This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer File: GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer (raw, json) Hash identifier: 8ocQXsksnFh5tC5YPhlnmB/gUjVh7zHX6tJFp/TiEAU= Subject key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027883 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft caRepository: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 27 Nov 2025 01:46:30 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 154386 IP: 2402:3b20::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 14:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161923 (0x27883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 27 01:46:30 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:31:cd:a5:d0:eb:96:d3:30:d1:84:31:ae: 34:23:08:e6:05:5e:5a:52:55:20:1e:c0:5a:83:42: 08:5c:ad:d0:f2:b6:dc:f5:17:93:58:75:ad:46:13: 22:12:49:d6:0b:d0:65:76:b9:54:5c:b8:d2:a1:ed: 78:a2:ba:f2:8f:7f:a1:4c:44:b2:84:47:6c:d9:f8: 82:52:97:32:f8:99:d5:2e:e6:bd:40:9f:0b:30:13: 0e:f1:c0:5a:86:7c:50:07:a2:f6:e3:a0:05:4f:b2: 0b:8b:31:4d:b7:8d:8b:33:80:40:b6:e8:dc:d6:1e: ce:f5:ab:bc:13:0e:cb:14:4c:34:33:34:1c:21:4f: 8a:e1:bd:f1:16:b3:ab:d9:f0:05:15:e1:44:79:ed: 21:bf:37:fe:60:3f:d1:25:cd:f6:00:6f:e9:13:9a: e3:a9:ba:5a:04:43:ee:26:91:e8:15:6f:c0:e7:a8: a0:d7:d6:90:6e:9e:0e:40:e2:19:67:5f:18:9f:58: 9d:7c:92:11:22:05:28:24:c1:ab:e6:eb:8f:d1:a7: e6:c8:12:a6:2e:d9:ec:4a:df:41:0b:7e:70:8a:ff: d9:87:73:9b:4e:fb:f6:2c:68:bc:3f:07:ac:48:f1: 0d:04:5f:f6:e1:12:81:cc:37:9d:93:2d:90:eb:c6: 0c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 154386 sbgp-ipAddrBlock: critical IPv6: 2402:3b20::/32 Signature Algorithm: sha256WithRSAEncryption c5:97:4e:11:32:9e:5a:d8:e8:49:7e:19:44:84:56:2b:ae:bb: 08:a5:55:e6:46:a8:7a:dc:b9:28:78:96:68:c0:d7:b1:e2:78: 6b:4a:35:bb:d9:ed:a6:3b:a3:d9:a3:a4:c9:c3:22:65:4c:42: 13:c9:49:5c:93:f0:74:a7:3f:42:e1:e2:a1:12:6e:1e:d2:5c: f2:9d:76:ad:f8:f3:f1:42:39:3b:3c:86:b7:5d:73:7d:1f:97: 30:56:6d:f6:1a:88:e6:b7:30:fe:b2:5d:67:2b:ad:6f:96:2c: 8b:49:fa:cd:24:b0:2d:ff:09:4c:87:0d:74:20:db:f2:80:ff: c4:8e:71:52:21:10:0a:34:45:bf:6a:05:4f:65:45:12:26:63: 28:8f:d3:28:1a:c4:6f:bb:95:b3:8f:a7:c6:20:84:e9:f6:0b: 3d:18:df:7f:75:4e:7e:08:c7:9b:c4:22:98:29:fd:06:6a:5d: ed:b8:fb:58:a6:b3:56:87:46:fe:b3:c7:39:bd:8b:0d:42:33: 12:ec:86:02:fd:33:98:2e:f2:d3:a2:c0:ca:84:40:59:94:91: 11:ba:33:df:12:ad:34:bf:f8:f9:82:83:b1:7e:65:3b:27:76: fd:37:ed:b2:43:fa:cb:5e:09:74:8b:f6:a9:2a:e0:a6:42:ab: b8:ce:3b:06 -----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIDAniDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNzAxNDYzMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxQTQ3MEMxMTAvBgNVBAUTKDE5OUQ0QkUwNjA4QTU2RjUwNDgwQzBB RDI2NDVEQUQ3QjY5MDAyNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7jDHNpdDrltMw0YQxrjQjCOYFXlpSVSAewFqDQghcrdDyttz1F5NYda1GEyIS SdYL0GV2uVRcuNKh7XiiuvKPf6FMRLKER2zZ+IJSlzL4mdUu5r1AnwswEw7xwFqG fFAHovbjoAVPsguLMU23jYszgEC26NzWHs71q7wTDssUTDQzNBwhT4rhvfEWs6vZ 8AUV4UR57SG/N/5gP9ElzfYAb+kTmuOpuloEQ+4mkegVb8DnqKDX1pBung5A4hln XxifWJ18khEiBSgkwavm64/Rp+bIEqYu2exK30ELfnCK/9mHc5tO+/YsaLw/B6xI 8Q0EX/bhEoHMN52TLZDrxgxzAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUGZ1L4GCK VvUEgMCtJkXa17aQAlkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUE0NzBDL0FDNEQwQUI0QzY4OTExRjA4RDJCRkUwQUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFBNDcwQy9BQzREMEFCNEM2ODkxMUYwOEQyQkZFMEFDNEY5QUUwMi9HWjFMNEdD S1Z2VUVnTUN0SmtYYTE3YVFBbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAlsSMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAI7IDANBgkq hkiG9w0BAQsFAAOCAQEAxZdOETKeWtjoSX4ZRIRWK667CKVV5kaoety5KHiWaMDX seJ4a0o1u9ntpjuj2aOkycMiZUxCE8lJXJPwdKc/QuHioRJuHtJc8p12rfjz8UI5 OzyGt11zfR+XMFZt9hqI5rcw/rJdZyutb5Ysi0n6zSSwLf8JTIcNdCDb8oD/xI5x UiEQCjRFv2oFT2VFEiZjKI/TKBrEb7uVs4+nxiCE6fYLPRjff3VOfgjHm8QimCn9 Bmpd7bj7WKazVodG/rPHOb2LDUIzEuyGAv0zmC7y06LAyoRAWZSREboz3xKtNL/4 +YKDsX5lOyd2/TftskP6y14JdIv2qSrgpkKruM47Bg== -----END CERTIFICATE-----Generated at Wed Dec 3 16:34:21 2025 by rpki-client