This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
File: fjqkjWfrmWmcArgfcWlt9GWopuU.cer (raw, json)
Hash identifier: FDXzDCQfj0zbORoM8Ya/03CK2aHImoAjHu3y7mbW1mQ=
Subject key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6E54
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Nov 2025 14:48:43 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 160.187.210.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 11:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28244 (0x6e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Nov 18 14:48:43 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:d4:fd:7d:32:e0:67:4a:22:24:5f:df:c5:
05:2f:da:44:9b:3d:f0:4b:ae:21:fd:35:a5:e3:32:
61:d0:eb:ff:fc:ed:9f:7c:41:47:de:48:6e:23:d1:
a8:5f:62:38:4a:2d:23:3f:ac:c9:ec:ef:cc:4a:66:
ca:57:5f:02:d8:27:43:d5:f5:14:c6:76:2c:3f:df:
e8:05:f1:0c:d2:41:c8:5e:4e:13:67:df:24:5e:ab:
1b:b0:f5:d7:8b:b3:cd:f8:80:b1:08:d0:b2:0b:c3:
6e:41:5e:fd:bb:35:c8:a3:62:b9:d1:76:c0:c3:27:
7a:59:e7:9f:e7:d3:eb:ff:6f:6a:c9:07:50:de:ae:
11:b1:37:be:ac:a0:ef:85:1c:4a:41:eb:70:73:2d:
95:5e:38:89:80:ad:87:ff:63:c6:46:38:23:4c:27:
53:b4:89:7f:87:ae:03:59:be:89:03:48:0b:b5:3e:
8f:a1:3c:fd:8c:97:d4:fe:0d:90:57:04:47:aa:d8:
c5:a9:4f:ec:2e:85:80:b1:d1:a5:4a:b6:b8:0c:4d:
85:a1:a5:04:f1:00:e7:f4:92:25:97:3d:ba:64:40:
29:a0:09:37:b3:54:03:6c:ee:69:dd:78:fc:e3:36:
71:a7:a5:5d:2f:af:87:89:96:5d:1c:f1:3a:2f:76:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.210.0/23
Signature Algorithm: sha256WithRSAEncryption
78:35:13:0e:31:42:c0:63:9d:33:4f:30:92:6f:08:9e:f4:81:
a6:b7:bb:e6:4f:32:1f:78:19:e7:97:ca:12:20:89:50:08:25:
1f:4a:f4:a1:06:c0:c1:0e:22:68:e6:b1:68:d6:a8:c6:1b:0e:
41:e9:3c:3b:dd:4e:92:b9:be:4d:ff:b4:1d:56:bc:6b:ee:e0:
ec:15:e8:96:b4:de:f9:22:07:8f:fe:7f:58:ed:55:de:6c:28:
0b:1c:74:1b:39:79:f6:81:a2:f8:c5:ba:92:77:fa:2c:8c:1d:
60:ea:9a:6a:e0:8d:7e:08:35:9a:19:7a:b9:2d:4e:2a:06:10:
a9:ae:4b:f3:2b:b4:ac:66:c4:1f:1a:b8:76:73:05:b3:94:dc:
7a:fb:0e:94:08:ff:a1:28:25:4e:5c:7d:21:3c:a9:f6:70:18:
17:1b:34:b5:7c:04:c0:2f:bf:e5:a7:32:5d:08:56:8a:ed:8b:
5e:59:51:40:63:6f:5e:64:da:e1:ba:ac:5f:75:f6:d3:75:ee:
e1:80:b6:a2:e9:49:60:96:43:14:03:bc:b7:8a:71:df:b4:f4:
95:0b:ee:a1:4b:dc:18:75:0a:7e:c2:2f:ad:68:29:dc:2b:ae:
0b:ff:3e:a3:e0:2a:8b:8b:e5:ae:be:52:93:28:0e:54:fe:94:
64:ea:c6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:11:48 2025 by rpki-client