This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer
File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer (raw, json)
Hash identifier: 8A02Qgi5z9UzkoyB5JxjlZfebzgDuMSMTorfrJFJsNI=
Subject key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0273AE
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 06 Nov 2025 18:23:28 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 141375
IP: 103.157.202.0/23
IP: 2001:df5:2c80::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 06:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160686 (0x273ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 6 18:23:28 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:3d:b9:4c:d9:b8:ba:34:39:dd:fa:3d:d1:
c9:42:ca:7d:25:46:54:ab:25:52:74:96:5b:5d:59:
f0:98:f1:54:a6:1c:9f:41:db:48:d1:94:70:01:94:
9d:27:de:82:cc:c2:f9:f7:46:24:86:45:54:5f:6f:
c5:a9:04:86:66:28:7f:e1:00:9b:a3:bf:a0:4d:91:
2b:a7:62:80:c0:57:bf:17:c1:30:5c:71:25:c2:fb:
f6:d7:5c:02:d3:f9:86:95:e8:8d:9c:fe:24:77:42:
e6:d7:8e:1f:11:90:20:b3:98:16:9d:57:c1:e0:8a:
28:20:da:30:81:2a:68:eb:60:05:a6:a3:21:37:e3:
a5:aa:cc:6e:7a:b3:a6:d8:ce:1f:03:88:5a:3f:e4:
b3:19:67:00:90:e2:77:ae:57:5f:e1:1e:94:3e:51:
08:d7:ed:77:7e:59:e8:82:f0:9d:27:40:dd:2c:4c:
c2:f4:ee:00:9b:65:a2:65:72:14:51:59:5f:b8:30:
41:44:4c:24:87:62:d2:5d:81:ab:2d:a4:a5:7e:8f:
d0:fb:08:24:3f:c0:16:0b:6b:65:7f:8a:cb:b0:67:
c4:9e:6d:da:8f:f7:ff:4e:63:f5:55:14:c7:6b:b1:
53:c2:84:ba:25:9a:d6:ab:e3:25:62:f6:36:dd:46:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
141375
sbgp-ipAddrBlock: critical
IPv4:
103.157.202.0/23
IPv6:
2001:df5:2c80::/48
Signature Algorithm: sha256WithRSAEncryption
93:47:ea:3a:df:63:df:86:50:75:a3:08:ec:f8:8a:3e:89:84:
4b:98:d7:85:67:3d:3c:88:a1:99:e8:cc:92:de:b6:c1:a9:57:
5f:74:19:11:23:0a:8e:2b:a8:fb:4e:b5:a2:73:ff:4c:1e:cf:
5d:da:28:f8:68:23:7b:cc:c7:d3:a9:16:8c:82:7e:80:48:dd:
50:f3:92:dc:b7:fd:53:9c:b7:33:77:b7:87:06:9e:84:81:a4:
1e:6c:38:55:ec:48:ae:73:15:1e:80:77:b0:4d:66:e0:1c:3b:
2d:ad:31:31:21:86:3f:19:a6:8e:72:cd:34:1d:b9:ed:56:0b:
86:4b:81:6a:bb:7a:79:03:be:01:95:5b:75:e4:e9:be:5e:12:
1a:41:3b:5e:76:79:1f:43:2f:c5:ae:4a:cd:3b:a1:3b:40:d1:
9f:6a:e3:7a:40:da:b0:a7:a9:67:ca:77:86:52:b9:34:87:14:
64:43:ad:ca:d0:f4:8f:5b:25:5e:4a:5e:4f:68:c7:17:79:a6:
77:b7:7c:0f:6d:eb:4d:fc:09:d3:35:ae:c6:81:da:e5:f9:e7:
65:20:e1:d6:02:ca:6a:fd:f3:27:10:ef:05:8d:70:c6:68:4b:
5a:3f:d1:1a:65:91:b2:85:7e:b5:21:cc:ac:64:fa:0b:f8:f6:
60:08:63:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:32:53 2025 by rpki-client