This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer File: GcmgwhkwwW6kFprC6-3H5snXtS8.cer (raw, json) Hash identifier: aAgromO2+8VmAoJijd4F2+A0/JYNt+DP5Qbmw7kjanY= Subject key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 7137 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft caRepository: rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 31 Dec 2025 09:36:41 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: IP: 144.79.218.0/23 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28983 (0x7137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Dec 31 09:36:41 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:f4:63:b2:08:ab:d6:49:e4:ce:41:4e:cb: 85:9c:82:19:da:75:1c:1d:9c:70:ac:2b:d4:9b:e8: 56:ff:0b:bf:45:9f:4a:12:42:d0:7d:99:17:78:3e: b1:86:04:51:a5:95:f8:47:51:cb:e2:4d:0b:41:b3: 16:dc:47:1f:da:90:39:14:bd:1a:f1:f5:2f:6d:f0: 53:8a:72:90:ff:55:79:d9:9e:92:a8:69:cf:77:f9: e1:73:c1:60:06:ea:7c:57:82:65:b7:43:49:df:a9: b5:1f:28:ac:bf:cc:06:06:64:0e:4a:e0:b4:ae:7a: a9:2c:9d:0c:6f:10:c2:ee:2c:04:e2:c7:d0:b1:95: 02:f5:e1:44:99:8a:ce:9e:90:4a:06:0c:1b:56:a0: ec:49:7f:ff:e5:4d:08:17:14:47:4d:5d:5c:9d:51: dc:5a:a0:08:aa:d2:0a:73:da:38:7a:ee:00:5c:91: 29:76:d3:dc:52:91:6d:80:c2:52:8e:b4:41:f8:25: fc:44:5c:a9:e7:e7:2c:dd:2a:f4:d8:c6:01:79:ad: 78:ff:bb:00:58:64:36:fb:0d:4e:8d:d7:91:36:9a: 1d:a7:aa:fa:53:d6:d1:ee:dc:c5:1f:9d:35:67:be: 9a:0f:b4:57:06:14:d1:91:66:a3:1e:c9:0c:cc:6d: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.218.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:c5:5f:b6:82:1f:0b:0a:88:18:ec:09:8d:61:38:54:07:b1: 5e:0e:0c:de:0a:c3:ba:d5:b7:ab:8d:30:98:82:04:71:4c:9f: 2b:68:27:cf:8d:bc:05:29:55:e9:18:a9:e7:ce:6d:98:29:86: 46:e6:aa:7e:72:ff:b6:d7:60:34:9b:74:c1:0f:de:13:15:bd: ce:6a:69:6c:f7:af:81:59:02:58:f4:a3:a0:48:6d:36:56:8a: c4:47:e1:c5:7e:02:52:f9:a9:43:38:e8:17:f3:b4:ee:a2:21: a5:0d:13:e4:84:4d:72:92:1f:f6:6b:cd:1c:44:a2:7d:00:7a: 11:49:46:8c:23:a1:6d:cf:31:24:63:2e:02:47:a9:47:9b:ec: e2:73:2b:05:9c:3c:ac:60:00:6a:87:cf:c5:31:69:39:0a:21: 17:6a:82:0e:6e:ba:26:e8:64:4b:01:2f:d6:8b:cd:fe:01:fc: ea:26:d9:8c:42:73:e1:33:b0:b1:ac:a1:96:7c:f9:7a:73:d6: 47:15:6f:0d:5c:bf:3d:ba:df:57:a9:c6:bb:c7:0d:43:09:3d: ba:63:05:02:78:92:fe:e3:ea:67:cf:d9:3a:86:5d:9b:5e:75: 5e:65:ee:05:68:b6:16:5b:b3:24:e1:d3:10:91:89:be:b6:df: 3c:60:d7:ce -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgICcTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMjMxMDkzNjQxWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD VQQDDAhBOTE2QkNCQTExMC8GA1UEBRMoMTlDOUEwQzIxOTMwQzE2RUE0MTY5QUMy RUJFREM3RTZDOUQ3QjUyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AKTe9GOyCKvWSeTOQU7LhZyCGdp1HB2ccKwr1JvoVv8Lv0WfShJC0H2ZF3g+sYYE UaWV+EdRy+JNC0GzFtxHH9qQORS9GvH1L23wU4pykP9Vedmekqhpz3f54XPBYAbq fFeCZbdDSd+ptR8orL/MBgZkDkrgtK56qSydDG8Qwu4sBOLH0LGVAvXhRJmKzp6Q SgYMG1ag7El//+VNCBcUR01dXJ1R3FqgCKrSCnPaOHruAFyRKXbT3FKRbYDCUo60 Qfgl/ERcqefnLN0q9NjGAXmteP+7AFhkNvsNTo3XkTaaHaeq+lPW0e7cxR+dNWe+ mg+0VwYU0ZFmox7JDMxtKpMCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQZyaDCGTDB bqQWmsLr7cfmyde1LzAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJDQkEvMzQwMEM3MThFNjJDMTFGMDk3NkE5NUZCNkY2RjU2QkMvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTZCQ0JBLzM0MDBDNzE4RTYyQzExRjA5NzZBOTVGQjZGNkY1NkJDL0djbWd3aGt3 d1c2a0ZwckM2LTNINXNuWHRTOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBP2jANBgkqhkiG9w0BAQsFAAOCAQEASsVftoIfCwqIGOwJjWE4 VAexXg4M3grDutW3q40wmIIEcUyfK2gnz428BSlV6Rip585tmCmGRuaqfnL/ttdg NJt0wQ/eExW9zmppbPevgVkCWPSjoEhtNlaKxEfhxX4CUvmpQzjoF/O07qIhpQ0T 5IRNcpIf9mvNHESifQB6EUlGjCOhbc8xJGMuAkepR5vs4nMrBZw8rGAAaofPxTFp OQohF2qCDm66JuhkSwEv1ovN/gH86ibZjEJz4TOwsayhlnz5enPWRxVvDVy/Pbrf V6nGu8cNQwk9umMFAniS/uPqZ8/ZOoZdm151XmXuBWi2FluzJOHTEJGJvrbfPGDX zg== -----END CERTIFICATE-----Generated at Sun Jan 18 01:50:42 2026 by rpki-client