This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer File: Gu-1HeyOsHlip15FnOIQp0ABBPs.cer (raw, json) Hash identifier: YKZajUieqGK/WDfAUzpIemPxFhPdPYt6BYE8mpIxnSI= Subject key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0276F4 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft caRepository: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 21 Nov 2025 17:16:43 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: AS: 7654 AS: 24299 AS: 38889 AS: 45254 AS: 55802 AS: 136947 IP: 202.5.80.0/20 IP: 202.6.16.0/20 IP: 202.43.32.0/20 IP: 202.57.128.0/18 IP: 202.142.192.0/19 IP: 203.153.160.0/19 IP: 2406:400::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161524 (0x276f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 21 17:16:43 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:64:20:22:6e:b7:60:a3:cc:af:31:25:f8: e9:1e:9d:4b:50:d6:a3:e2:9b:09:59:de:7c:be:a7: 50:cf:e1:f0:13:91:d3:d1:31:d4:f4:58:27:8b:8e: 26:29:1f:0d:c5:72:42:56:2d:ff:c6:f8:58:34:ff: 04:a9:b8:b1:e4:50:1d:4b:e6:a6:87:21:e3:19:1f: 16:9a:45:52:61:b7:1d:6b:26:91:f1:07:fb:82:3c: 2e:af:5b:cc:2a:f6:fd:ba:f1:c7:03:7d:3d:6d:8d: ec:93:67:6d:96:d6:2a:f2:f6:3f:c1:c4:e3:b4:c3: fa:b8:00:4c:22:8d:b3:8a:21:0e:94:80:d7:8d:31: 71:c4:ec:78:65:3e:e2:f2:d1:62:42:1d:2f:25:47: 61:d6:86:18:fa:ec:e7:f3:83:f6:90:5f:10:42:00: 96:c5:d0:c8:54:14:9b:67:43:4d:12:a9:9a:7a:8f: 8e:80:fb:3f:aa:ad:b9:56:89:6c:88:7f:9a:3a:a0: 42:62:04:70:31:9f:7d:07:93:11:52:f4:5d:42:f8: cd:4f:6d:68:6e:9c:2a:48:a4:fa:e7:5a:67:96:a7: 51:41:21:5f:44:84:7d:7b:21:62:46:87:85:e7:85: 93:59:ca:c7:33:28:98:fc:fa:05:dc:42:94:d4:c4: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 7654 24299 38889 45254 55802 136947 sbgp-ipAddrBlock: critical IPv4: 202.5.80.0/20 202.6.16.0/20 202.43.32.0/20 202.57.128.0/18 202.142.192.0/19 203.153.160.0/19 IPv6: 2406:400::/32 Signature Algorithm: sha256WithRSAEncryption ba:ed:46:7d:c2:22:4f:45:ad:52:10:c9:aa:29:aa:be:0e:24: 6e:f6:5a:6d:21:66:22:86:6e:46:63:cf:8d:33:3c:82:db:24: 5c:36:3e:9f:e0:9c:c6:e8:b0:e1:4f:96:7e:00:63:11:32:61: d8:65:5d:bc:60:f3:fc:b7:d1:58:6a:75:4c:0c:3d:4b:20:82: 00:1b:a9:3a:a9:c0:8e:d0:e1:81:63:f1:ad:bf:0a:bf:83:6e: 53:ec:ff:65:e9:12:ba:80:9b:84:0e:8d:a9:91:ab:0f:bf:66: 4a:f3:3a:6f:9d:ac:10:f8:a9:25:7b:e7:48:a0:d6:04:1a:63: b2:6d:13:8f:3a:1b:7c:47:f7:94:e9:64:ef:02:e5:76:45:8b: d2:89:6b:73:99:03:0b:ce:29:cc:fe:fa:8e:bd:bc:15:e9:e9: 8e:bf:22:93:17:ab:86:49:74:e7:e2:da:79:c4:26:4c:e7:10: 97:86:5f:cf:cc:f7:ba:9d:a7:4f:f9:30:6d:93:83:8e:14:46: e8:69:0b:89:90:58:b0:03:32:3b:5a:9d:87:d0:71:a9:97:53: 42:98:0d:1e:ec:a3:cb:03:e0:90:77:02:5e:f6:12:bc:bf:64: ad:0f:c1:39:36:68:0b:d0:8e:ac:70:70:be:ef:ab:88:f5:9e: d3:70:99:e4 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIDAnb0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyMTE3MTY0M1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxRDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0 NTlDRTIxMEE3NDAwMTA0RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Z2QgIm63YKPMrzEl+OkenUtQ1qPimwlZ3ny+p1DP4fATkdPRMdT0WCeLjiYp Hw3FckJWLf/G+Fg0/wSpuLHkUB1L5qaHIeMZHxaaRVJhtx1rJpHxB/uCPC6vW8wq 9v268ccDfT1tjeyTZ22W1iry9j/BxOO0w/q4AEwijbOKIQ6UgNeNMXHE7HhlPuLy 0WJCHS8lR2HWhhj67Ofzg/aQXxBCAJbF0MhUFJtnQ00SqZp6j46A+z+qrblWiWyI f5o6oEJiBHAxn30HkxFS9F1C+M1PbWhunCpIpPrnWmeWp1FBIV9EhH17IWJGh4Xn hZNZysczKJj8+gXcQpTUxFKXAgMBAAGjggNTMIIDTzAdBgNVHQ4EFgQUGu+1HeyO sHlip15FnOIQp0ABBPswHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUQzREFFL0ZFRkJDQzhFMUQ4RjExRTJCNTRBN0RFRjA4QjAyQ0QyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFEM0RBRS9GRUZCQ0M4RTFEOEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5 T3NIbGlwMTVGbk9JUXAwQUJCUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQgBAf8EIjAg oB4wHAICHeYCAl7rAgMAl+kCAwCwxgIDANn6AgMCFvMwTAYIKwYBBQUHAQcBAf8E PTA7MCoEAgABMCQDBATKBVADBATKBhADBATKKyADBAbKOYADBAXKjsADBAXLmaAw DQQCAAIwBwMFACQGBAAwDQYJKoZIhvcNAQELBQADggEBALrtRn3CIk9FrVIQyaop qr4OJG72Wm0hZiKGbkZjz40zPILbJFw2Pp/gnMbosOFPln4AYxEyYdhlXbxg8/y3 0VhqdUwMPUsgggAbqTqpwI7Q4YFj8a2/Cr+DblPs/2XpErqAm4QOjamRqw+/Zkrz Om+drBD4qSV750ig1gQaY7JtE486G3xH95TpZO8C5XZFi9KJa3OZAwvOKcz++o69 vBXp6Y6/IpMXq4ZJdOfi2nnEJkznEJeGX8/M97qdp0/5MG2Tg44URuhpC4mQWLAD MjtanYfQcamXU0KYDR7so8sD4JB3Al72Ery/ZK0PwTk2aAvQjqxwcL7vq4j1ntNw meQ= -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:45 2025 by rpki-client