This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer (raw, json) Hash identifier: SOtf3T5/32dWdy0RC65717NgZ3fsdZgbvaKPh8hxLo4= Subject key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027CB0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 08 Dec 2025 13:27:26 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 45531 IP: 103.246.20.0/22 IP: 203.170.20.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162992 (0x27cb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 8 13:27:26 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6b:a0:50:89:2d:6c:18:db:7f:cc:3c:91:12: a8:d2:f0:17:76:33:be:2e:bb:57:2a:6d:cc:0e:18: 2d:2c:08:4c:9f:a6:3d:53:ce:d4:d3:56:e5:6a:cf: ab:64:87:7c:31:c3:b3:66:11:61:37:a8:49:fe:d2: 6e:e8:2d:8a:4a:70:27:10:47:d6:a9:af:6f:0f:56: 5a:08:b1:d1:2a:c6:6b:58:53:0b:55:e8:d8:24:05: b2:9a:6b:50:65:58:0f:c5:1c:12:ed:50:ca:18:a6: 78:fe:1e:7b:6f:ae:72:62:66:6f:65:62:6c:30:98: 7d:f2:0a:0f:37:18:6f:87:de:37:de:2c:64:7d:10: 25:49:cd:52:5d:72:4a:27:eb:31:89:fd:77:25:c4: 1b:9a:1c:8c:88:f0:79:9f:1c:e2:2a:c2:e2:e1:8e: 55:bc:e6:89:9e:41:9d:a7:5a:d5:4c:19:09:37:f0: 2a:15:f3:6b:ed:00:b0:d2:f1:71:f7:c5:76:84:3a: 68:0b:e2:90:87:db:d3:b1:64:e9:39:1e:49:54:09: e2:2a:8b:12:00:51:fb:54:c2:e1:4e:87:18:78:6c: a0:9e:3f:0d:bf:cd:13:99:c6:7f:82:e1:be:4d:65: d0:24:c5:5e:df:ac:2a:3a:75:d6:e0:4e:2d:b5:b5: 25:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45531 sbgp-ipAddrBlock: critical IPv4: 103.246.20.0/22 203.170.20.0/22 Signature Algorithm: sha256WithRSAEncryption d2:a2:9e:1a:fc:c2:41:38:59:e4:d3:bd:14:34:34:0c:ba:90: e3:a5:8b:01:c2:64:6f:d1:8c:44:1b:6e:33:7d:aa:e8:93:53: 2e:dc:f9:85:48:0e:53:7c:b1:81:d4:00:a2:f8:7e:5f:d7:f5: 8a:83:32:8c:54:87:91:45:b6:72:13:a8:0c:78:20:f2:c0:65: ea:b8:1e:b4:f6:43:0a:41:94:10:9b:1f:ee:4e:5e:26:88:bf: f9:af:73:1a:e8:6a:6a:94:15:23:4b:b3:38:a0:bd:37:62:23: 4f:eb:97:ee:fa:a0:23:8d:e7:80:37:a5:f8:63:3d:18:ac:c3: 5b:37:97:83:1b:4d:fe:27:94:b5:b6:f5:c5:af:07:04:ae:05: 81:6b:85:09:ff:64:aa:7d:b2:41:3a:21:d4:06:40:92:2b:91: 01:a0:b1:95:48:ef:5f:c1:48:6a:b7:30:9d:22:06:b2:d5:a2: 9a:83:1a:c5:9e:2c:48:56:18:81:d8:3e:46:0b:13:f2:af:db: a0:16:ae:be:2e:be:e3:ec:b2:8e:de:de:77:84:23:66:d0:dd: d6:d2:f0:4d:9b:39:c0:24:ec:51:dd:68:46:c6:fe:09:33:08: 04:53:95:b9:e7:63:66:c4:d9:cd:18:a3:f3:50:54:9c:6b:f7: 83:d7:8b:5b -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAnywMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIwODEzMjcyNloXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxNEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFG M0M5OUJDNDdCOTlGREQ0NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDka6BQiS1sGNt/zDyREqjS8Bd2M74uu1cqbcwOGC0sCEyfpj1TztTTVuVqz6tk h3wxw7NmEWE3qEn+0m7oLYpKcCcQR9apr28PVloIsdEqxmtYUwtV6NgkBbKaa1Bl WA/FHBLtUMoYpnj+HntvrnJiZm9lYmwwmH3yCg83GG+H3jfeLGR9ECVJzVJdckon 6zGJ/XclxBuaHIyI8HmfHOIqwuLhjlW85omeQZ2nWtVMGQk38CoV82vtALDS8XH3 xXaEOmgL4pCH29OxZOk5HklUCeIqixIAUftUwuFOhxh4bKCePw2/zROZxn+C4b5N ZdAkxV7frCo6ddbgTi21tSUBAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUZPb3hrjs hpx2aGrzyZvEe5n91EQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRFM0Y4L0RDNEE0RTEwQTZERDExRUFBQUI4NzM2MUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJq c2hweDJhR3J6eVp2RWU1bjkxRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALHbMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCZ/YUAwQCy6oU MA0GCSqGSIb3DQEBCwUAA4IBAQDSop4a/MJBOFnk070UNDQMupDjpYsBwmRv0YxE G24zfarok1Mu3PmFSA5TfLGB1ACi+H5f1/WKgzKMVIeRRbZyE6gMeCDywGXquB60 9kMKQZQQmx/uTl4miL/5r3Ma6GpqlBUjS7M4oL03YiNP65fu+qAjjeeAN6X4Yz0Y rMNbN5eDG03+J5S1tvXFrwcErgWBa4UJ/2SqfbJBOiHUBkCSK5EBoLGVSO9fwUhq tzCdIgay1aKagxrFnixIVhiB2D5GCxPyr9ugFq6+Lr7j7LKO3t53hCNm0N3W0vBN mznAJOxR3WhGxv4JMwgEU5W552NmxNnNGKPzUFSca/eD14tb -----END CERTIFICATE-----Generated at Fri Dec 19 16:05:06 2025 by rpki-client