This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer
File: CdjxREM-7h4qRDmROjZuPDxZBTc.cer (raw, json)
Hash identifier: StBbIQVxgMxtxSJTOr9IvJ5nqXXTMkYBvDpiU+mcgBo=
Subject key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027BC4
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 04 Dec 2025 07:03:20 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 135615
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 12:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162756 (0x27bc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 4 07:03:20 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:38:5b:3d:23:11:85:c9:d3:56:80:2f:03:1f:
2d:eb:aa:53:1b:63:98:77:da:ef:35:c8:1a:6c:51:
7f:ea:f0:2a:b1:8d:4e:d4:53:d3:e2:79:cc:1e:1d:
4f:e4:c7:6a:3c:f1:65:39:38:77:de:d6:43:db:51:
0c:b1:fa:0d:76:d0:f0:15:85:ee:a7:d4:de:d4:93:
7e:8c:06:79:c3:89:24:a7:bd:d4:3d:4a:bb:52:4d:
eb:0c:92:d6:24:0b:3e:ba:53:21:48:ee:f3:3c:43:
26:1e:e3:2e:f9:b2:ac:a2:c9:89:2f:8e:7c:ed:cf:
7b:1f:cd:5f:37:ef:fa:23:46:4c:85:f0:c2:75:88:
20:3e:79:61:33:d0:d8:46:c0:de:7c:94:6a:f3:9b:
9a:c4:dd:42:8d:45:ea:0a:9d:d1:7d:b1:e1:bf:80:
35:a9:bc:2a:19:88:cb:a7:47:1d:48:46:9a:de:a9:
be:50:d8:69:8d:5f:97:f4:74:08:0d:26:5d:54:92:
e4:c9:6c:ff:16:27:c8:70:5f:da:fc:ce:44:eb:64:
f9:48:0c:a5:3b:56:3c:01:29:6d:79:98:60:d6:b0:
10:b1:0a:e0:f6:06:9b:23:e1:c7:a3:b5:0f:e8:60:
4f:9d:a2:ba:fd:e4:46:ad:32:38:7a:dc:5e:2d:ad:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
135615
Signature Algorithm: sha256WithRSAEncryption
94:f1:59:67:c3:fe:47:ed:c5:2c:d5:76:39:1f:ee:d4:ef:45:
ed:b7:18:48:f3:07:59:12:5d:41:22:89:0f:d3:1f:e8:28:b8:
12:69:fe:b4:46:2d:1e:f8:61:11:c2:00:b6:4b:3c:cc:34:11:
84:99:01:57:bc:e8:e6:a1:a5:da:f5:7b:c1:ae:23:a6:e6:3e:
c0:f5:4f:5b:e6:c9:8d:92:13:87:a8:a0:8f:59:d3:ba:cb:8c:
99:f6:40:2a:34:91:94:de:a6:d4:b1:5a:7d:15:7b:cd:fe:23:
01:1b:36:e7:d1:7d:42:c3:76:6f:9e:bd:2b:2e:4b:0f:4b:c4:
e1:e6:56:09:35:be:0f:ba:96:b0:59:88:65:d4:4b:e0:49:67:
24:5c:a0:db:dd:b6:d6:de:95:54:50:fa:59:cf:f9:a5:43:ec:
2b:c5:58:ed:ac:52:6d:95:99:e9:f7:17:26:e4:18:8a:f0:a4:
d5:d3:7a:9d:48:46:d8:e5:c1:1c:c7:ff:32:f5:bc:a1:e6:7c:
80:0c:b4:13:3d:af:b1:0b:87:20:d7:e2:5a:b1:27:f8:09:75:
37:3a:b5:d5:92:3f:bc:84:69:77:87:7f:30:46:8c:a7:34:96:
d0:58:7c:97:da:1c:1d:6b:c9:d5:8d:b7:09:04:d8:ef:44:a6:
59:88:ee:9e
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAnvEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTIwNDA3MDMyMFoXDTI3MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5
MTNBMzY2RTNDM0M1OTA1MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDaOFs9IxGFydNWgC8DHy3rqlMbY5h32u81yBpsUX/q8CqxjU7UU9PiecweHU/k
x2o88WU5OHfe1kPbUQyx+g120PAVhe6n1N7Uk36MBnnDiSSnvdQ9SrtSTesMktYk
Cz66UyFI7vM8QyYe4y75sqyiyYkvjnztz3sfzV837/ojRkyF8MJ1iCA+eWEz0NhG
wN58lGrzm5rE3UKNReoKndF9seG/gDWpvCoZiMunRx1IRpreqb5Q2GmNX5f0dAgN
Jl1UkuTJbP8WJ8hwX9r8zkTrZPlIDKU7VjwBKW15mGDWsBCxCuD2Bpsj4cejtQ/o
YE+dorr95EatMjh63F4trfnxAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUCdjxREM+
7h4qRDmROjZuPDxZBTcwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU5NjM1L0JBNjczOTkwRkYyOTExRTk5NEY0RjQxOUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFOTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVN
LTdoNHFSRG1ST2padVBEeFpCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhG/MA0GCSqGSIb3DQEBCwUAA4IBAQCU8Vlnw/5H7cUs1XY5H+7U70Xt
txhI8wdZEl1BIokP0x/oKLgSaf60Ri0e+GERwgC2SzzMNBGEmQFXvOjmoaXa9XvB
riOm5j7A9U9b5smNkhOHqKCPWdO6y4yZ9kAqNJGU3qbUsVp9FXvN/iMBGzbn0X1C
w3Zvnr0rLksPS8Th5lYJNb4PupawWYhl1EvgSWckXKDb3bbW3pVUUPpZz/mlQ+wr
xVjtrFJtlZnp9xcm5BiK8KTV03qdSEbY5cEcx/8y9byh5nyADLQTPa+xC4cg1+Ja
sSf4CXU3OrXVkj+8hGl3h38wRoynNJbQWHyX2hwda8nVjbcJBNjvRKZZiO6e
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:51:00 2025 by rpki-client