This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer File: GAVt61gONXTxSD5mnFqkLlhOzrs.cer (raw, json) Hash identifier: eEFoxQaKXXcBTLiYn0AlJ4PoNCSOROMjPSYALtp/q/8= Subject key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0282DC Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft caRepository: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:54:44 +0000 Certificate not after: Wed 31 Mar 2027 00:00:00 +0000 Subordinate resources: AS: 17423 AS: 17625 AS: 55540 IP: 27.109.0.0/19 IP: 45.64.192.0/22 IP: 103.19.132.0/22 IP: 120.72.88.0/21 IP: 180.211.96.0/19 IP: 202.131.96.0/19 IP: 2401:2d00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164572 (0x282dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Jan 1 12:54:44 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=A914A0CB, serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:84:d3:3f:87:29:01:7f:a6:28:2f:e1:4e:88: 27:65:4c:22:7d:5f:fe:72:ea:59:5c:e6:9d:c0:f4: 2f:8f:e6:79:39:44:b6:34:85:d9:4d:28:e7:0a:3d: 59:d4:7b:32:b7:2c:24:f4:dc:14:29:c8:f2:a2:bb: eb:bc:59:64:44:dc:3b:60:e6:04:7d:2e:86:2c:eb: 33:a3:02:f8:62:53:75:8e:3a:02:f0:e3:84:fb:f1: bf:e4:85:3a:01:a2:aa:9e:ac:a0:c0:a2:2a:48:bc: 93:d1:56:fd:81:8c:28:bf:c9:90:bb:a8:7a:e2:15: 4e:74:54:23:57:00:76:c8:69:7f:17:26:71:81:60: d8:24:bb:9c:9a:d8:47:f2:84:03:76:c0:de:03:99: 4e:3a:86:56:5e:2b:5b:53:40:d3:0f:55:65:36:b9: 70:12:65:57:d9:e4:1b:d1:77:86:c6:f4:e8:2b:28: 19:ab:80:56:65:c4:d4:a2:6a:47:6f:f6:3a:9a:24: d1:66:b2:8c:03:e1:f3:e8:54:b0:3a:11:24:ed:a0: 0a:7c:c8:7c:9d:a5:f9:2e:6b:81:99:33:2c:8e:c3: f7:41:b9:88:db:86:1e:c9:ea:ec:ce:0f:c3:b5:2f: 7a:4e:0a:88:75:5c:56:4e:da:05:b9:69:9e:c0:7b: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 17423 17625 55540 sbgp-ipAddrBlock: critical IPv4: 27.109.0.0/19 45.64.192.0/22 103.19.132.0/22 120.72.88.0/21 180.211.96.0/19 202.131.96.0/19 IPv6: 2401:2d00::/32 Signature Algorithm: sha256WithRSAEncryption 77:8f:07:73:c4:a2:28:f6:8b:3e:30:1b:bb:b8:3f:5f:b1:f1: 65:33:3f:4b:0d:09:a1:66:ef:1c:1e:df:07:82:6a:c3:a9:9f: 67:cc:d3:b2:bc:99:5d:15:ec:8c:41:a7:3f:38:04:6b:9a:a4: c2:49:ee:6e:67:59:61:a5:4a:3f:a6:0b:48:93:c0:09:67:0b: b1:14:46:43:3e:d8:a8:f9:11:dd:a2:a5:e8:d5:54:30:7e:92: c4:9e:b7:35:95:05:5d:aa:fd:fd:2a:bf:4e:8d:5d:c2:fa:f9: 50:f2:55:35:df:cd:82:dc:f5:15:12:13:1c:77:32:40:16:10: 5d:34:08:8d:ab:5f:96:5d:4c:00:51:a9:86:78:4d:65:91:44: d9:da:ea:23:f9:9c:1f:59:9f:3d:ed:af:11:82:7d:63:a4:3b: bf:25:1a:56:20:6b:ae:da:1b:47:21:37:6a:cd:fc:50:d5:5d: 12:95:65:6c:cf:9e:05:ce:32:0c:30:bb:9a:79:cd:f9:88:ef: 64:a4:e1:5f:b9:df:51:f8:b1:83:1c:f1:d3:83:eb:c5:4a:f3: 50:bc:f7:f9:b0:09:94:b8:e1:7a:99:5d:69:2f:c3:f8:87:d1: 6c:df:d6:0d:fc:df:08:8e:78:46:fc:be:38:52:77:2f:2d:58: 35:d5:6c:8b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIDAoLcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MDEwMTEyNTQ0NFoXDTI3MDMzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxNEEwQ0IxMTAvBgNVBAUTKDE4MDU2REVCNTgwRTM1NzRGMTQ4M0U2 NjlDNUFBNDJFNTg0RUNFQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBhNM/hykBf6YoL+FOiCdlTCJ9X/5y6llc5p3A9C+P5nk5RLY0hdlNKOcKPVnU ezK3LCT03BQpyPKiu+u8WWRE3Dtg5gR9LoYs6zOjAvhiU3WOOgLw44T78b/khToB oqqerKDAoipIvJPRVv2BjCi/yZC7qHriFU50VCNXAHbIaX8XJnGBYNgku5ya2Efy hAN2wN4DmU46hlZeK1tTQNMPVWU2uXASZVfZ5BvRd4bG9OgrKBmrgFZlxNSiakdv 9jqaJNFmsowD4fPoVLA6ESTtoAp8yHydpfkua4GZMyyOw/dBuYjbhh7J6uzOD8O1 L3pOCoh1XFZO2gW5aZ7Aezq5AgMBAAGjggNEMIIDQDAdBgNVHQ4EFgQUGAVt61gO NXTxSD5mnFqkLlhOzrswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTRBMENCL0U1QzNBRTlDNUExOTExRTY4MUI4QzEwRkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE0QTBDQi9FNUMzQUU5QzVBMTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFn T05YVHhTRDVtbkZxa0xsaE96cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQgBAf8EEzAR oA8wDQICRA8CAkTZAgMA2PQwTAYIKwYBBQUHAQcBAf8EPTA7MCoEAgABMCQDBAUb bQADBAItQMADBAJnE4QDBAN4SFgDBAW002ADBAXKg2AwDQQCAAIwBwMFACQBLQAw DQYJKoZIhvcNAQELBQADggEBAHePB3PEoij2iz4wG7u4P1+x8WUzP0sNCaFm7xwe 3weCasOpn2fM07K8mV0V7IxBpz84BGuapMJJ7m5nWWGlSj+mC0iTwAlnC7EURkM+ 2Kj5Ed2ipejVVDB+ksSetzWVBV2q/f0qv06NXcL6+VDyVTXfzYLc9RUSExx3MkAW EF00CI2rX5ZdTABRqYZ4TWWRRNna6iP5nB9Znz3trxGCfWOkO78lGlYga67aG0ch N2rN/FDVXRKVZWzPngXOMgwwu5p5zfmI72Sk4V+531H4sYMc8dOD68VK81C89/mw CZS44XqZXWkvw/iH0Wzf1g383wiOeEb8vjhSdy8tWDXVbIs= -----END CERTIFICATE-----Generated at Sun Jan 25 02:51:05 2026 by rpki-client