This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xwH8WXnzqxZZwZkFuelJyaY7w4.cer
File: 5xwH8WXnzqxZZwZkFuelJyaY7w4.cer (raw, json)
Hash identifier: j/BVczkuGWBqUFvsPYxiDYXT7ruTrTZ/rJxQvWQNqMQ=
Subject key identifier: E7:1C:07:F1:65:E7:CE:AC:59:67:06:64:16:E7:A5:27:26:98:EF:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028169
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/5xwH8WXnzqxZZwZkFuelJyaY7w4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 Dec 2025 05:19:18 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 154462
IP: 2402:4320::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164201 (0x28169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 29 05:19:18 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A9193C07, serialNumber=E71C07F165E7CEAC5967066416E7A5272698EF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:b0:80:70:03:b2:14:62:e2:75:35:30:d4:
8c:3d:c2:2e:45:87:d2:44:91:67:bb:64:7c:20:e7:
4b:cd:b9:54:e2:f6:ac:0d:4c:5d:9c:f4:64:94:4b:
75:5f:f0:07:12:83:fb:b5:19:a3:14:4b:0a:8c:17:
3c:1e:ee:4f:46:5d:09:5d:14:e3:05:e7:9b:2b:fe:
67:3e:00:45:a5:23:34:80:84:b9:01:2a:ad:cf:94:
52:ff:e8:87:cc:39:99:3c:2e:c8:64:e9:51:8c:6a:
b6:e9:42:72:e1:fd:8b:f9:69:3a:31:c3:26:83:df:
47:0a:9b:01:d5:eb:90:be:b6:ac:ce:15:d6:b3:2e:
48:a3:6d:5d:16:c3:24:c2:c2:74:25:a7:7b:4a:70:
3b:1b:0d:43:74:e1:31:52:b5:15:66:5a:0a:aa:33:
a9:eb:85:34:8f:c4:39:3c:41:33:9e:d8:8d:1c:5c:
ef:47:0e:87:96:ac:2b:3c:7f:c0:8a:b2:93:24:fd:
ca:bb:a8:f8:5a:28:05:44:c5:ba:44:99:1a:23:51:
2f:4c:02:6f:82:c1:76:25:94:9d:b3:dc:db:4d:4f:
90:fc:09:5b:80:c0:71:02:2a:a0:fa:93:a2:37:2a:
9b:aa:f6:90:99:90:b5:6a:d2:31:a2:43:53:5a:a2:
77:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1C:07:F1:65:E7:CE:AC:59:67:06:64:16:E7:A5:27:26:98:EF:0E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/5xwH8WXnzqxZZwZkFuelJyaY7w4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154462
sbgp-ipAddrBlock: critical
IPv6:
2402:4320::/32
Signature Algorithm: sha256WithRSAEncryption
be:7e:e8:bf:17:11:7a:0e:2f:4c:43:df:28:3a:bc:56:8b:0b:
88:da:12:cf:b2:b1:a9:19:d6:43:b7:f8:e6:65:be:3f:ef:46:
f5:47:0b:cf:fc:50:96:c3:c8:66:c4:d2:23:d5:e9:03:e9:53:
aa:55:d8:3a:44:c3:08:a7:d6:8b:b2:8d:ed:40:fe:49:bf:75:
63:7c:4b:f1:60:53:80:f0:8a:cd:80:e1:9b:30:47:d9:82:91:
3b:b8:b9:ef:59:b4:01:8b:5d:7e:1d:3f:bd:86:10:de:e1:c5:
bd:8b:54:18:e5:55:ce:af:9d:8e:2a:7e:34:99:87:36:2f:35:
3f:7f:5b:f4:f3:09:95:f5:53:da:a0:42:c9:aa:bd:6b:5e:47:
bd:53:78:1d:c1:55:26:42:3c:02:98:61:5f:e2:60:35:38:8f:
7f:94:a5:19:a4:1d:61:2d:c4:e4:b5:df:66:b8:bc:66:5d:2a:
7c:86:ce:37:0f:92:d3:c4:14:36:c5:88:0e:88:2a:8c:82:98:
95:9a:57:cc:79:a6:82:6e:38:60:a1:34:32:ec:c7:a6:06:13:
70:82:95:0d:f8:72:17:71:61:59:eb:34:c1:67:a3:59:2d:e1:
25:20:68:65:7f:7e:56:5a:96:62:fc:4f:e7:ed:0e:64:27:2f:
f4:2a:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 01:11:42 2026 by rpki-client