This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer
File: 9fW2D5FdvXIk_85g8fnQXoNwLvM.cer (raw, json)
Hash identifier: +mk6BS1RI6qRaJdxS7b8RM+5zNla9BMrFP1CJXpbbas=
Subject key identifier: F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028672
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 15 Jan 2026 11:31:27 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 202.44.145.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165490 (0x28672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 15 11:31:27 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91E585B, serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:51:03:74:d8:ab:1d:05:8e:39:b8:9d:98:
29:ba:86:72:52:f6:b7:39:8b:0b:47:d2:07:d9:32:
31:50:97:0a:1a:b5:68:b2:61:a5:1f:83:fd:9f:c1:
e5:8e:e5:b4:c9:82:f0:23:c7:0d:4c:49:b5:7b:6d:
59:87:1c:7a:0b:6d:50:69:e3:83:cb:27:0f:34:a0:
d4:40:97:78:02:b5:22:7a:14:16:2e:3a:9b:78:42:
bc:7c:6a:a5:d1:cb:3e:3d:74:33:2a:eb:54:0b:5e:
ec:b1:6f:3b:69:88:b3:c2:71:62:07:81:87:1d:89:
8a:c7:d2:6e:1c:0f:23:06:de:27:f5:94:8c:b2:e8:
e5:49:20:07:b4:82:59:ba:6f:d2:c8:d8:d9:72:11:
d4:7d:36:f5:ea:1b:cb:1b:ef:67:97:bc:ad:54:79:
65:11:e1:1e:e4:d7:31:63:4a:f5:85:49:a4:c0:74:
34:c6:cf:00:ad:c1:dc:ed:3a:99:4b:17:d2:60:2a:
cc:06:90:0d:31:e7:35:62:2c:da:65:da:cd:5b:e2:
7b:ee:a1:02:5f:4f:a2:c1:97:44:1a:c9:32:fa:b5:
20:fd:1f:56:f4:05:f8:dd:a2:63:aa:5b:df:a2:96:
c1:dd:56:82:b9:03:81:3f:82:1e:e6:27:37:48:e9:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.44.145.0/24
Signature Algorithm: sha256WithRSAEncryption
62:54:e7:ed:ea:c7:6d:a6:ca:7d:79:aa:25:4b:83:84:67:d7:
b3:62:2c:1c:71:3a:7e:25:6a:29:9c:ea:67:97:d2:05:38:b8:
6a:48:5a:88:c1:c3:aa:fc:e9:d7:6c:5b:96:85:68:32:3e:80:
93:f7:31:76:4a:c1:e4:2a:b9:cf:42:42:b4:3d:4c:83:3f:10:
0e:d1:a5:c2:b2:21:d1:e6:2e:b0:b9:8d:34:c0:96:42:66:64:
5d:2a:71:7b:b4:52:08:2d:95:5b:34:28:1d:72:47:d9:d0:5c:
c9:73:25:98:af:92:f1:0c:c7:6e:9d:61:b9:30:f9:b9:67:c5:
c2:fb:7f:24:0d:25:e6:67:89:0e:b6:64:19:3b:e8:3c:0c:fb:
ed:b5:12:a9:b3:41:29:3d:e1:a1:d8:c3:a8:75:4d:29:90:4c:
f0:79:c4:bb:e4:48:a2:0a:13:c0:35:18:21:5e:17:1d:a5:2f:
3c:a5:9b:d5:ac:3c:ea:49:10:57:bc:bc:3a:b0:f4:5a:b4:74:
ed:38:e9:55:ca:9e:c0:26:a1:88:af:e3:85:b6:74:ee:a8:a3:
ef:44:19:bc:e6:17:db:3d:7a:c6:4c:38:75:2f:6d:b8:81:89:
d1:b9:d6:f9:c0:06:5e:8c:d5:77:a2:3b:46:18:c2:46:77:30:
25:81:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 01:12:03 2026 by rpki-client