This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer File: GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer (raw, json) Hash identifier: AyyxXcX+VdKZL0cFDSGNnS3fhX3xdSmBigy3L/K/Wzo= Subject key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Certificate serial: 6EAC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer Manifest: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft caRepository: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 24 Nov 2025 04:18:55 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 45.89.176.0/22 IP: 45.157.88.0/22 IP: 134.236.0.0/16 IP: 147.78.152.0/22 IP: 159.192.0.0/16 IP: 192.145.20.0/22 IP: 209.15.96.0/19 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28332 (0x6eac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E Validity Not Before: Nov 24 04:18:55 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:3f:f9:74:63:8a:de:2d:a8:6e:65:8b:6d: 46:b2:48:39:80:d6:9f:f0:73:28:eb:ba:ad:3f:5a: 82:49:e0:67:35:a1:d2:1a:e5:0d:25:b6:66:5f:5f: f1:12:fd:89:28:e7:24:2a:73:e3:37:66:fc:14:88: 95:5a:96:64:73:b1:4e:05:59:cb:a1:94:f3:84:86: 05:a5:3e:19:58:9d:35:53:01:4d:95:c3:11:36:c5: a8:af:44:43:cc:68:ac:60:8a:93:58:e0:19:c1:1e: 13:74:2a:14:2e:73:ab:e3:5a:db:cd:11:59:77:80: f5:cd:8b:39:c7:46:a5:ed:ab:00:92:d0:fa:5a:64: 5f:c5:b0:21:24:66:d2:26:0f:94:74:cf:85:c3:b7: fc:6f:c4:0f:2c:16:a6:b6:92:63:59:3b:f8:f7:04: e6:99:22:8c:78:1a:87:27:35:1f:7b:50:dd:11:8a: 71:e6:9a:7e:7b:1a:cd:3b:ac:9f:78:13:3e:94:e0: d1:c0:e8:d0:cd:39:cc:92:e9:60:9a:92:18:89:55: 2b:e1:5e:e1:f6:17:81:02:90:29:9f:38:84:f5:11: 95:09:bc:8f:a0:26:38:4a:0c:22:95:3c:b7:78:21: 6e:16:47:96:75:53:3a:2e:97:7b:b5:5f:3f:db:20: 4c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 X509v3 Authority Key Identifier: keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.89.176.0/22 45.157.88.0/22 134.236.0.0/16 147.78.152.0/22 159.192.0.0/16 192.145.20.0/22 209.15.96.0/19 Signature Algorithm: sha256WithRSAEncryption 75:9e:ed:ce:16:e5:92:39:4e:7f:74:fb:78:82:b2:5d:75:ed: c0:48:c6:0f:4d:f9:1b:ac:73:70:08:c5:ae:73:78:9d:8b:11: 92:d7:3f:cc:18:9c:ae:67:2f:c2:38:ad:66:8f:5e:50:c3:8d: fb:5e:46:cc:37:d2:b0:2c:c5:ca:31:66:47:cb:02:0f:6e:f4: 85:7f:54:61:e7:76:78:84:3a:ca:70:63:41:22:5a:6f:1c:8e: 5d:49:60:1b:ae:4d:36:03:0c:98:02:16:81:ab:48:ae:a4:9e: 50:2b:96:f1:0f:5f:b8:d0:ac:c9:a7:13:44:93:df:7e:00:f1: e5:0e:17:b0:95:0c:67:4c:c8:72:f6:99:cd:e5:19:13:6c:6d: ac:ce:21:e1:8f:bc:4b:de:fb:ed:5a:74:aa:bd:43:96:23:ec: 32:43:d5:19:e8:19:93:dd:24:24:5c:1e:dc:af:90:55:40:5b: 07:0c:6a:ec:7b:a7:86:84:3f:89:2c:8e:6b:67:05:50:ca:74: 0e:09:12:0f:24:67:c4:30:72:96:97:20:f9:2e:e8:77:d6:ba: 2c:be:af:05:0a:9d:5a:39:c3:cb:57:40:53:31:b7:b7:72:92: 4a:1d:21:0f:6d:8a:58:b6:f8:b5:5c:61:29:28:05:18:d4:6e: 5c:38:39:4d -----BEGIN CERTIFICATE----- MIIGHzCCBQegAwIBAgICbqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD N0MxRDZFMEUwHhcNMjUxMTI0MDQxODU1WhcNMjcwMTMxMDAwMDAwWjBGMREwDwYD VQQDEwhBOTEyNTk4RDExMC8GA1UEBRMoMUE1QjAwNTk3QzhEN0I2MUZCQkVGRUM1 Qjk0NEZFNkY5QzYzRTIyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMteP/l0Y4reLahuZYttRrJIOYDWn/BzKOu6rT9agkngZzWh0hrlDSW2Zl9f8RL9 iSjnJCpz4zdm/BSIlVqWZHOxTgVZy6GU84SGBaU+GVidNVMBTZXDETbFqK9EQ8xo rGCKk1jgGcEeE3QqFC5zq+Na280RWXeA9c2LOcdGpe2rAJLQ+lpkX8WwISRm0iYP lHTPhcO3/G/EDywWpraSY1k7+PcE5pkijHgahyc1H3tQ3RGKceaafnsazTusn3gT PpTg0cDo0M05zJLpYJqSGIlVK+Fe4fYXgQKQKZ84hPURlQm8j6AmOEoMIpU8t3gh bhZHlnVTOi6Xe7VfP9sgTIsCAwEAAaOCAxUwggMRMB0GA1UdDgQWBBQaWwBZfI17 Yfu+/sW5RP5vnGPiIDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2 MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0 LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU5OEQvQUU4ODM2NjhDOEVDMTFGMDk5RDhBQjQ1QzRGOUFFMDIvMH4GCCsGAQUF BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTI1OThEL0FFODgzNjY4QzhFQzExRjA5OUQ4QUI0NUM0RjlBRTAyL0dsc0FXWHlO ZTJIN3Z2N0Z1VVQtYjV4ajRpQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBBBggrBgEFBQcBBwEB/wQyMDAw LgQCAAEwKAMEAi1ZsAMEAi2dWAMDAIbsAwQCk06YAwMAn8ADBALAkRQDBAXRD2Aw DQYJKoZIhvcNAQELBQADggEBAHWe7c4W5ZI5Tn90+3iCsl117cBIxg9N+Rusc3AI xa5zeJ2LEZLXP8wYnK5nL8I4rWaPXlDDjfteRsw30rAsxcoxZkfLAg9u9IV/VGHn dniEOspwY0EiWm8cjl1JYBuuTTYDDJgCFoGrSK6knlArlvEPX7jQrMmnE0ST334A 8eUOF7CVDGdMyHL2mc3lGRNsbazOIeGPvEve++1adKq9Q5Yj7DJD1RnoGZPdJCRc HtyvkFVAWwcMaux7p4aEP4ksjmtnBVDKdA4JEg8kZ8QwcpaXIPku6HfWuiy+rwUK nVo5w8tXQFMxt7dykkodIQ9tili2+LVcYSkoBRjUblw4OU0= -----END CERTIFICATE-----Generated at Wed Dec 3 13:14:34 2025 by rpki-client