This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer File: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer (raw, json) Hash identifier: 4+phRLAOxMSdMWZOdfsqLA/Qtw2Xsk3fnP8WkkiW5QM= Subject key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028151 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft caRepository: rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 00:56:12 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 150440 IP: 103.42.202.0/23 IP: 2001:df1:9540::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 15:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164177 (0x28151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 29 00:56:12 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:78:2b:06:23:2c:07:7f:7f:16:e7:3f:3d:a9: 8f:bc:2d:c7:d2:a2:11:a7:2d:71:9b:02:b5:6e:f3: e9:e4:5b:c8:43:30:21:df:8e:95:5a:0c:00:4f:c9: 50:4d:1a:d2:d3:d0:18:52:75:11:6c:3a:7c:cc:b6: ec:d9:1b:81:76:bc:8c:05:17:e4:97:bd:fb:81:34: 1b:74:4a:1a:4b:26:63:89:a1:56:42:13:98:52:9a: ae:16:c5:bf:10:f2:81:ca:5a:d0:6d:4b:b4:46:d2: a3:c2:80:bb:e1:3f:13:ef:98:e4:b7:b9:85:78:53: ab:d4:a1:51:1c:53:5c:19:63:1a:c1:dd:06:32:d8: 07:d5:41:ce:00:2d:29:b4:60:b5:60:d2:e6:78:6e: 2f:e4:b3:e7:9e:c1:b1:36:74:7d:b9:c0:42:04:eb: 3a:23:36:58:59:99:41:82:9b:10:5a:a1:a0:f5:02: 0d:69:63:91:e2:bf:f0:91:c0:37:cc:f8:ac:60:2f: c7:5c:a8:5a:b0:c2:8e:de:9b:e7:35:a7:7d:57:d1: 5c:32:07:fa:6e:db:9f:bb:0f:0a:67:d4:22:96:e6: 28:b1:da:00:f2:9c:f3:b1:90:ef:2e:7c:cc:86:3e: 41:3d:e6:6b:93:92:63:eb:d5:1c:7b:e2:30:93:76: d2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 150440 sbgp-ipAddrBlock: critical IPv4: 103.42.202.0/23 IPv6: 2001:df1:9540::/48 Signature Algorithm: sha256WithRSAEncryption 1a:ae:68:07:bc:2f:b3:5e:f4:e0:1a:a5:1e:d6:bf:61:fb:92: 7a:fa:26:85:3b:d8:1f:12:6c:6b:f3:ab:f4:7f:23:25:0a:77: 84:13:13:14:a8:86:db:16:92:f9:9a:75:04:14:dd:b8:88:e0: 99:2a:82:9f:1d:03:75:3a:5c:3e:be:d6:6e:38:15:aa:77:c0: 64:1f:fe:f3:30:b2:22:b2:a0:da:9a:78:c8:1b:b4:f6:6e:0d: aa:09:a8:46:d5:40:ce:64:5d:88:d8:1a:7c:eb:aa:b0:df:47: a5:7f:cb:4a:1e:c3:8d:fc:0d:3e:f2:92:a7:1c:a2:a5:8c:ea: 52:c8:21:02:e2:bf:92:9d:ec:15:0a:35:aa:00:b1:4a:49:83: 6e:b3:c2:4b:91:34:09:3c:98:10:26:78:a5:99:b2:94:fb:77: 1d:96:46:e8:1d:aa:50:9f:e6:31:b8:a0:91:13:52:d1:89:c5: 9f:63:66:91:71:56:80:83:f5:d4:6e:26:9f:1e:1b:3e:b0:8d: 3e:10:af:f8:55:7f:d7:5f:ba:74:8a:66:cf:c9:18:2e:44:03: af:1e:50:11:91:ca:b7:66:c3:2f:8e:89:b7:71:5e:c3:08:68: 98:07:75:d5:a4:ae:4d:16:1a:85:b0:eb:4a:97:69:6f:6a:67: 58:b7:f8:ef -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAoFRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyOTAwNTYxMloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxMTVBQzgxMTAvBgNVBAUTKDY0NDUyMzdFNTZFRTg5NDQyQkYzMTQz NTJDRkM1NDNENjVEMUI2MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeeCsGIywHf38W5z89qY+8LcfSohGnLXGbArVu8+nkW8hDMCHfjpVaDABPyVBN GtLT0BhSdRFsOnzMtuzZG4F2vIwFF+SXvfuBNBt0ShpLJmOJoVZCE5hSmq4Wxb8Q 8oHKWtBtS7RG0qPCgLvhPxPvmOS3uYV4U6vUoVEcU1wZYxrB3QYy2AfVQc4ALSm0 YLVg0uZ4bi/ks+eewbE2dH25wEIE6zojNlhZmUGCmxBaoaD1Ag1pY5Hiv/CRwDfM +KxgL8dcqFqwwo7em+c1p31X0VwyB/pu25+7Dwpn1CKW5iix2gDynPOxkO8ufMyG PkE95muTkmPr1Rx74jCTdtKFAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUZEUjflbu iUQr8xQ1LPxUPWXRtg4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTE1QUM4L0JBNkQyN0Q0NkM1RDExRUQ4QzVDNjQxQ0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExNUFDOC9CQTZEMjdENDZDNUQxMUVEOEM1QzY0MUNDNEY5QUUwMi9aRVVqZmxi dWlVUXI4eFExTFB4VVBXWFJ0ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkuoMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZyrKMA8EAgAC MAkDBwAgAQ3xlUAwDQYJKoZIhvcNAQELBQADggEBABquaAe8L7Ne9OAapR7Wv2H7 knr6JoU72B8SbGvzq/R/IyUKd4QTExSohtsWkvmadQQU3biI4Jkqgp8dA3U6XD6+ 1m44Fap3wGQf/vMwsiKyoNqaeMgbtPZuDaoJqEbVQM5kXYjYGnzrqrDfR6V/y0oe w438DT7ykqccoqWM6lLIIQLiv5Kd7BUKNaoAsUpJg26zwkuRNAk8mBAmeKWZspT7 dx2WRugdqlCf5jG4oJETUtGJxZ9jZpFxVoCD9dRuJp8eGz6wjT4Qr/hVf9dfunSK Zs/JGC5EA68eUBGRyrdmwy+OibdxXsMIaJgHddWkrk0WGoWw60qXaW9qZ1i3+O8= -----END CERTIFICATE-----Generated at Tue Jan 27 17:50:56 2026 by rpki-client