This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer File: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer (raw, json) Hash identifier: qs+Gx/c/ZyrgXR1+xhmcyPhvmnBaY41e6E26CTQ7E8o= Subject key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02777A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft caRepository: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 24 Nov 2025 15:56:59 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 45477 IP: 113.29.224.0/20 IP: 2406:fc00::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161658 (0x2777a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 24 15:56:59 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A919D222, serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:0f:be:72:8f:a0:ae:c4:43:d4:92:29:7c: ba:fc:25:65:95:31:b4:03:e7:b1:94:3f:1b:7c:4e: 71:54:91:df:0d:50:54:84:00:7e:73:31:f8:04:b8: 1e:7a:9b:38:44:0e:8a:4a:0f:19:36:7f:e6:ab:b4: 92:91:dd:dd:b0:17:42:16:a7:93:fb:a0:15:ac:d6: ab:1c:0f:27:3a:bb:35:3e:3b:9d:5c:8b:e4:84:16: 76:a4:38:90:70:3a:1b:b4:01:69:36:09:fc:fa:29: ab:eb:a1:c7:b2:f9:d2:bf:a2:3d:71:4e:04:e3:dc: 89:7f:8c:ee:90:9d:4c:29:99:3f:84:c5:68:49:1f: 1e:34:9e:84:13:46:86:63:a1:31:fc:aa:a9:8c:13: 3c:4c:cc:9f:a5:75:cb:64:57:2f:97:83:e2:fe:9a: 6e:e2:7c:ab:fb:4c:74:30:bc:09:76:c1:98:a6:06: d5:bc:38:e8:47:f0:02:f9:5d:50:af:8e:a1:81:e5: 2a:ca:17:44:ac:eb:7f:14:2a:e9:30:59:b6:50:6a: ad:30:cd:2f:82:2b:20:a8:c6:d7:69:92:0b:80:67: 54:b3:a1:cc:85:5d:b8:3a:3e:5c:65:b2:6e:3a:4b: ed:ca:74:c7:f6:9b:27:40:f1:01:c8:3b:fd:93:15: a0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45477 sbgp-ipAddrBlock: critical IPv4: 113.29.224.0/20 IPv6: 2406:fc00::/32 Signature Algorithm: sha256WithRSAEncryption 49:e8:b7:62:f6:32:41:83:b8:64:9f:96:29:ed:67:7b:cd:3d: a6:cb:57:df:12:77:67:f1:3f:9f:c0:1a:ef:35:d0:8d:5b:3f: 68:30:7e:94:b4:67:d7:85:3d:fa:c4:93:37:86:15:1b:92:ab: 01:3c:b3:1e:44:5c:e7:97:09:ca:16:f8:fa:e7:a0:1a:69:f7: 34:47:4f:37:32:bb:61:2c:f4:7d:7e:36:94:ca:fb:fd:57:7d: 5b:67:7c:64:d8:ee:3e:32:76:3d:8a:10:28:b0:16:b9:62:59: 73:ae:87:ce:1c:e2:48:99:e8:57:c5:9e:9c:2e:26:37:7a:4f: b9:1c:2b:5c:bd:2b:90:23:c8:d2:42:74:a0:5d:74:e0:b0:81: 9d:0a:fe:a6:0e:27:04:83:bf:58:11:0e:af:6b:78:7c:e0:c6: c2:91:c5:5e:7f:26:cf:36:f3:6a:c3:1c:52:e3:f1:7a:a8:96: b2:eb:40:f0:c5:f7:de:ee:dc:3e:3c:66:4a:ca:4e:12:73:90: ea:50:d8:7e:60:17:b0:3a:e8:6c:d7:ff:8b:21:8e:31:2c:f6: a8:37:4f:05:6e:3b:28:f9:bf:13:83:0e:5e:21:56:5d:96:3b: 39:f6:d5:ef:96:b5:81:1a:98:ed:d0:a6:04:b5:ad:82:11:94: bd:29:bf:b2 -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIDAnd6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNDE1NTY1OVoXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxOUQyMjIxMTAvBgNVBAUTKDgyMDVFOTc5NkVDNjlBMEM3M0RDM0I1 QjNDRTEyQzQ4MTkyQjQ1NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClig++co+grsRD1JIpfLr8JWWVMbQD57GUPxt8TnFUkd8NUFSEAH5zMfgEuB56 mzhEDopKDxk2f+artJKR3d2wF0IWp5P7oBWs1qscDyc6uzU+O51ci+SEFnakOJBw Ohu0AWk2Cfz6Kavrocey+dK/oj1xTgTj3Il/jO6QnUwpmT+ExWhJHx40noQTRoZj oTH8qqmMEzxMzJ+ldctkVy+Xg+L+mm7ifKv7THQwvAl2wZimBtW8OOhH8AL5XVCv jqGB5SrKF0Ss638UKukwWbZQaq0wzS+CKyCoxtdpkguAZ1SzocyFXbg6Plxlsm46 S+3KdMf2mydA8QHIO/2TFaD1AgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUggXpeW7G mgxz3DtbPOEsSBkrRXcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTlEMjIyLzg3NjQ0ODlDQ0Q3RjExRUZBNTg0ODgzOEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTE5RDIyMi84NzY0NDg5Q0NEN0YxMUVGQTU4NDg4MzhDNEY5QUUwMi9nZ1hwZVc3 R21neHozRHRiUE9Fc1NCa3JSWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALGlMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEcR3gMA0EAgAC MAcDBQAkBvwAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ6Ldi9jJBg7hkn5Yp7Wd7zT2m y1ffEndn8T+fwBrvNdCNWz9oMH6UtGfXhT36xJM3hhUbkqsBPLMeRFznlwnKFvj6 56Aaafc0R083MrthLPR9fjaUyvv9V31bZ3xk2O4+MnY9ihAosBa5YllzrofOHOJI mehXxZ6cLiY3ek+5HCtcvSuQI8jSQnSgXXTgsIGdCv6mDicEg79YEQ6va3h84MbC kcVefybPNvNqwxxS4/F6qJay60Dwxffe7tw+PGZKyk4Sc5DqUNh+YBewOuhs1/+L IY4xLPaoN08Fbjso+b8Tgw5eIVZdljs59tXvlrWBGpjt0KYEta2CEZS9Kb+y -----END CERTIFICATE-----Generated at Sun Dec 7 02:41:10 2025 by rpki-client