This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.cer (raw, json)
Hash identifier: 2FS+LWeLzqmP23IKSFgciMSJ7MOeqkA2X3980eYDxm0=
Subject key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0285DB
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 13 Jan 2026 13:20:07 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 134973
IP: 27.54.148.0/22
IP: 103.204.84.0/22
IP: 2406:4840::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165339 (0x285db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 13 13:20:07 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:97:74:a4:ba:90:30:c9:56:6c:52:a5:4d:
e4:31:9c:75:68:17:50:92:75:64:fb:32:54:e8:6f:
c4:38:7d:97:6a:6f:35:e2:61:09:40:3b:c0:e7:b3:
e9:ce:b9:09:73:30:c0:c7:45:be:68:47:d5:9e:ae:
27:a5:ed:26:c5:3a:55:0e:4f:77:96:e4:20:6f:90:
ef:9a:c9:21:49:2f:8b:c1:c8:d8:b9:08:57:b3:9f:
56:02:8c:59:38:f2:0d:7d:ac:e7:34:47:9d:58:6e:
09:e7:94:39:32:f3:fc:01:a8:97:09:9b:83:0e:f0:
13:b2:1c:84:cd:2f:39:8e:02:98:40:6d:7e:e8:c1:
d0:31:26:65:13:56:bf:8e:84:12:9f:b9:ef:dc:c5:
62:4e:7c:2a:ac:12:63:b2:94:f9:11:73:33:0a:01:
3a:3a:72:4a:c3:f1:01:e7:0c:fb:2a:0c:43:2a:7e:
aa:a8:9f:b1:1a:1f:dc:ac:be:55:59:ef:7d:47:dc:
3e:76:a9:bf:7e:97:70:80:5e:f5:68:4d:e5:ab:f4:
b7:fb:2b:10:77:3f:f3:ab:35:24:57:98:6a:96:b5:
4d:c7:f0:62:df:56:9d:d8:df:c2:58:d7:43:a7:a9:
07:28:e6:6e:c0:af:1b:dd:94:49:6e:3e:f1:d5:5c:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
134973
sbgp-ipAddrBlock: critical
IPv4:
27.54.148.0/22
103.204.84.0/22
IPv6:
2406:4840::/32
Signature Algorithm: sha256WithRSAEncryption
27:99:19:1f:d6:94:16:d8:5c:f4:07:16:0d:c7:ba:8d:50:bf:
bf:5a:77:71:01:0c:cb:78:1d:82:a9:94:e7:56:63:ea:c2:61:
9c:8e:ea:67:65:a1:7b:99:40:f3:60:d8:cf:fc:50:dd:a8:fd:
8f:ea:6f:ef:08:44:99:cb:30:d5:2c:b7:d1:c0:93:5b:69:69:
d3:20:1b:f7:3b:ae:3a:16:bc:d5:51:96:fa:49:74:25:8a:5c:
a8:a0:c2:97:b4:c0:1a:56:0d:6f:14:c5:28:73:be:a2:d7:08:
a6:7a:9b:70:da:42:28:b8:99:8f:79:13:40:5f:37:86:d6:6f:
e8:9f:0f:d3:2e:50:35:3f:03:5b:14:92:cd:d5:0e:59:33:b8:
13:86:89:d6:96:6b:b4:c8:f6:49:26:6d:eb:28:48:32:e5:eb:
72:3c:5a:a8:3f:32:40:f0:a5:36:ee:c8:a2:8a:92:f5:ce:8e:
88:80:e1:99:10:65:a5:aa:67:26:5f:41:36:42:27:16:48:5d:
ca:fb:04:d4:9b:2b:6b:e4:5a:93:4d:60:5c:95:1f:f4:5d:a0:
60:a0:4e:32:50:9b:af:a7:73:55:b1:98:45:5f:92:ee:1f:d9:
49:3b:f4:e6:30:c9:ef:f4:0c:e1:4e:e4:32:79:0d:c4:f3:7d:
ac:9e:14:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 01:13:42 2026 by rpki-client