This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer (raw, json) Hash identifier: KT4AsOV4hyzKutamfNVbtae93E53yLh50TEc1R7adig= Subject key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0275C5 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft caRepository: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 17 Nov 2025 19:47:48 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 56300 AS: 132047 AS: 133058 AS: 133136 IP: 45.119.152.0/21 IP: 103.6.148.0/22 IP: 103.7.200.0/22 IP: 103.11.48.0/22 IP: 103.20.168.0/22 IP: 103.224.116.0/22 IP: 103.224.164.0/22 IP: 103.241.60.0/22 IP: 103.252.200.0/22 IP: 223.25.64.0/19 IP: 2400:7980::/32 IP: 2402:3300::/32 IP: 2403:3100::/32 IP: 2403:7f00::/32 IP: 2405:3100::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 08:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161221 (0x275c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 17 19:47:48 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:db:20:1f:01:13:4f:58:8a:6a:d1:28:cf: c8:af:b1:41:3d:07:70:e9:ab:04:57:96:82:c2:30: ab:9d:ad:9a:33:b1:1a:a7:c7:b9:a0:fa:30:d5:91: cf:43:fb:b6:bd:a6:d6:71:26:6d:70:89:9f:67:69: 66:8c:2d:56:d6:63:e3:b7:80:a0:7a:16:ef:cb:3e: 54:90:44:c6:66:26:a6:1f:cc:28:e6:6e:9e:88:51: 78:96:04:03:f9:c8:c9:4e:8e:c7:25:cf:b8:f1:60: a9:77:f7:dc:ae:33:ac:10:a2:94:83:0b:83:ab:0f: bb:a5:14:66:16:18:b9:34:54:61:a7:f7:ed:7e:df: 24:1d:78:73:f7:a4:ba:84:89:c6:4a:cf:75:d2:56: 3e:f8:51:5f:f4:1b:af:10:1a:83:20:98:f2:1e:27: bc:b8:2c:bc:f3:19:6c:50:60:2d:54:2d:58:02:6a: b7:a4:52:e0:37:15:c3:cb:19:d0:5d:05:d0:4d:0f: 20:9d:d2:53:eb:d9:63:c9:31:2a:94:e1:82:b7:85: 88:de:16:27:88:b1:5b:a9:89:c4:00:88:82:f7:5d: b1:c3:f9:9b:68:18:0d:9b:26:40:4d:53:16:42:e0: b3:f6:a8:0a:c0:e6:ec:a9:46:fa:ec:e1:fc:db:09: 70:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 56300 132047 133058 133136 sbgp-ipAddrBlock: critical IPv4: 45.119.152.0/21 103.6.148.0/22 103.7.200.0/22 103.11.48.0/22 103.20.168.0/22 103.224.116.0/22 103.224.164.0/22 103.241.60.0/22 103.252.200.0/22 223.25.64.0/19 IPv6: 2400:7980::/32 2402:3300::/32 2403:3100::/32 2403:7f00::/32 2405:3100::/32 Signature Algorithm: sha256WithRSAEncryption c5:ce:af:f4:f6:4d:e0:75:ce:03:ba:b8:a2:3e:52:19:41:0c: 40:6d:72:5f:fc:07:3a:e4:ac:8d:b3:70:bc:8f:e5:b5:32:e6: da:3c:04:b7:cb:2e:21:2a:6a:c2:02:24:88:79:50:82:0a:9f: 54:a3:51:85:50:56:f2:9f:30:82:75:dc:9d:45:bf:cc:fd:64: 9e:3a:b0:dd:05:d6:ac:dc:44:f5:2a:5f:89:ac:b2:35:a3:5b: 11:c3:2b:76:59:80:23:da:b5:55:c5:3c:cc:68:f1:68:b5:61: 34:b4:6f:52:23:ba:f2:d6:f3:70:2d:75:da:a4:15:78:a3:16: bd:a8:71:dc:04:50:23:f4:08:19:90:c3:53:43:1d:06:02:26: 63:f1:78:24:dc:6e:3b:07:ef:fc:ad:c3:40:f6:06:28:52:da: f3:70:5e:6c:d3:e5:c0:e4:ea:9f:7a:a6:fc:f3:40:80:c4:80: 57:52:e0:2b:c6:0b:1e:ca:95:f9:5e:f7:af:aa:50:e3:86:40: ad:5c:12:47:24:41:a0:27:3d:fa:dd:12:b4:93:65:86:ba:d8: fc:0e:79:9e:f3:e5:de:59:d4:11:b0:ae:0e:4b:f9:c7:5e:29: 49:ee:37:70:ae:2f:93:ee:d1:d3:32:8c:aa:87:7b:69:ce:90: 4b:f2:0d:02 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIDAnXFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTExNzE5NDc0OFoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVE ODY5RjcwRDc0MEQ3MDk3NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrYdsgHwETT1iKatEoz8ivsUE9B3DpqwRXloLCMKudrZozsRqnx7mg+jDVkc9D +7a9ptZxJm1wiZ9naWaMLVbWY+O3gKB6Fu/LPlSQRMZmJqYfzCjmbp6IUXiWBAP5 yMlOjsclz7jxYKl399yuM6wQopSDC4OrD7ulFGYWGLk0VGGn9+1+3yQdeHP3pLqE icZKz3XSVj74UV/0G68QGoMgmPIeJ7y4LLzzGWxQYC1ULVgCarekUuA3FcPLGdBd BdBNDyCd0lPr2WPJMSqU4YK3hYjeFieIsVupicQAiIL3XbHD+ZtoGA2bJkBNUxZC 4LP2qArA5uypRvrs4fzbCXAnAgMBAAGjggOAMIIDfDAdBgNVHQ4EFgQUG/Wo2Uzg bOMB/DXYafcNdA1wl1IwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUY2N0JCL0M5REI4OUVFMEUzRTExRTk4MzZGNDAxNEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFGNjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6 Z2JPTUJfRFhZYWZjTmRBMXdsMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQgBAf8EGjAY oBYwFAIDANvsAgMCA88CAwIHwgIDAggQMIGABggrBgEFBQcBBwEB/wRxMG8wQgQC AAEwPAMEAy13mAMEAmcGlAMEAmcHyAMEAmcLMAMEAmcUqAMEAmfgdAMEAmfgpAME AmfxPAMEAmf8yAMEBd8ZQDApBAIAAjAjAwUAJAB5gAMFACQCMwADBQAkAzEAAwUA JAN/AAMFACQFMQAwDQYJKoZIhvcNAQELBQADggEBAMXOr/T2TeB1zgO6uKI+UhlB DEBtcl/8BzrkrI2zcLyP5bUy5to8BLfLLiEqasICJIh5UIIKn1SjUYVQVvKfMIJ1 3J1Fv8z9ZJ46sN0F1qzcRPUqX4mssjWjWxHDK3ZZgCPatVXFPMxo8Wi1YTS0b1Ij uvLW83AtddqkFXijFr2ocdwEUCP0CBmQw1NDHQYCJmPxeCTcbjsH7/ytw0D2BihS 2vNwXmzT5cDk6p96pvzzQIDEgFdS4CvGCx7Klfle96+qUOOGQK1cEkckQaAnPfrd ErSTZYa62PwOeZ7z5d5Z1BGwrg5L+cdeKUnuN3CuL5Pu0dMyjKqHe2nOkEvyDQI= -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:08 2025 by rpki-client