This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer File: ZaHSWvtmp255SpZv8ztrBgx_gN8.cer (raw, json) Hash identifier: hL5OqzAILb3OpdGbi37TrV7COSSn8bq5TMun4UdQi3I= Subject key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027814 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft caRepository: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 25 Nov 2025 23:48:25 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 139649 IP: 2402:3660::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 15:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161812 (0x27814) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 25 23:48:25 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dd:32:5e:7d:d4:29:17:47:96:db:2f:d0:8a: 82:b6:35:0c:8f:d6:0d:cd:0c:78:42:16:d1:ad:74: 95:ec:a0:1e:2f:5b:68:9e:52:4f:97:b1:47:93:b3: c5:0a:e8:94:61:bd:92:a3:fa:89:63:6f:fe:80:48: 7f:54:8b:2e:ef:ca:67:be:31:4a:a3:df:17:19:1a: a7:46:88:a1:1d:11:6f:55:96:a4:c5:d6:28:7f:30: 3a:9c:0e:2b:15:40:0e:8a:ae:3f:5e:d4:e2:82:36: f6:8e:56:92:67:cc:7c:e9:9d:4d:90:e7:38:b8:23: c4:12:b8:94:2e:b6:a1:9f:ce:33:45:3b:4a:f4:9f: 34:96:0d:51:f8:4f:97:e5:fd:ff:53:29:bc:e6:93: 43:f1:2e:f5:6b:fc:aa:be:4d:5c:ad:3a:d9:49:e8: f2:2c:71:69:d7:32:f6:07:e0:2e:cc:9a:cb:36:87: 7c:a1:d8:f4:1d:be:3e:37:80:33:99:aa:6d:36:0d: 35:68:b1:a0:d0:01:d5:80:af:77:39:2e:b3:80:a7: d5:75:c7:24:7a:90:87:49:60:d0:e2:02:2d:75:e3: 1a:d9:0c:cb:17:a2:16:aa:51:ed:7e:80:6c:1d:6f: 50:ba:66:05:97:1a:f5:c9:d1:a5:71:57:d5:62:8e: cf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139649 sbgp-ipAddrBlock: critical IPv6: 2402:3660::/32 Signature Algorithm: sha256WithRSAEncryption 6b:5d:a6:9e:68:cd:f9:36:89:68:39:d7:ba:9d:54:f1:2a:a2: a2:66:14:82:cc:0f:d0:64:9b:78:09:38:08:1c:7d:bc:d5:1c: bd:08:5b:1c:a7:a4:96:c5:f0:9a:bf:6a:8e:15:93:c0:67:03: 6f:12:27:1a:43:0d:ba:fc:98:d1:c8:8a:05:73:db:35:2b:b8: 8f:3a:15:c2:a0:03:6b:01:cf:b0:b8:99:05:71:d8:f9:93:b6: bc:18:4a:02:1b:fd:96:4f:ce:4c:cd:38:02:ef:7f:4b:86:de: a8:0e:85:48:57:5e:ae:56:e6:5b:d0:4a:31:5d:aa:fc:09:bf: a3:16:ce:be:9d:67:4e:82:03:1f:0a:82:46:03:2f:a1:43:16: c8:a5:8a:5f:83:eb:63:d8:c8:5e:12:8c:db:f3:5d:76:39:6e: 19:87:a4:c0:bd:53:7a:ee:ad:ea:3b:d3:8b:99:0c:a2:b3:50: dc:cb:3b:91:a0:05:d6:aa:a7:4a:ff:cb:33:4a:b2:67:08:02: 19:9d:e4:ab:3e:f2:7a:44:f3:8d:0c:be:c7:d8:20:f9:5c:ec: 38:37:05:a4:9c:af:e2:3c:a1:40:e4:95:0b:56:c6:f6:6e:40: f8:7a:53:7f:5d:92:65:8d:43:f4:4b:b2:d1:31:5d:f9:ce:e5: 1d:5f:3a:04 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAngUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNTIzNDgyNVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxNDIxODcxMTAvBgNVBAUTKDY1QTFEMjVBRkI2NkE3NkU3OTRBOTY2 RkYzM0I2QjA2MEM3RjgwREYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ3TJefdQpF0eW2y/QioK2NQyP1g3NDHhCFtGtdJXsoB4vW2ieUk+XsUeTs8UK 6JRhvZKj+oljb/6ASH9Uiy7vyme+MUqj3xcZGqdGiKEdEW9VlqTF1ih/MDqcDisV QA6Krj9e1OKCNvaOVpJnzHzpnU2Q5zi4I8QSuJQutqGfzjNFO0r0nzSWDVH4T5fl /f9TKbzmk0PxLvVr/Kq+TVytOtlJ6PIscWnXMvYH4C7Mmss2h3yh2PQdvj43gDOZ qm02DTVosaDQAdWAr3c5LrOAp9V1xyR6kIdJYNDiAi114xrZDMsXohaqUe1+gGwd b1C6ZgWXGvXJ0aVxV9Vijs8BAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUZaHSWvtm p255SpZv8ztrBgx/gN8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTQyMTg3LzM5MkMxODI2Q0E1OTExRjBBNzNBODQ2QkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0MjE4Ny8zOTJDMTgyNkNBNTkxMUYwQTczQTg0NkJDNEY5QUUwMi9aYUhTV3Z0 bXAyNTVTcFp2OHp0ckJneF9nTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAiGBMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAI2YDANBgkq hkiG9w0BAQsFAAOCAQEAa12mnmjN+TaJaDnXup1U8SqiomYUgswP0GSbeAk4CBx9 vNUcvQhbHKeklsXwmr9qjhWTwGcDbxInGkMNuvyY0ciKBXPbNSu4jzoVwqADawHP sLiZBXHY+ZO2vBhKAhv9lk/OTM04Au9/S4beqA6FSFderlbmW9BKMV2q/Am/oxbO vp1nToIDHwqCRgMvoUMWyKWKX4PrY9jIXhKM2/NddjluGYekwL1Teu6t6jvTi5kM orNQ3Ms7kaAF1qqnSv/LM0qyZwgCGZ3kqz7yekTzjQy+x9gg+VzsODcFpJyv4jyh QOSVC1bG9m5A+HpTf12SZY1D9Euy0TFd+c7lHV86BA== -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:17 2025 by rpki-client