This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer (raw, json) Hash identifier: R8X07/hHbiaQ648uvW6wYlepjDlyF2Z2BbTh1Lw5//0= Subject key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 028289 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft caRepository: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 31 Dec 2025 18:49:45 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 138385 IP: 103.124.52.0/22 IP: 2403:da40::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164489 (0x28289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Dec 31 18:49:45 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:14:99:92:26:e2:8d:6b:07:9c:00:ef:a5: 8b:29:d0:02:49:1e:00:14:30:52:09:29:97:6e:32: 4d:9e:8c:cb:5c:80:ef:52:af:aa:ec:08:ad:01:5c: 6b:b4:a9:18:bd:b0:16:f9:ab:00:79:bf:8a:d9:fe: e4:2f:e0:d5:bc:d5:e7:fd:f8:43:28:6b:8c:e9:d0: a0:86:59:af:cd:45:e6:c7:a4:1e:e9:ac:05:b2:d9: fb:e6:f9:b6:0d:83:90:a2:b9:15:57:a9:38:5f:11: 98:54:c0:aa:9a:a7:51:76:b6:74:4e:6c:45:5b:f6: 7e:22:6f:f2:4e:a9:23:3e:6b:fa:2d:d9:a1:fc:73: 44:79:54:b5:ad:f9:28:54:29:dd:9a:af:a4:eb:39: 0e:f8:1f:0f:1d:ca:68:3c:68:40:08:ba:47:45:ac: 28:1d:bf:5b:06:94:1e:f5:7f:74:7f:79:96:4c:28: 3e:e4:69:7b:c1:8f:5a:6c:e6:9b:2c:6e:8c:0b:2a: 14:1c:3a:ce:fb:14:99:13:da:11:23:ca:e0:97:8e: 99:e3:c4:49:d0:1d:41:bf:51:db:a7:30:9a:2a:9f: da:2a:c9:a7:0e:92:d6:e2:0e:4a:e1:71:4a:08:b2: 32:cd:82:c1:22:78:24:1f:97:20:4d:3b:26:12:30: f1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 138385 sbgp-ipAddrBlock: critical IPv4: 103.124.52.0/22 IPv6: 2403:da40::/32 Signature Algorithm: sha256WithRSAEncryption d6:8b:9c:a9:15:4a:a2:61:a4:f2:47:ad:9c:0b:ae:e5:25:c1: e3:1e:10:e9:4b:8e:85:62:84:01:38:ab:51:ee:40:50:6a:06: 8d:17:84:92:1c:67:04:ce:de:a6:2d:cb:42:1a:7b:84:fa:72: 3a:f8:fb:b1:a4:4c:2b:e1:b3:36:bd:1e:59:3a:7d:0e:24:c2: 48:62:7b:8e:25:0a:dd:91:65:39:4b:2e:06:a8:59:b4:c2:48: 6a:62:7f:1c:b8:85:f9:a6:49:5f:83:4e:e6:67:15:24:46:f4: 00:3e:23:2d:59:9a:52:1a:c7:94:9f:42:6e:d8:1d:5d:31:8e: 60:6a:02:d8:9e:34:e0:7d:53:f1:16:74:0b:e7:74:ec:f9:26: cd:d6:c7:94:3a:8e:71:ea:83:6f:82:ad:85:92:5b:4b:de:6b: b1:a1:09:d9:d9:11:49:84:b9:88:7c:b3:5f:31:5c:50:ea:c8: a9:2f:88:c0:5b:30:35:93:f3:a9:dd:3a:c8:a7:c2:9b:9c:ae: 1a:1f:08:70:3f:36:e5:78:80:9b:e7:b3:fd:d1:12:35:77:ca: ce:c7:bc:50:7a:1a:de:3a:ad:fa:6c:ec:d2:7a:16:61:b1:06: 99:c3:fd:d4:a9:8f:d9:02:fd:9a:2a:dc:f6:fa:41:cc:19:7e: 68:6e:eb:ca -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAoKJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTIzMTE4NDk0NVoXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAwwIQTkxNzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5 RjQzNzYyNEU5QzAwMkRFNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIlxSZkibijWsHnADvpYsp0AJJHgAUMFIJKZduMk2ejMtcgO9Sr6rsCK0BXGu0 qRi9sBb5qwB5v4rZ/uQv4NW81ef9+EMoa4zp0KCGWa/NRebHpB7prAWy2fvm+bYN g5CiuRVXqThfEZhUwKqap1F2tnRObEVb9n4ib/JOqSM+a/ot2aH8c0R5VLWt+ShU Kd2ar6TrOQ74Hw8dymg8aEAIukdFrCgdv1sGlB71f3R/eZZMKD7kaXvBj1ps5pss bowLKhQcOs77FJkT2hEjyuCXjpnjxEnQHUG/UdunMJoqn9oqyacOktbiDkrhcUoI sjLNgsEieCQflyBNOyYSMPFFAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUgacVGxd1 kvhoI7afQ3Yk6cAC3kEwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTc1Mjk5LzI2ODkwRURBNDJDNTExRUFCMjZDRkQxQkM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE3NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hk MWt2aG9JN2FmUTNZazZjQUMza0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAhyRMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ3w0MA0EAgAC MAcDBQAkA9pAMA0GCSqGSIb3DQEBCwUAA4IBAQDWi5ypFUqiYaTyR62cC67lJcHj HhDpS46FYoQBOKtR7kBQagaNF4SSHGcEzt6mLctCGnuE+nI6+PuxpEwr4bM2vR5Z On0OJMJIYnuOJQrdkWU5Sy4GqFm0wkhqYn8cuIX5pklfg07mZxUkRvQAPiMtWZpS GseUn0Ju2B1dMY5gagLYnjTgfVPxFnQL53Ts+SbN1seUOo5x6oNvgq2FkltL3mux oQnZ2RFJhLmIfLNfMVxQ6sipL4jAWzA1k/Op3TrIp8KbnK4aHwhwPzbleICb57P9 0RI1d8rOx7xQehreOq36bOzSehZhsQaZw/3UqY/ZAv2aKtz2+kHMGX5obuvK -----END CERTIFICATE-----Generated at Sun Jan 25 01:16:08 2026 by rpki-client