This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer File: zdfMWZTjQE5sI66UKlkhi1fFwTE.cer (raw, json) Hash identifier: Tf6CkQPEBjPHt/2cfvfymLZGizVUdDTp+8hyhvBLcL4= Subject key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0276F8 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft caRepository: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 21 Nov 2025 17:57:07 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 134716 AS: 137418 AS: 137420 IP: 103.197.200.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161528 (0x276f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 21 17:57:07 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9d:41:41:4d:0f:4e:f6:e9:27:68:fc:53:55: c1:0f:33:c5:9e:1d:3f:bf:46:60:f5:6e:fe:ad:38: ca:7c:c4:af:83:c6:b0:c8:82:21:c5:69:18:c2:92: ee:a8:e5:cd:e3:08:83:be:bd:7e:6d:23:76:a8:14: ca:55:27:ed:c7:8c:54:38:af:d8:06:04:3c:44:82: e8:4d:bf:4b:23:9e:c2:27:c9:c7:e6:2e:b0:02:57: 50:82:c4:78:62:b6:1e:7a:5d:d4:57:f7:bb:16:02: 5a:d0:41:75:27:81:94:eb:e8:a1:b3:0d:ad:0c:00: b6:d5:97:c4:cc:a7:60:39:c5:bd:e9:7b:91:98:8b: f3:63:e2:0e:44:d4:39:10:9a:72:33:d0:08:f8:61: c2:27:96:a8:77:4a:de:a0:9f:96:02:a6:7c:51:f2: 78:1a:aa:d5:20:f8:0c:f0:87:bf:05:fd:df:3b:3b: c2:fc:dc:06:f5:a6:df:32:91:70:b8:2a:6f:08:8d: cb:3a:b5:2f:b1:c5:fc:c6:5e:9d:a6:8e:4e:57:70: 66:52:4d:9a:71:3d:1f:d3:60:9d:9c:65:7b:42:08: 0b:9a:61:b4:35:8b:8a:3c:95:9a:73:68:e9:8d:ea: 13:59:d5:10:eb:2b:b9:1d:83:8d:cf:3d:fa:3f:99: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 134716 137418 137420 sbgp-ipAddrBlock: critical IPv4: 103.197.200.0/22 Signature Algorithm: sha256WithRSAEncryption 65:ad:b9:a4:73:f3:fb:0d:c3:1d:5e:7e:a4:e7:f5:6d:41:ee: d0:09:a8:bd:89:c6:0b:ac:aa:60:70:8f:35:c9:98:29:49:49: 95:0d:72:4f:ce:70:da:24:92:f2:b6:49:8c:65:f9:14:0c:47: 5a:aa:2b:95:e5:07:7c:62:e5:1d:93:15:18:67:d0:a7:67:65: fe:ff:a5:39:d7:86:14:e9:98:8d:08:7c:ec:48:62:08:7a:61: cc:29:57:ba:0c:47:b6:3c:60:46:f6:c0:9e:59:b6:0c:10:3c: 01:02:6b:15:0d:12:b2:b3:c5:35:29:bd:61:a2:c4:f6:21:b8: e4:56:ea:65:42:f3:77:65:96:6a:69:01:25:05:2c:01:f2:73: 18:3e:cb:4e:6f:55:d6:cf:55:00:52:90:d9:6f:4d:0d:a5:8c: 24:4d:47:89:0d:14:c5:4c:5d:18:70:0e:e7:46:33:2b:c9:c3: 9a:b4:a5:86:52:72:8c:5d:55:ce:b9:78:d4:8d:6c:cc:ee:26: 5d:f9:a3:66:d3:eb:9a:5f:eb:53:d0:98:34:d6:eb:cb:19:30: f3:94:a7:cb:2c:fe:f7:bf:08:8a:a2:03:04:1e:03:45:92:28: 79:43:0a:c9:e4:10:51:e4:97:e0:b0:d1:54:61:51:c2:81:d7: 41:46:50:22 -----BEGIN CERTIFICATE----- MIIGJDCCBQygAwIBAgIDAnb4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMTE3NTcwN1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRUE2QTExMTAvBgNVBAUTKENERDdDQzU5OTRFMzQwNEU2QzIzQUU5 NDJBNTkyMThCNTdDNUMxMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDknUFBTQ9O9uknaPxTVcEPM8WeHT+/RmD1bv6tOMp8xK+DxrDIgiHFaRjCku6o 5c3jCIO+vX5tI3aoFMpVJ+3HjFQ4r9gGBDxEguhNv0sjnsInycfmLrACV1CCxHhi th56XdRX97sWAlrQQXUngZTr6KGzDa0MALbVl8TMp2A5xb3pe5GYi/Nj4g5E1DkQ mnIz0Aj4YcInlqh3St6gn5YCpnxR8ngaqtUg+Azwh78F/d87O8L83Ab1pt8ykXC4 Km8Ijcs6tS+xxfzGXp2mjk5XcGZSTZpxPR/TYJ2cZXtCCAuaYbQ1i4o8lZpzaOmN 6hNZ1RDrK7kdg43PPfo/maAzAgMBAAGjggMZMIIDFTAdBgNVHQ4EFgQUzdfMWZTj QE5sI66UKlkhi1fFwTEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUVBNkExLzMxNUI3RTA4RkY3QjExRURBNjJERjEwRUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFFQTZBMS8zMTVCN0UwOEZGN0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pU alFFNXNJNjZVS2xraGkxZkZ3VEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAg48AgMCGMoCAwIYzDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AmfFyDANBgkqhkiG9w0BAQsFAAOCAQEAZa25pHPz+w3DHV5+pOf1bUHu0AmovYnG C6yqYHCPNcmYKUlJlQ1yT85w2iSS8rZJjGX5FAxHWqorleUHfGLlHZMVGGfQp2dl /v+lOdeGFOmYjQh87EhiCHphzClXugxHtjxgRvbAnlm2DBA8AQJrFQ0SsrPFNSm9 YaLE9iG45FbqZULzd2WWamkBJQUsAfJzGD7LTm9V1s9VAFKQ2W9NDaWMJE1HiQ0U xUxdGHAO50YzK8nDmrSlhlJyjF1Vzrl41I1szO4mXfmjZtPrml/rU9CYNNbryxkw 85Snyyz+978IiqIDBB4DRZIoeUMKyeQQUeSX4LDRVGFRwoHXQUZQIg== -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:32 2025 by rpki-client