This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer File: GSl33aoJW0B37g12I4Rj8bb0Cu4.cer (raw, json) Hash identifier: m9CFAX7t9YZqiAX+syTLIzb+YbZJr1OKZMWeyYnW6Ek= Subject key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0281A0 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 29 Dec 2025 14:26:49 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 149512 AS: 151055 IP: 2400:16e0::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164256 (0x281a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 29 14:26:49 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:2d:be:7b:04:74:b0:b0:30:2d:45:7c:5b: 64:a5:66:e2:cf:24:bf:f9:04:ef:f5:46:99:c8:27: c2:f1:f1:45:d1:c5:bb:1b:3f:f4:94:46:55:de:38: 33:dd:5a:78:94:ce:29:4d:dd:b0:16:41:d9:49:6f: 36:9b:bc:cd:11:8d:6d:3c:a0:80:10:3b:99:cd:a5: f5:f7:c5:a3:04:6d:cc:3c:51:a9:3e:01:b3:a6:66: 18:dc:e9:01:b6:73:6f:d3:40:bd:f5:4d:5a:7c:9f: d8:ee:f8:d7:a8:82:5c:4c:d8:51:6b:af:3a:b0:a1: 9a:52:6a:98:9a:a6:80:6a:81:d2:53:79:1b:a4:28: 48:dd:c6:07:cc:1b:33:f6:d0:2d:e0:37:64:b6:1d: 45:93:e8:c9:c6:79:fa:d7:70:e8:86:e1:4c:c0:2b: a1:32:85:9b:67:3b:60:1d:a7:16:2b:ec:66:d0:1f: 42:24:00:d9:51:ac:70:f3:08:ec:b1:03:aa:a2:8b: eb:dd:f0:65:28:41:7e:72:71:81:cd:27:f8:c9:83: 07:4c:b6:00:6a:c7:2b:a0:d8:ef:94:d5:2c:08:4b: 7c:ba:8f:6a:bb:1c:82:a1:0d:64:4a:f5:d0:92:0a: ef:c5:3a:4e:1a:24:9a:be:7e:49:28:b0:0f:0f:70: 7d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 149512 151055 sbgp-ipAddrBlock: critical IPv6: 2400:16e0::/32 Signature Algorithm: sha256WithRSAEncryption 58:25:1d:13:13:cf:de:0a:32:78:58:06:a0:24:e9:65:b0:32: c8:1e:ef:ca:7c:5e:31:4d:83:3d:cb:97:df:0d:72:68:2e:f8: b3:4c:2b:ba:63:6e:e6:d5:45:0e:4b:26:00:7b:7f:5c:a6:8d: fc:94:33:3c:a2:c0:e0:d7:ac:3d:45:20:25:ae:df:f4:ba:19: ca:36:5e:fe:50:8b:80:2e:1b:c0:c1:83:7e:46:e7:b8:77:60: 6a:30:c8:5a:7a:b2:46:95:34:e8:3f:11:97:89:1c:b1:c3:eb: 01:be:7d:8f:1e:5d:09:b5:17:93:43:40:fa:a8:dd:df:74:1f: df:88:db:7c:c0:1b:7a:71:80:f0:5b:5d:a5:9c:41:1b:b6:4c: 71:f7:cb:97:07:49:c5:f4:fd:ae:b7:61:8c:33:a3:82:6a:e8: 38:30:d1:90:a9:09:c6:12:28:87:3a:99:f8:f2:bc:95:d7:13: 67:d5:ba:0f:cc:a6:9c:66:96:bc:ea:b0:55:8b:c8:9e:23:ce: 63:79:8d:b2:54:8a:50:1d:73:7c:f0:85:bb:66:82:4e:c8:d7: 2c:2e:58:5b:b9:e6:bd:ad:3e:44:d2:e8:08:85:69:7a:4c:64: 4f:33:67:a8:6d:75:a6:6c:57:14:d1:b9:b4:ea:0b:5c:c9:c5: 77:bd:bc:10 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIDAoGgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIyOTE0MjY0OVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxRjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3 NjIzODQ2M0YxQjZGNDBBRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgNy2+ewR0sLAwLUV8W2SlZuLPJL/5BO/1RpnIJ8Lx8UXRxbsbP/SURlXeODPd WniUzilN3bAWQdlJbzabvM0RjW08oIAQO5nNpfX3xaMEbcw8Uak+AbOmZhjc6QG2 c2/TQL31TVp8n9ju+NeoglxM2FFrrzqwoZpSapiapoBqgdJTeRukKEjdxgfMGzP2 0C3gN2S2HUWT6MnGefrXcOiG4UzAK6EyhZtnO2AdpxYr7GbQH0IkANlRrHDzCOyx A6qii+vd8GUoQX5ycYHNJ/jJgwdMtgBqxyug2O+U1SwIS3y6j2q7HIKhDWRK9dCS Cu/FOk4aJJq+fkkosA8PcH1zAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUGSl33aoJ W0B37g12I4Rj8bb0Cu4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY1OEM5LzQwRTBDMEVFOTM2QzExRUNCREMxMUEyMEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGNThDOS80MEUwQzBFRTkzNkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2Fv SlcwQjM3ZzEySTRSajhiYjBDdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAkgIAgMCTg8wIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkABbg MA0GCSqGSIb3DQEBCwUAA4IBAQBYJR0TE8/eCjJ4WAagJOllsDLIHu/KfF4xTYM9 y5ffDXJoLvizTCu6Y27m1UUOSyYAe39cpo38lDM8osDg16w9RSAlrt/0uhnKNl7+ UIuALhvAwYN+Rue4d2BqMMhaerJGlTToPxGXiRyxw+sBvn2PHl0JtReTQ0D6qN3f dB/fiNt8wBt6cYDwW12lnEEbtkxx98uXB0nF9P2ut2GMM6OCaug4MNGQqQnGEiiH Opn48ryV1xNn1boPzKacZpa86rBVi8ieI85jeY2yVIpQHXN88IW7ZoJOyNcsLlhb uea9rT5E0ugIhWl6TGRPM2eobXWmbFcU0bm06gtcycV3vbwQ -----END CERTIFICATE-----Generated at Sun Jan 25 02:49:52 2026 by rpki-client