This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer File: zPKlJcCQFETKePBbk5LABFeVZ2E.cer (raw, json) Hash identifier: cRlzXqNYnwJB/VE1q56Va9Q+9Ju/uXfvPTWH5XhSQSY= Subject key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027CC5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft caRepository: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 15:25:11 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 58744 IP: 103.31.96.0/22 IP: 2402:9880::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163013 (0x27cc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 8 15:25:11 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:61:2d:6a:2a:c7:09:ce:6d:00:44:8a:88: 3b:7a:b2:ae:23:80:31:ed:18:eb:fe:7a:93:fd:92: 25:2f:08:e4:76:dd:f9:fc:9f:ea:4d:75:0b:77:4e: 16:c9:89:f8:59:5c:7b:54:06:2d:98:ec:c9:25:2d: c7:09:c0:ae:1a:76:9c:41:eb:20:13:e7:41:ae:f8: 29:14:db:4b:00:95:fd:f0:81:1b:61:0b:03:22:ad: 2e:cd:a4:f9:33:72:ee:bd:46:22:dc:ca:88:6f:77: ee:3b:96:35:5c:f1:cb:04:53:41:75:ca:99:22:49: be:b0:70:10:9a:82:a5:91:7b:db:1a:b5:34:05:76: 35:7f:9c:1a:1b:ae:b6:95:c3:d2:4e:34:75:5b:96: 6d:f0:16:7b:a2:ee:79:1e:0a:2d:6b:c6:7a:ab:8e: 1e:c4:42:b0:85:db:e1:36:25:3a:91:5b:c3:de:f8: 3d:62:93:dc:1c:ba:be:7c:a8:30:4c:fd:b2:96:29: b6:d2:56:9b:42:82:de:d8:4b:e3:64:56:fe:70:20: 27:ea:5c:e8:b4:f1:c3:a9:e8:f2:40:0d:86:9d:93: de:15:27:9e:fd:a2:36:b1:1d:ad:e7:d2:de:2d:3b: b7:4d:56:22:e0:c1:2f:68:e6:72:55:0a:45:44:d4: e9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 58744 sbgp-ipAddrBlock: critical IPv4: 103.31.96.0/22 IPv6: 2402:9880::/32 Signature Algorithm: sha256WithRSAEncryption 16:85:18:37:60:79:d4:5d:50:06:c6:72:d4:d4:50:16:6d:41: 77:7e:3c:46:df:8e:36:61:3c:66:cd:9d:39:e6:d5:6e:0d:5f: d3:b6:a7:8d:e7:39:69:56:46:69:eb:14:4e:7f:95:fe:7f:c9: 7f:e7:38:84:fc:27:4d:d4:17:53:91:3b:a2:52:2c:ce:99:e2: fd:02:d0:c4:94:12:ca:9a:86:7c:ad:8b:f4:a4:fa:93:0f:e9: ec:c1:dd:e1:cb:3f:40:b8:89:47:d5:30:cc:85:48:b9:9a:ed: 28:9c:21:f7:de:5d:39:94:6a:01:78:8b:c2:e8:9d:83:ed:19: 16:4e:76:5a:37:b9:c1:0b:5f:a2:6c:34:55:42:38:c3:b3:08: a6:20:74:b5:03:77:47:f6:8e:79:c8:03:e0:90:4d:29:b2:2a: 54:d1:1b:15:ba:07:6b:da:a7:fb:42:f2:bf:ab:dd:33:87:51: 71:b5:8e:ad:1c:bd:c6:99:39:d8:52:0b:3f:3f:ff:4d:cc:b0: a6:83:83:af:57:2c:1a:47:0d:fe:10:eb:6b:da:23:a5:54:9a: e7:df:32:2f:26:d5:32:9d:ef:92:ce:e9:cc:7a:e8:47:5c:a6: 55:31:c8:79:90:e6:f8:d2:3e:a2:fe:1b:2c:06:e0:7f:0b:4f: d0:44:bb:81 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnzFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwODE1MjUxMVoXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1 QjkzOTJDMDA0NTc5NTY3NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM2mEtairHCc5tAESKiDt6sq4jgDHtGOv+epP9kiUvCOR23fn8n+pNdQt3ThbJ ifhZXHtUBi2Y7MklLccJwK4adpxB6yAT50Gu+CkU20sAlf3wgRthCwMirS7NpPkz cu69RiLcyohvd+47ljVc8csEU0F1ypkiSb6wcBCagqWRe9satTQFdjV/nBobrraV w9JONHVblm3wFnui7nkeCi1rxnqrjh7EQrCF2+E2JTqRW8Pe+D1ik9wcur58qDBM /bKWKbbSVptCgt7YS+NkVv5wICfqXOi08cOp6PJADYadk94VJ579ojaxHa3n0t4t O7dNViLgwS9o5nJVCkVE1On1AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUzPKlJcCQ FETKePBbk5LABFeVZ2EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZBMDcxLzI4MEIwOUE0ODNCRTExRUE4RTFERjM4NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE2QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmND UUZFVEtlUEJiazVMQUJGZVZaMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAOV4MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZx9gMA0EAgAC MAcDBQAkApiAMA0GCSqGSIb3DQEBCwUAA4IBAQAWhRg3YHnUXVAGxnLU1FAWbUF3 fjxG3442YTxmzZ055tVuDV/TtqeN5zlpVkZp6xROf5X+f8l/5ziE/CdN1BdTkTui UizOmeL9AtDElBLKmoZ8rYv0pPqTD+nswd3hyz9AuIlH1TDMhUi5mu0onCH33l05 lGoBeIvC6J2D7RkWTnZaN7nBC1+ibDRVQjjDswimIHS1A3dH9o55yAPgkE0psipU 0RsVugdr2qf7QvK/q90zh1FxtY6tHL3GmTnYUgs/P/9NzLCmg4OvVywaRw3+EOtr 2iOlVJrn3zIvJtUyne+SzunMeuhHXKZVMch5kOb40j6i/hssBuB/C0/QRLuB -----END CERTIFICATE-----Generated at Sun Dec 21 03:19:44 2025 by rpki-client