This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
File: 2Y9v2wB__4PhEwj61Voer6g4dM4.cer (raw, json)
Hash identifier: sCjazIdo984RfoqFdz1NIg+N/adSh5DXzs+NTmjbEuM=
Subject key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0287B1
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 21 Jan 2026 09:55:46 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 138145
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165809 (0x287b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 21 09:55:46 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:49:2d:ca:eb:03:49:44:70:9f:c2:ed:8b:
89:fb:d2:33:80:b3:3d:81:51:69:10:22:e0:df:55:
d6:dd:5b:ad:42:5c:14:b1:15:c3:40:b3:c0:c0:bd:
ab:d1:6c:dc:d2:eb:2d:01:c0:b2:68:de:5a:0c:fc:
24:3e:fd:5e:9c:16:68:74:2a:42:3f:87:c7:19:96:
fa:08:95:97:54:2d:4f:ba:e9:4c:df:36:9d:d5:05:
70:d8:8a:2c:1b:36:af:8c:2e:58:85:99:16:21:00:
db:39:1a:d4:c8:c2:e0:8e:73:45:2b:32:73:ff:47:
d0:0a:f9:19:3b:4a:ce:fc:31:db:d5:ce:1b:df:1a:
fb:9d:95:07:43:01:c0:a0:4c:7f:ff:0c:b5:73:b7:
9e:25:b0:db:d5:48:85:91:94:ba:23:1e:d9:0c:d8:
71:d8:e6:bb:06:45:dc:15:7c:f2:fe:52:c1:8b:5a:
e6:51:b3:05:01:0f:95:e0:cc:0c:86:fd:b8:9e:fe:
7e:63:8b:1f:8d:39:84:52:53:ad:ae:ce:26:f0:f7:
5b:5a:29:ff:cd:a6:42:ab:96:c6:dd:d7:98:7d:a4:
ec:ad:c4:f9:8b:f8:f0:25:02:8b:4d:74:c8:0c:70:
3d:09:66:d7:01:a1:c0:d4:c4:cf:3f:69:cf:f7:96:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
138145
Signature Algorithm: sha256WithRSAEncryption
c3:1a:a6:b6:ea:07:cf:1a:d9:da:01:43:23:a3:0b:72:27:87:
d0:fb:19:8e:6f:50:de:d8:80:5b:8d:ff:9c:61:d0:80:e7:ff:
eb:6e:2b:20:ec:a9:23:de:b2:dd:81:3b:69:ba:35:7f:97:0c:
ec:c3:11:16:7e:31:2c:9a:b7:b2:e1:f2:56:f3:4b:e9:fb:7a:
7f:a7:b3:bc:99:0c:2c:84:0c:e5:22:35:0c:49:6f:5c:a6:1d:
03:30:0b:ba:0a:9a:cf:78:36:1a:03:3a:d0:9d:8c:b4:7d:0c:
5d:9c:c9:73:83:5e:c8:e4:55:09:8f:02:68:da:58:a5:1f:82:
d9:3f:b0:78:06:8a:06:fc:86:35:37:e7:5e:50:c4:71:d6:1b:
3a:1f:27:4d:88:2e:0a:e8:1d:fc:fc:09:3a:46:86:ec:fd:da:
1f:12:69:fa:f0:aa:9d:9f:7e:d5:2e:fe:b7:e8:ea:1d:f1:d4:
68:5b:74:4a:2d:72:8e:02:3e:35:7d:04:d5:99:e1:fa:61:71:
0f:56:03:0e:00:de:92:f1:87:1a:f7:53:5c:06:26:e1:c3:d6:
74:ac:04:c7:ec:58:08:c3:e9:e9:b0:49:82:22:79:b3:a9:9d:
5b:a3:f4:72:14:93:09:0c:54:70:81:d8:71:1f:df:61:25:08:
73:58:1f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:15:33 2026 by rpki-client