This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer File: ZKte21ESYrc2r4F0HU1zFBTTSlc.cer (raw, json) Hash identifier: Iq3RpSgZaymQP0NpmnORsxtmCzMF22JT5iikECHhH8w= Subject key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027BAA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft caRepository: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 04 Dec 2025 03:23:46 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 24033 AS: 45776 IP: 116.250.0.0 -- 116.251.63.255 IP: 119.77.64.0/19 IP: 123.100.32.0/19 IP: 202.171.96.0/20 IP: 203.213.224.0/19 IP: 2402:d900::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162730 (0x27baa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 4 03:23:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:a3:b1:34:66:3f:76:58:9a:51:b4:e2:6a: d3:1e:c5:0e:54:e9:2a:2d:eb:a6:56:38:9d:6d:1e: 94:7e:e8:ad:ef:d4:77:4b:b2:56:cb:e3:24:00:42: 7b:33:17:76:22:ba:ca:3d:c2:e2:1b:b7:95:9b:d8: 38:90:98:dc:5b:89:32:54:0c:6b:c2:e6:ab:16:9f: a1:e9:bd:10:39:06:cf:87:1b:6b:62:8f:60:c4:9a: e0:d0:04:2e:0d:52:05:92:be:fd:5c:60:48:41:af: 63:c7:e4:01:7c:8c:bf:9e:1a:8c:05:3a:75:e7:ec: 5c:b5:53:01:65:a4:6c:45:62:ce:b0:d0:8e:61:ef: b6:8b:a5:81:a8:82:b9:c8:c2:3c:de:d1:fe:26:07: 64:9d:b1:67:f5:aa:0c:44:58:44:05:3b:8c:fa:cd: 7d:9f:48:dc:d1:1a:2e:58:5d:69:c5:e6:ec:67:4a: 46:65:d7:02:d4:0d:a6:03:84:36:ea:be:8f:be:08: 10:0e:c0:a4:64:c3:de:be:e4:9c:1d:76:5a:d1:f5: b1:25:3e:72:fa:1a:a2:29:92:d0:ea:5d:c0:0b:51: 75:26:4f:fb:78:af:21:66:f8:d0:ce:c1:cc:b0:0a: a4:40:1f:7b:df:f7:81:db:40:8b:ac:2e:19:f3:4f: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 24033 45776 sbgp-ipAddrBlock: critical IPv4: 116.250.0.0-116.251.63.255 119.77.64.0/19 123.100.32.0/19 202.171.96.0/20 203.213.224.0/19 IPv6: 2402:d900::/32 Signature Algorithm: sha256WithRSAEncryption a4:a8:d0:c4:e4:b1:b3:d5:83:82:a9:cb:a4:47:d3:c2:a9:97: 5c:48:12:cd:81:f0:4d:b3:34:71:09:2d:c3:92:e7:c9:e6:ec: a7:99:b0:b2:01:dd:ae:b3:bd:fb:fd:a6:a8:8f:07:6f:d4:fc: 01:c0:f4:bd:3b:6b:d1:19:88:4b:a3:ff:19:59:ee:c0:6d:49: 1e:f9:b1:42:65:a8:59:97:ef:59:78:59:11:da:1e:8f:37:12: cd:c5:2d:ae:08:aa:f4:88:d5:ca:61:da:32:ca:ce:42:73:98: d8:c0:cc:e2:48:54:54:b1:92:4d:d4:9b:73:36:3c:71:d0:24: d8:db:3c:36:f5:c2:52:27:75:6f:a2:e2:b2:f2:6b:b0:7d:01: af:fd:1a:b2:34:8e:c5:bd:74:7e:5c:b2:f5:24:c8:83:cc:5f: cc:ef:c0:b4:d0:09:93:b3:85:1a:39:a3:80:96:11:70:13:64: 9a:13:c5:b9:6b:7b:fc:c0:f0:e1:7b:04:ee:de:93:69:74:73: 3d:08:58:80:0b:4b:64:a8:c0:4e:59:94:d1:84:d2:f2:88:9f: 2e:f5:25:ff:03:7b:20:8b:b2:9f:d4:0f:8b:34:6d:cc:f6:8f: 90:c1:78:22:3f:d8:67:96:64:25:03:ac:f8:46:c6:2a:f9:10: 81:ba:71:ab -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIDAnuqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwNDAzMjM0NloXDTI2MDcwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxREQxMUExMTAvBgNVBAUTKDY0QUI1RURCNTExMjYyQjczNkFGODE3 NDFENEQ3MzE0MTREMzRBNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+4KOxNGY/dliaUbTiatMexQ5U6Sot66ZWOJ1tHpR+6K3v1HdLslbL4yQAQnsz F3Yiuso9wuIbt5Wb2DiQmNxbiTJUDGvC5qsWn6HpvRA5Bs+HG2tij2DEmuDQBC4N UgWSvv1cYEhBr2PH5AF8jL+eGowFOnXn7Fy1UwFlpGxFYs6w0I5h77aLpYGogrnI wjze0f4mB2SdsWf1qgxEWEQFO4z6zX2fSNzRGi5YXWnF5uxnSkZl1wLUDaYDhDbq vo++CBAOwKRkw96+5JwddlrR9bElPnL6GqIpktDqXcALUXUmT/t4ryFm+NDOwcyw CqRAH3vf94HbQIusLhnzT2NpAgMBAAGjggNBMIIDPTAdBgNVHQ4EFgQUZKte21ES Yrc2r4F0HU1zFBTTSlcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUREMTFBL0EyM0YyM0I4RDBDMDExRjA4MTVBRjA2NEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFERDExQS9BMjNGMjNCOEQwQzAxMUYwODE1QUYwNjRDNEY5QUUwMi9aS3RlMjFF U1lyYzJyNEYwSFUxekZCVFRTbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICXeECAwCy0DBNBggrBgEFBQcBBwEB/wQ+MDwwKwQCAAEwJTALAwMBdPoD BAZ0+wADBAV3TUADBAV7ZCADBATKq2ADBAXL1eAwDQQCAAIwBwMFACQC2QAwDQYJ KoZIhvcNAQELBQADggEBAKSo0MTksbPVg4Kpy6RH08Kpl1xIEs2B8E2zNHEJLcOS 58nm7KeZsLIB3a6zvfv9pqiPB2/U/AHA9L07a9EZiEuj/xlZ7sBtSR75sUJlqFmX 71l4WRHaHo83Es3FLa4IqvSI1cph2jLKzkJzmNjAzOJIVFSxkk3Um3M2PHHQJNjb PDb1wlIndW+i4rLya7B9Aa/9GrI0jsW9dH5csvUkyIPMX8zvwLTQCZOzhRo5o4CW EXATZJoTxblre/zA8OF7BO7ek2l0cz0IWIALS2SowE5ZlNGE0vKIny71Jf8DeyCL sp/UD4s0bcz2j5DBeCI/2GeWZCUDrPhGxir5EIG6cas= -----END CERTIFICATE-----Generated at Fri Dec 19 16:06:41 2025 by rpki-client