This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
File: xeslRrtzrOaT4ZqxB9g_JmYyzug.cer (raw, json)
Hash identifier: xtgPosldQV0TuF0OMbcEOCVLh4uTBmvpJtEhIz/hCQs=
Subject key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4FA4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 22 Jan 2026 15:19:13 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 151.158.50.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20388 (0x4fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Jan 22 15:19:13 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c2:8e:b4:d7:40:1a:3c:ad:cf:64:02:ef:96:
fa:14:1a:c2:1b:95:c6:b6:46:0e:c6:7c:e9:cb:cb:
b1:fa:50:66:18:07:48:d0:9f:e4:0f:f3:4d:67:72:
69:cd:38:55:fa:e0:92:5d:f2:76:ca:76:05:ea:5f:
1e:a7:f7:95:47:87:8e:68:e6:99:b3:ae:8d:e4:f1:
82:1a:b6:4f:ac:f3:77:3c:ad:c7:69:f0:d4:90:d2:
24:1d:1d:e4:f2:b6:b4:e7:24:ab:7b:08:b7:fa:ba:
85:d3:8c:a9:9d:78:a8:4a:4c:8b:f0:e4:44:d9:f4:
a1:93:ac:6d:d1:13:65:e5:6e:43:1e:ea:c8:12:fc:
7b:0b:9e:56:bd:cb:d0:55:ca:5b:58:18:42:22:db:
d0:0d:df:fd:08:11:5f:0c:37:2e:2e:0a:0b:3e:f8:
87:06:e0:b3:45:ce:aa:ee:88:0d:5f:cd:d6:ac:e0:
ba:9a:4f:d8:af:e2:b5:5a:eb:18:ba:62:76:e3:78:
36:23:63:3f:e5:92:a7:13:0c:d5:16:e3:89:34:38:
58:62:64:6a:04:f9:52:8b:0e:aa:8c:93:c0:75:4a:
e4:2d:60:84:e0:1d:fe:70:2e:76:da:f9:1e:c3:f8:
0b:04:5f:16:e0:65:74:c3:7a:af:f5:75:30:7f:be:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.50.0/23
Signature Algorithm: sha256WithRSAEncryption
04:f3:09:67:25:56:d3:c0:b7:47:09:e8:5b:83:07:6e:53:82:
5f:c5:e1:41:c0:d7:80:5e:53:ac:38:5a:df:db:14:c5:ac:4a:
3c:e2:cb:28:e0:e7:ba:bc:49:0b:c2:fa:fe:31:50:4b:86:40:
10:ef:c4:54:e1:41:b3:09:62:e6:f2:c7:e7:0b:09:84:84:a5:
49:cc:95:c1:08:8d:a3:9c:89:c3:5c:a0:75:2b:05:e8:5b:3f:
7b:e8:17:f3:1a:db:46:76:c0:84:ec:fa:ff:88:01:92:4b:00:
a3:ce:14:d3:43:82:74:6d:30:f8:6a:c6:2f:dc:ca:b3:fe:cc:
d1:97:d1:5a:d0:d5:5c:8a:db:70:68:84:0a:92:d1:3e:67:6b:
fc:76:53:6a:b9:b4:49:ae:f5:4b:84:d4:b6:32:78:4a:11:92:
59:ea:33:92:37:4c:ba:29:e7:79:01:3c:25:a4:79:5c:69:86:
70:92:90:17:68:70:fb:c3:36:df:96:e9:ee:e9:3d:59:17:a0:
00:76:8a:e3:b3:42:86:67:b1:fa:5a:d5:ec:55:03:c3:b8:6a:
8f:80:48:ea:88:7f:d0:83:bf:63:7e:2e:7c:f7:f9:05:50:1f:
6a:69:3f:4d:36:c1:fc:67:43:1f:bc:d4:32:ff:6c:fa:02:8b:
77:be:77:70
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICT6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYwMTIyMTUxOTEzWhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDDAhBOTE5N0E1NTExMC8GA1UEBRMoQzVFQjI1NDZCQjczQUNFNjkzRTE5QUIx
MDdEODNGMjY2NjMyQ0VFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AI7CjrTXQBo8rc9kAu+W+hQawhuVxrZGDsZ86cvLsfpQZhgHSNCf5A/zTWdyac04
Vfrgkl3ydsp2BepfHqf3lUeHjmjmmbOujeTxghq2T6zzdzytx2nw1JDSJB0d5PK2
tOckq3sIt/q6hdOMqZ14qEpMi/DkRNn0oZOsbdETZeVuQx7qyBL8ewueVr3L0FXK
W1gYQiLb0A3f/QgRXww3Li4KCz74hwbgs0XOqu6IDV/N1qzguppP2K/itVrrGLpi
duN4NiNjP+WSpxMM1RbjiTQ4WGJkagT5UosOqoyTwHVK5C1ghOAd/nAudtr5HsP4
CwRfFuBldMN6r/V1MH++p50CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTF6yVGu3Os
5pPhmrEH2D8mZjLO6DAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTdBNTUvQjMyQjUwMjhGN0E1MTFGMDg3RTUxRjE2NTU2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk3QTU1L0IzMkI1MDI4RjdBNTExRjA4N0U1MUYxNjU1NkY1NkJDL3hlc2xScnR6
ck9hVDRacXhCOWdfSm1ZeXp1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZeeMjANBgkqhkiG9w0BAQsFAAOCAQEABPMJZyVW08C3RwnoW4MH
blOCX8XhQcDXgF5TrDha39sUxaxKPOLLKODnurxJC8L6/jFQS4ZAEO/EVOFBswli
5vLH5wsJhISlScyVwQiNo5yJw1ygdSsF6Fs/e+gX8xrbRnbAhOz6/4gBkksAo84U
00OCdG0w+GrGL9zKs/7M0ZfRWtDVXIrbcGiECpLRPmdr/HZTarm0Sa71S4TUtjJ4
ShGSWeozkjdMuinneQE8JaR5XGmGcJKQF2hw+8M235bp7uk9WRegAHaK47NChmex
+lrV7FUDw7hqj4BI6oh/0IO/Y34ufPf5BVAfamk/TTbB/GdDH7zUMv9s+gKLd753
cA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:00:56 2026 by rpki-client