This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer
File: WYMt_ndUWn2J_bBhkVxnGef4K98.cer (raw, json)
Hash identifier: Iu/lrbVMsXh1mFUFJWxAHbaQ2TqIz6CnJBLA7G5Ww7I=
Subject key identifier: 59:83:2D:FE:77:54:5A:7D:89:FD:B0:61:91:5C:67:19:E7:F8:2B:DF
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4F90
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 21 Jan 2026 09:56:30 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.44.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20368 (0x4f90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jan 21 09:56:30 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91D8601, serialNumber=59832DFE77545A7D89FDB061915C6719E7F82BDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:1e:8b:2e:cd:e8:c5:17:74:ad:3f:84:2e:
f3:ca:31:2e:0b:6e:0d:11:44:8c:88:e8:ac:f7:13:
7f:95:7d:cc:75:0c:11:d4:70:71:41:1c:19:fe:4d:
aa:20:ec:b2:83:c2:ba:d4:0c:c3:06:22:30:5b:d2:
bf:5d:23:2b:c0:ef:bf:9c:44:01:06:a0:42:26:ae:
a7:a5:cb:92:1c:ec:06:d0:5a:fc:1a:81:e1:a0:25:
31:c0:d1:ac:69:ef:fc:2a:58:17:62:e5:d8:2c:94:
f4:42:ba:3c:ff:a4:2a:38:77:ed:0a:00:fc:80:f1:
8c:23:e8:ca:52:1f:5f:3a:b3:5a:3c:5b:f2:a9:cf:
0c:9c:10:b7:b8:a9:49:fe:f6:a9:0d:87:c0:c1:dd:
2c:e2:0e:62:31:fd:d5:10:05:be:68:e7:d5:a4:1a:
cf:6a:b8:ab:99:d5:11:4b:52:2a:d3:6b:55:8d:2a:
a1:53:23:28:f3:01:1f:cc:b5:d6:d9:af:fb:24:4e:
1c:61:90:1d:7d:1e:bd:b5:a9:19:70:cc:91:3d:8b:
66:43:e8:a4:8b:ba:0f:6a:c4:f8:d9:93:57:e4:19:
dc:6b:68:b4:d0:12:1e:5c:cd:30:c3:48:87:cf:cb:
27:69:76:a5:90:cd:7a:93:30:23:90:62:83:dd:55:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:83:2D:FE:77:54:5A:7D:89:FD:B0:61:91:5C:67:19:E7:F8:2B:DF
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.44.0/23
Signature Algorithm: sha256WithRSAEncryption
89:bf:4e:bb:05:57:f7:3c:eb:f2:df:8b:73:ad:b1:c8:70:c1:
49:14:81:a9:a1:c7:c0:c6:50:b9:ce:5b:27:a9:2a:03:79:26:
65:22:bf:c6:d8:f6:de:c6:16:b5:ee:eb:79:c5:81:4d:af:09:
e8:0a:a2:b9:36:31:da:5b:05:58:bb:2a:dd:9b:6e:35:01:21:
cd:55:fe:fc:e3:8d:8a:db:bb:40:9d:bc:9c:82:4c:6d:fb:e9:
6f:96:1e:89:d2:de:52:2a:7a:f8:a5:26:31:22:f5:36:4e:bd:
97:60:c3:88:b1:0a:f0:b7:49:06:19:52:2f:95:08:eb:2f:ac:
eb:03:f9:48:8c:5c:c3:4f:1e:d2:d8:8a:c8:83:54:68:f8:57:
2a:33:fc:21:65:b1:e5:3a:dd:e6:93:b2:7e:ce:2d:34:30:0b:
68:1b:0b:bf:ab:50:ed:e1:3a:3d:07:37:71:0b:5f:a0:dd:21:
7c:61:f7:e4:f9:d0:6a:5e:d4:19:55:aa:ba:2b:18:aa:bf:19:
85:90:d9:0c:f8:d1:22:07:e4:dd:05:9d:f0:b7:b9:a8:a4:8f:
be:d7:b0:ec:7f:f7:e7:ca:08:5e:4b:f3:29:fe:7f:4f:c2:6c:
8f:35:8d:f6:e0:87:a6:c4:3b:67:4e:cf:b8:1a:61:b2:d3:8d:
99:48:ca:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:30:03 2026 by rpki-client