This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer File: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer (raw, json) Hash identifier: q0X3F5/lTKzqVAfag8xE9/p3O4J5E3MPDM9vPMeS78U= Subject key identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027484 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 11 Nov 2025 13:15:31 +0000 Certificate not after: Wed 30 Dec 2026 00:00:00 +0000 Subordinate resources: AS: 149165 IP: 103.177.88.0/23 IP: 2400:3f20::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Nov 2025 17:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160900 (0x27484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 11 13:15:31 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=A911E93B, serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cd:cc:df:28:18:f8:a7:0f:f6:6e:87:85:16: ca:be:36:14:e5:89:cd:f4:38:80:8f:75:1b:c4:6b: 13:62:59:05:cd:a9:05:79:d5:ea:e8:f2:23:83:62: 0b:fa:62:2b:74:35:14:31:be:4b:81:3e:ee:85:27: 8a:da:08:50:c1:65:44:d5:cf:22:67:f1:21:58:a4: 0f:2a:09:90:c4:60:25:98:6d:4b:52:ae:b5:d9:c0: 48:f3:bf:92:c0:67:9d:18:40:35:d0:9f:85:d7:7b: b9:67:3b:88:20:24:f7:df:2b:a9:57:c7:d3:32:a7: 52:a5:bd:79:0d:6d:9b:ad:29:a1:d2:33:84:a2:54: c6:f8:55:fa:77:ab:c6:14:98:f6:d1:39:35:9e:27: bc:1e:5d:58:17:52:eb:37:0f:3d:50:69:f4:e2:8d: 34:33:68:5f:b6:56:69:e8:6e:9a:e1:37:ad:89:c8: 74:51:a1:f9:8a:74:15:3a:dc:b0:6d:38:53:b4:ce: 32:bb:58:81:ed:f3:89:86:c7:0f:46:36:aa:87:5d: 93:d7:68:4a:e7:a7:9a:77:4e:cc:89:d3:83:4a:e3: 1f:fa:cc:86:cb:5a:b6:3f:03:40:d2:4e:07:f3:90: 6c:cb:ee:3b:5f:8d:ff:a0:cf:47:29:ff:d8:83:dc: e3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 149165 sbgp-ipAddrBlock: critical IPv4: 103.177.88.0/23 IPv6: 2400:3f20::/32 Signature Algorithm: sha256WithRSAEncryption d9:5b:db:d3:2b:2d:e0:1f:e8:18:b5:00:09:96:bf:0b:7f:02: c8:4d:4a:c2:ae:4d:74:58:db:9b:fd:8a:1e:f7:a1:0c:35:83: 68:29:b8:54:3b:a2:79:d1:49:ed:7a:ea:80:0c:01:d7:1c:5b: bd:b3:3e:0f:83:0a:af:ed:4d:f7:36:ee:63:a1:dc:32:14:a0: e8:97:ee:75:74:8d:08:91:70:b1:6d:f4:7c:34:79:6f:52:10: 52:a5:3f:84:78:a7:1c:3f:4b:9d:d2:27:9f:79:17:e1:72:6b: f1:c7:d6:a9:d2:28:81:1d:99:68:49:06:df:65:3c:dc:15:18: 51:a5:4b:db:2d:02:0a:85:a0:58:33:33:f6:60:3a:3e:85:0f: 41:98:d9:35:7f:8a:d0:ad:aa:c5:c2:a2:c8:1c:6a:49:a0:00: 86:55:ab:b9:b7:4f:98:7f:ce:0c:a7:f5:a1:a6:8b:5f:da:40: f2:41:d5:71:d5:07:5a:d9:a4:0d:22:eb:80:b6:00:4d:dd:52: 53:94:f4:75:f3:19:27:55:eb:e7:25:7e:e3:c7:36:c2:24:d4: 5e:e7:5a:1a:7e:cc:5a:c3:02:83:73:e1:5e:d2:a3:3b:ce:78: ea:69:ba:c4:30:80:ba:78:20:02:36:9f:41:42:fd:bd:74:b1: 40:b3:0d:d7 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnSEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExMTEzMTUzMVoXDTI2MTIzMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxMUU5M0IxMTAvBgNVBAUTKENERjZFNTY1NDQzNUIzQzg0REZBMTBC OUJDODcxMEU5RUJCMEQ1OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlzczfKBj4pw/2boeFFsq+NhTlic30OICPdRvEaxNiWQXNqQV51ero8iODYgv6 Yit0NRQxvkuBPu6FJ4raCFDBZUTVzyJn8SFYpA8qCZDEYCWYbUtSrrXZwEjzv5LA Z50YQDXQn4XXe7lnO4ggJPffK6lXx9Myp1KlvXkNbZutKaHSM4SiVMb4Vfp3q8YU mPbROTWeJ7weXVgXUus3Dz1QafTijTQzaF+2VmnobprhN62JyHRRofmKdBU63LBt OFO0zjK7WIHt84mGxw9GNqqHXZPXaErnp5p3TsyJ04NK4x/6zIbLWrY/A0DSTgfz kGzL7jtfjf+gz0cp/9iD3OPbAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUzfblZUQ1 s8hN+hC5vIcQ6euw1ZQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTFFOTNCLzdEQkFEMUVFQkYwMDExRjBCQ0MxNUQ1REM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTExRTkzQi83REJBRDFFRUJGMDAxMUYwQkNDMTVENURDNEY5QUUwMi96ZmJsWlVR MXM4aE4taEM1dkljUTZldXcxWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAkatMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBZ7FYMA0EAgAC MAcDBQAkAD8gMA0GCSqGSIb3DQEBCwUAA4IBAQDZW9vTKy3gH+gYtQAJlr8LfwLI TUrCrk10WNub/Yoe96EMNYNoKbhUO6J50UnteuqADAHXHFu9sz4Pgwqv7U33Nu5j odwyFKDol+51dI0IkXCxbfR8NHlvUhBSpT+EeKccP0ud0iefeRfhcmvxx9ap0iiB HZloSQbfZTzcFRhRpUvbLQIKhaBYMzP2YDo+hQ9BmNk1f4rQrarFwqLIHGpJoACG Vau5t0+Yf84Mp/Whpotf2kDyQdVx1Qda2aQNIuuAtgBN3VJTlPR18xknVevnJX7j xzbCJNRe51oafsxawwKDc+Fe0qM7znjqabrEMIC6eCACNp9BQv29dLFAsw3X -----END CERTIFICATE-----Generated at Sat Nov 22 21:36:51 2025 by rpki-client