This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer File: gaOMiwlmciXuBPc67PoJWQ0fQUw.cer (raw, json) Hash identifier: 7eZdiFeXvBDooSzFnEfR4hi/2BZkz8Bw10SXAHW9gjc= Subject key identifier: 81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028073 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft caRepository: rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Tue 23 Dec 2025 14:10:36 +0000 Certificate not after: Mon 02 Mar 2026 00:00:00 +0000 Subordinate resources: AS: 45848 AS: 45920 AS: 136019 AS: 138460 IP: 2403:fdc0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 09:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163955 (0x28073) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 23 14:10:36 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=A91CE35F, serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:c6:d2:e9:a8:bf:e9:a2:9a:88:d3:ec:44: ab:72:6b:26:fa:45:b6:ef:1c:ee:ab:45:e2:fb:b0: 30:f4:ee:b9:2a:b6:ac:1a:c2:23:c9:60:b4:af:7b: f9:30:a9:cd:28:41:a7:f5:94:36:5a:70:71:2d:03: 64:c3:d6:3e:0e:57:54:47:59:89:e2:b2:df:c1:fd: 8a:e1:19:d9:a2:a0:3a:7b:1f:5b:07:a5:42:69:f6: f2:69:81:59:7f:8a:08:98:28:15:84:c5:41:30:e5: 52:e5:f7:c5:13:b4:6e:16:ee:5c:41:d5:93:5f:88: d7:62:70:0a:4e:d3:da:5d:60:9a:94:19:a2:26:1e: 70:f6:3f:3e:fe:83:e9:26:54:de:76:5c:1e:3e:57: ec:67:58:1e:fb:df:e7:21:88:45:93:5e:6f:38:c0: a2:7e:a2:c4:57:33:4a:b9:21:6e:04:19:47:06:50: c9:c9:f7:78:94:ee:62:5c:36:06:9e:2a:73:e3:5d: 71:74:dc:c1:f7:11:ca:e8:20:ce:f2:d0:1a:bd:9e: 1b:f2:11:d4:7f:ce:6e:e5:26:91:8c:c5:44:4b:ea: d1:b3:ee:63:cc:ff:96:38:fc:4a:7a:38:09:69:8c: 3d:bc:9f:3c:27:e7:05:ec:45:25:19:40:cb:10:3b: dc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45848 45920 136019 138460 sbgp-ipAddrBlock: critical IPv6: 2403:fdc0::/32 Signature Algorithm: sha256WithRSAEncryption 5e:35:18:7e:7c:8d:d6:8a:bb:d0:93:af:8e:1c:0d:61:bf:6e: 6f:ff:0a:f2:6b:ba:8b:06:07:98:36:26:59:b7:d8:aa:c7:6a: b8:6e:35:66:57:8d:b6:0d:71:38:89:65:12:90:f2:f0:fa:05: 25:00:84:f2:7e:90:85:e7:3b:f4:02:74:49:ce:dd:cf:55:e1: c1:e8:76:b1:e9:63:2a:46:29:88:db:c7:38:b9:e3:ec:32:ad: b8:02:b4:93:a1:4d:5e:b5:fe:64:0d:0d:19:52:3f:31:b1:33: 32:86:e5:2a:83:fe:9c:92:40:23:e6:38:3b:e5:44:10:59:62: 1b:d0:96:c7:f4:8a:f4:07:77:9a:b1:20:06:42:ce:70:ec:6e: 7f:c0:4c:7f:26:fa:32:26:f3:d4:96:20:74:ac:64:9f:56:03: ce:53:99:c2:5c:92:7f:c5:ed:ce:45:ec:22:c7:c2:68:11:41: 23:7b:c9:29:7a:82:a0:4a:a9:b3:0d:40:5f:06:f6:cd:46:ff: 79:07:f4:d2:53:31:36:16:72:98:36:e1:0a:e1:a8:99:69:8d: 34:66:39:dd:cb:f9:a2:2f:7e:2b:96:77:15:41:f2:a7:7d:42: 35:9a:f9:50:e9:41:1a:58:e8:af:77:87:96:19:20:6f:ae:39: 48:d2:1c:37 -----BEGIN CERTIFICATE----- MIIGKjCCBRKgAwIBAgIDAoBzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyMzE0MTAzNloXDTI2MDMwMjAwMDAwMFowRjERMA8G A1UEAwwIQTkxQ0UzNUYxMTAvBgNVBAUTKDgxQTM4QzhCMDk2NjcyMjVFRTA0Rjcz QUVDRkEwOTU5MEQxRjQxNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIxsbS6ai/6aKaiNPsRKtyayb6RbbvHO6rReL7sDD07rkqtqwawiPJYLSve/kw qc0oQaf1lDZacHEtA2TD1j4OV1RHWYnist/B/YrhGdmioDp7H1sHpUJp9vJpgVl/ igiYKBWExUEw5VLl98UTtG4W7lxB1ZNfiNdicApO09pdYJqUGaImHnD2Pz7+g+km VN52XB4+V+xnWB773+chiEWTXm84wKJ+osRXM0q5IW4EGUcGUMnJ93iU7mJcNgae KnPjXXF03MH3EcroIM7y0Bq9nhvyEdR/zm7lJpGMxURL6tGz7mPM/5Y4/Ep6OAlp jD28nzwn5wXsRSUZQMsQO9x3AgMBAAGjggMfMIIDGzAdBgNVHQ4EFgQUgaOMiwlm ciXuBPc67PoJWQ0fQUwwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUNFMzVGL0VDMzQ3NDJDRjkxQTExRUM5MDFCOEYyNUM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFDRTM1Ri9FQzM0NzQyQ0Y5MUExMUVDOTAxQjhGMjVDNEY5QUUwMi9nYU9NaXds bWNpWHVCUGM2N1BvSldRMGZRVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQgBAf8EGjAY oBYwFAIDALMYAgMAs2ACAwITUwIDAhzcMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAP9wDANBgkqhkiG9w0BAQsFAAOCAQEAXjUYfnyN1oq70JOvjhwNYb9u b/8K8mu6iwYHmDYmWbfYqsdquG41ZleNtg1xOIllEpDy8PoFJQCE8n6Qhec79AJ0 Sc7dz1Xhweh2seljKkYpiNvHOLnj7DKtuAK0k6FNXrX+ZA0NGVI/MbEzMoblKoP+ nJJAI+Y4O+VEEFliG9CWx/SK9Ad3mrEgBkLOcOxuf8BMfyb6Mibz1JYgdKxkn1YD zlOZwlySf8XtzkXsIsfCaBFBI3vJKXqCoEqpsw1AXwb2zUb/eQf00lMxNhZymDbh CuGomWmNNGY53cv5oi9+K5Z3FUHyp31CNZr5UOlBGljor3eHlhkgb645SNIcNw== -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:10 2025 by rpki-client