This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer File: zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer (raw, json) Hash identifier: qu5Qi0LWYLNIUB3iafCn/jsGgjzlsRIXu3VfXVPMfX0= Subject key identifier: CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02854B Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft caRepository: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Sun 11 Jan 2026 09:38:59 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 154321 IP: 2001:df6:40c0::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165195 (0x2854b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 11 09:38:59 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91E8FFF, serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0e:1a:ee:b5:c5:a2:3e:66:f8:b6:e8:9c:b9: 89:a8:4a:2e:dd:f2:3a:d9:82:dc:62:50:ed:24:9a: 76:64:24:b4:f7:fc:48:2c:eb:ed:ec:64:3b:23:1a: 7b:b2:e8:32:7f:92:be:c4:75:74:0f:6f:fb:a6:01: 76:00:a6:b9:b7:3d:22:f6:02:4d:eb:41:39:33:81: 8f:79:7f:6c:ce:46:4a:54:5d:b9:6c:b8:96:44:47: 2b:37:db:f2:34:8d:97:64:da:14:e1:c0:6e:52:52: 2b:96:2b:74:96:91:34:91:7e:85:22:17:d7:5a:8e: fb:0d:60:e7:d9:c4:4b:b8:a6:06:a5:fc:82:5d:ea: 8f:ce:f1:8c:6c:e1:fe:07:29:20:03:c8:91:75:4e: 11:ff:15:0b:cf:04:fb:23:e1:d8:91:fc:cb:b3:1a: 06:a3:3e:39:3c:f5:3e:e5:4e:35:7d:13:10:74:49: d5:20:ad:0a:df:30:89:c4:39:f7:8e:76:f0:a6:2d: 48:fa:1a:de:b2:32:10:7d:38:32:66:95:c9:2d:2b: 4b:3f:bf:2d:32:8d:c3:6e:d5:41:af:f5:23:02:ef: 45:a5:0d:32:1e:62:fb:67:49:37:b7:f6:06:fa:f1: b0:ed:5b:f8:de:6f:82:df:bd:7a:57:a1:b2:a3:09: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154321 sbgp-ipAddrBlock: critical IPv6: 2001:df6:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 9f:02:df:fe:a2:bd:34:66:02:6e:88:4c:ac:92:06:dc:d0:f4: b9:8e:67:06:99:81:64:0d:84:ba:15:1c:55:c1:2a:d3:8e:6f: 57:e8:78:9e:bb:a5:d5:6f:7a:b0:77:77:a7:f6:99:7c:da:04: 55:f3:ed:51:d8:ef:ba:f1:25:49:04:2a:0f:af:2d:1f:7a:62: c0:00:c8:0a:6c:0d:4a:bf:f4:90:73:10:d1:18:77:9b:17:3f: 68:f6:20:03:cd:8e:72:3f:f5:4a:ff:05:35:eb:a3:0f:fa:6e: c6:fc:f3:68:e5:dd:03:3b:27:ff:37:1e:1e:fa:e6:3c:d4:02: cc:0a:aa:4a:60:cc:04:fa:fd:a3:cd:ee:ef:93:cc:90:69:92: 2e:f6:b4:18:71:18:84:7f:53:20:a1:0f:b2:15:54:f4:c9:c5: d1:33:3e:d6:44:b5:05:1f:51:f3:5f:37:e0:c2:02:b9:b3:8c: 2e:fb:3c:3d:d7:2e:7a:24:dd:de:57:93:66:ac:3b:e7:df:50: db:0e:ff:f5:7a:70:a6:c7:58:99:92:e0:7b:07:07:c5:3c:cb: b0:1b:43:2d:11:30:f6:5f:3f:fe:dc:dd:34:39:a3:e4:ee:62: eb:11:b2:98:91:30:2e:46:33:cd:72:38:50:29:28:06:3e:6d: e0:82:17:4d -----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIDAoVLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDExMTA5Mzg1OVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRThGRkYxMTAvBgNVBAUTKENDOUYyRkJCRkFFREM0NEM3NjMyQjE4 QzJCRDNCQzU4RUNFRDdCRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTDhrutcWiPmb4tuicuYmoSi7d8jrZgtxiUO0kmnZkJLT3/Egs6+3sZDsjGnuy 6DJ/kr7EdXQPb/umAXYAprm3PSL2Ak3rQTkzgY95f2zORkpUXblsuJZERys32/I0 jZdk2hThwG5SUiuWK3SWkTSRfoUiF9dajvsNYOfZxEu4pgal/IJd6o/O8Yxs4f4H KSADyJF1ThH/FQvPBPsj4diR/MuzGgajPjk89T7lTjV9ExB0SdUgrQrfMInEOfeO dvCmLUj6Gt6yMhB9ODJmlcktK0s/vy0yjcNu1UGv9SMC70WlDTIeYvtnSTe39gb6 8bDtW/jeb4LfvXpXobKjCdiRAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUzJ8vu/rt xEx2MrGMK9O8WOzte/UwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUU4RkZGLzU5MTNFMjYyRUVEMTExRjBCMEFDRDI3NjczNkY1NkJDLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFOEZGRi81OTEzRTI2MkVFRDExMUYwQjBBQ0QyNzY3MzZGNTZCQy96Sjh2dV9y dHhFeDJNckdNSzlPOFdPenRlX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlrRMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9kDAMA0G CSqGSIb3DQEBCwUAA4IBAQCfAt/+or00ZgJuiEyskgbc0PS5jmcGmYFkDYS6FRxV wSrTjm9X6Hieu6XVb3qwd3en9pl82gRV8+1R2O+68SVJBCoPry0femLAAMgKbA1K v/SQcxDRGHebFz9o9iADzY5yP/VK/wU166MP+m7G/PNo5d0DOyf/Nx4e+uY81ALM CqpKYMwE+v2jze7vk8yQaZIu9rQYcRiEf1MgoQ+yFVT0ycXRMz7WRLUFH1HzXzfg wgK5s4wu+zw91y56JN3eV5NmrDvn31DbDv/1enCmx1iZkuB7BwfFPMuwG0MtETD2 Xz/+3N00OaPk7mLrEbKYkTAuRjPNcjhQKSgGPm3gghdN -----END CERTIFICATE-----Generated at Sun Jan 18 05:36:13 2026 by rpki-client