This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer (raw, json) Hash identifier: 7yHNDASTnCFgzaipPKdxveLWAQWMtYw0NRKklO8yvl0= Subject key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027D86 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 11 Dec 2025 15:28:33 +0000 Certificate not after: Tue 02 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 173 AS: 55817 IP: 163.138.0.0/16 IP: 2001:df0:45::/48 IP: 2001:fa8::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163206 (0x27d86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 11 15:28:33 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3b:1c:4d:9d:7f:3a:f8:2c:58:f3:cb:d8:67: 53:6b:5f:c2:56:a5:b2:ed:f5:99:8c:69:c8:34:4e: 4d:9a:8c:48:72:23:c0:c2:81:ee:df:ef:df:f2:71: 22:51:85:90:9d:d2:f2:c6:6f:ed:ad:61:10:fa:79: 17:a9:06:1f:57:19:06:88:73:06:67:e3:d5:83:a8: 3f:91:ee:d3:60:47:eb:f8:7c:11:99:67:fd:5f:24: 8e:d9:f8:75:44:91:61:d6:ea:b0:5b:37:0d:3c:e9: 2c:a9:d5:3f:2c:0b:d2:a5:06:cb:ae:d0:eb:31:b3: 84:e7:c7:b6:f2:4c:78:5e:b3:37:3c:d6:82:43:42: 77:47:0c:9f:16:f9:fe:15:78:d9:ea:77:28:c1:3f: 98:02:61:bc:1a:b7:dd:bd:68:51:a8:df:fc:33:08: c6:e6:e5:37:f7:51:15:65:f2:af:0e:d2:f1:2c:16: 7a:62:e0:f1:a9:75:01:ce:69:4c:ad:73:9d:f5:a2: 97:eb:1c:c1:04:41:d4:64:00:2d:72:cb:31:2b:85: b2:cd:38:43:ae:52:1c:89:5c:df:58:7a:cd:8a:5e: e6:31:70:78:63:7f:68:4f:db:43:e7:21:2d:77:90: 1e:ea:18:7a:52:57:d9:4a:55:f2:99:7e:6a:9b:5d: 58:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 173 55817 sbgp-ipAddrBlock: critical IPv4: 163.138.0.0/16 IPv6: 2001:df0:45::/48 2001:fa8::/32 Signature Algorithm: sha256WithRSAEncryption a2:c6:d2:3b:ee:26:f2:02:31:79:08:18:49:9b:a8:7f:3e:c3: 76:65:f9:38:92:25:f4:e8:e3:37:7b:95:85:23:49:f2:8f:fa: 50:d7:26:43:52:dc:e0:a3:74:7f:20:64:64:0e:6d:24:6e:68: 9d:6a:a5:53:84:da:bd:ef:0f:4a:ca:31:17:9b:57:e5:a7:3b: e7:f2:fa:b9:37:8a:4a:67:2f:1c:d6:70:0c:f3:06:15:cb:8d: af:81:c5:c3:69:01:46:cc:05:7e:fc:2d:aa:07:be:87:78:8c: 47:bb:94:f6:67:c2:2c:15:71:4f:24:09:90:81:0c:0a:71:f3: e8:23:4c:fa:74:c9:97:9a:22:d5:b3:9e:57:8d:e8:7d:65:51: ec:8c:9e:3a:69:1c:d1:5f:bd:30:71:82:18:ab:51:7b:24:ee: ab:7a:3e:65:5c:f1:c0:fe:c2:b6:3d:9a:d4:18:fa:c8:92:2b: db:12:6b:45:5e:e2:5f:c0:37:fc:3a:bf:ca:5a:99:7c:17:4b: ab:13:dc:b9:83:d1:f3:56:ba:31:54:4a:08:58:1a:2e:42:0c: a7:c5:6a:bd:fe:a0:7d:f4:6d:bc:83:87:32:31:70:19:e0:54: 3d:f5:2e:a9:bf:dd:6a:ad:27:1a:d1:e2:20:b9:f2:c8:14:7e: 20:e4:a5:9a -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIDAn2GMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIxMTE1MjgzM1oXDTI3MDMwMjAwMDAwMFowRjERMA8G A1UEAxMIQTkxQTRCMUExMTAvBgNVBAUTKENFMTE0NjgwRkY2RjREOUJDM0YxODgw RDYxMEQ2QUVFRUFFQkYwRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLOxxNnX86+CxY88vYZ1NrX8JWpbLt9ZmMacg0Tk2ajEhyI8DCge7f79/ycSJR hZCd0vLGb+2tYRD6eRepBh9XGQaIcwZn49WDqD+R7tNgR+v4fBGZZ/1fJI7Z+HVE kWHW6rBbNw086Syp1T8sC9KlBsuu0Osxs4Tnx7byTHheszc81oJDQndHDJ8W+f4V eNnqdyjBP5gCYbwat929aFGo3/wzCMbm5Tf3URVl8q8O0vEsFnpi4PGpdQHOaUyt c531opfrHMEEQdRkAC1yyzErhbLNOEOuUhyJXN9Yes2KXuYxcHhjf2hP20PnIS13 kB7qGHpSV9lKVfKZfmqbXVixAgMBAAGjggMqMIIDJjAdBgNVHQ4EFgQUzhFGgP9v TZvD8YgNYQ1q7urr8NQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE0QjFBLzVERDQ4QUI2ODlGMjExRTY5RTVGNjMzOUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBNEIxQS81REQ0OEFCNjg5RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5 dlRadkQ4WWdOWVExcTd1cnI4TlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICAK0CAwDaCTA2BggrBgEFBQcBBwEB/wQnMCUwCwQCAAEwBQMDAKOKMBYE AgACMBADBwAgAQ3wAEUDBQAgAQ+oMA0GCSqGSIb3DQEBCwUAA4IBAQCixtI77iby AjF5CBhJm6h/PsN2Zfk4kiX06OM3e5WFI0nyj/pQ1yZDUtzgo3R/IGRkDm0kbmid aqVThNq97w9KyjEXm1flpzvn8vq5N4pKZy8c1nAM8wYVy42vgcXDaQFGzAV+/C2q B76HeIxHu5T2Z8IsFXFPJAmQgQwKcfPoI0z6dMmXmiLVs55Xjeh9ZVHsjJ46aRzR X70wcYIYq1F7JO6rej5lXPHA/sK2PZrUGPrIkivbEmtFXuJfwDf8Or/KWpl8F0ur E9y5g9HzVroxVEoIWBouQgynxWq9/qB99G28g4cyMXAZ4FQ99S6pv91qrSca0eIg ufLIFH4g5KWa -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:22 2025 by rpki-client