKRLJlpADgYli16nrP7OOkQ lWvQw8M/lqVXQGpdx6gMFSiu2+tU9HE044QYrZ/yyLUKeZM/sWAzy4oWk96kzqiq tCvEw2sVfC1PZcPrb/Kp212zy+2oSNAYz9ifD591fx3jP5ih+euD803rnweGa7yk Xofr6Au5e3id7c+lIS+EUydFCAqIym7yeO5e3UvPb6CZWwxq0Q7WcRzosapCXKlz 8QTxfhLpA3N67v8Tg782quIIT0jVc7bxWlrh+mZ8P/o/w5irlvcqdY7XgepyGvam 7w== -----END CERTIFICATE-----Generated at Wed Jan 21 06:05:49 2026 by rpki-client