This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
File: 8NcRIKkqhY23KUlvzL8YJcnwPGM.cer (raw, json)
Hash identifier: y/r9IWym6c+aohOJK9V/ICt+I6ETcSeipkHDhjd+uoQ=
Subject key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4FB2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 23 Jan 2026 14:46:14 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.76.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20402 (0x4fb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jan 23 14:46:14 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:a1:14:86:67:43:5f:5f:0d:b1:fa:38:5b:
58:2e:49:da:72:7a:2e:65:83:31:66:6a:ed:04:80:
81:b2:f8:2a:62:e5:fe:a1:74:3f:09:73:ce:d6:03:
a2:08:52:69:f8:37:9a:8b:78:d1:b5:6f:54:04:28:
0d:a1:fe:b9:31:f5:86:df:f5:8b:b9:b4:69:58:7a:
bb:bf:b2:f6:2e:92:88:af:ac:00:2e:a3:c9:cd:e3:
64:d7:26:3c:71:11:d3:5d:4a:de:20:95:4a:c5:3d:
a1:d5:d4:0f:b0:97:fd:14:c4:8d:cf:b8:8a:65:b4:
ff:2a:b5:8b:17:b9:d6:36:56:d5:70:59:17:da:a2:
47:18:5d:8f:2c:d8:66:43:da:9f:4a:8f:8c:12:72:
e9:3e:5e:d4:6d:8b:b7:f4:ce:51:95:39:ea:5e:8d:
ac:04:9c:a2:22:34:cb:c2:3e:82:d6:1d:46:6e:29:
e7:11:3e:98:15:c9:5d:91:3b:78:cb:6a:3c:0a:7c:
5f:f2:f0:dc:61:7a:93:0e:80:9b:67:50:74:c3:fc:
c3:c6:21:be:4c:9f:0f:4d:91:43:ea:72:30:02:15:
d0:7e:b8:ae:1a:8d:b0:06:88:04:80:7e:a4:78:cc:
04:97:7e:92:86:bc:41:f0:e2:2e:04:cb:ff:91:98:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.76.0/23
Signature Algorithm: sha256WithRSAEncryption
98:90:8b:3e:ff:04:64:39:ef:dc:96:77:31:61:7b:bd:ee:89:
83:41:af:26:17:e5:9d:62:d3:3b:72:81:b1:9d:5c:8f:db:bf:
15:7b:24:a5:81:a8:8f:f2:17:e6:21:ba:37:77:76:5c:fb:27:
11:31:e1:da:cd:9f:82:8f:09:a8:d4:41:f8:69:70:15:8f:8f:
22:b3:16:03:70:7f:9f:63:36:0e:6e:a0:2c:ca:62:b0:b1:b3:
89:61:30:b8:a9:35:c1:ea:23:7f:22:7a:11:5c:a7:d8:c7:4a:
25:f9:4a:5d:4c:3e:07:2e:49:b2:67:cb:dc:b6:92:28:37:95:
2b:74:4a:4b:e3:ab:56:47:5f:63:df:8e:e4:09:ba:05:28:e0:
6f:8b:79:4d:36:b4:b3:1a:05:7b:ed:e0:3e:36:e4:00:fd:ce:
5e:65:a9:59:88:f9:3e:e6:34:94:19:e5:17:2a:6d:fe:8c:cb:
34:d6:ca:9d:c3:94:d9:40:a0:63:48:1c:7d:93:cb:22:b7:f3:
86:9c:39:50:d8:27:6b:88:db:28:81:3a:ce:28:e3:bd:b7:c3:
45:b6:08:92:19:a0:51:31:bc:aa:8e:be:7e:97:e9:b2:22:50:
1a:0b:b2:31:8e:cb:6a:63:e1:8c:93:5d:a4:f2:4c:ac:45:ec:
1d:35:05:7e
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICT7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYwMTIzMTQ0NjE0WhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDDAhBOTFDQ0I4MTExMC8GA1UEBRMoRjBENzExMjBBOTJBODU4REI3Mjk0OTZG
Q0NCRjE4MjVDOUYwM0M2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALnHoRSGZ0NfXw2x+jhbWC5J2nJ6LmWDMWZq7QSAgbL4KmLl/qF0PwlzztYDoghS
afg3mot40bVvVAQoDaH+uTH1ht/1i7m0aVh6u7+y9i6SiK+sAC6jyc3jZNcmPHER
011K3iCVSsU9odXUD7CX/RTEjc+4imW0/yq1ixe51jZW1XBZF9qiRxhdjyzYZkPa
n0qPjBJy6T5e1G2Lt/TOUZU56l6NrAScoiI0y8I+gtYdRm4p5xE+mBXJXZE7eMtq
PAp8X/Lw3GF6kw6Am2dQdMP8w8YhvkyfD02RQ+pyMAIV0H64rhqNsAaIBIB+pHjM
BJd+koa8QfDiLgTL/5GYAqcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTw1xEgqSqF
jbcpSW/MvxglyfA8YzAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0NCODEvNDFGREQzODhGODZBMTFGMEI0QkJBRjNDNEE2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNDQjgxLzQxRkREMzg4Rjg2QTExRjBCNEJCQUYzQzRBNkY1NkJDLzhOY1JJS2tx
aFkyM0tVbHZ6TDhZSmNud1BHTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZeeTDANBgkqhkiG9w0BAQsFAAOCAQEAmJCLPv8EZDnv3JZ3MWF7
ve6Jg0GvJhflnWLTO3KBsZ1cj9u/FXskpYGoj/IX5iG6N3d2XPsnETHh2s2fgo8J
qNRB+GlwFY+PIrMWA3B/n2M2Dm6gLMpisLGziWEwuKk1weojfyJ6EVyn2MdKJflK
XUw+By5JsmfL3LaSKDeVK3RKS+OrVkdfY9+O5Am6BSjgb4t5TTa0sxoFe+3gPjbk
AP3OXmWpWYj5PuY0lBnlFypt/ozLNNbKncOU2UCgY0gcfZPLIrfzhpw5UNgna4jb
KIE6zijjvbfDRbYIkhmgUTG8qo6+fpfpsiJQGguyMY7LamPhjJNdpPJMrEXsHTUF
fg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:30:07 2026 by rpki-client