This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer
File: ItyTZY3G6XAwereu8eJV3j1D9bc.cer (raw, json)
Hash identifier: e9l00PLDZFhhctH7d/1ynh/GHK6oYvDy1nKSz1y3RFo=
Subject key identifier: 22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028762
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 20 Jan 2026 07:25:52 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 142223 -- 142224
IP: 103.254.92.0/23
IP: 2400:6980::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 10:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165730 (0x28762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 20 07:25:52 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91F0C45, serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:38:03:3e:a2:4d:86:1c:05:c6:27:25:20:
9b:fd:e7:3a:c1:f9:1c:7a:31:a1:66:56:21:ec:b4:
6b:ac:b0:ff:d9:ab:87:f3:f5:41:ab:74:21:70:8a:
01:2d:f1:6b:21:4b:6a:68:da:68:06:a8:f7:f9:ed:
11:6b:d7:44:04:3b:df:00:9f:9c:1f:97:fe:b6:76:
b9:b9:69:e7:48:77:8e:b5:01:03:ea:47:52:4a:66:
2b:9a:02:cf:68:46:ef:f5:64:05:a0:71:ae:ec:ea:
aa:7d:c4:40:9b:97:71:ac:ce:16:79:61:15:2d:23:
00:7b:28:53:bf:64:98:4d:08:07:00:da:aa:4f:8a:
fc:34:a5:4a:3d:22:13:94:37:d5:54:9b:a1:e2:35:
ae:de:8b:57:c3:60:54:06:23:7a:a4:be:87:68:1f:
79:db:47:ce:6f:28:1a:46:8a:1f:d6:24:42:d8:da:
ce:44:1d:f3:e3:15:40:16:89:5b:43:43:d2:8c:e9:
7a:04:6f:19:86:18:73:a9:20:1b:d1:9a:39:b4:b3:
d8:98:cc:31:e4:fd:60:22:13:5e:3e:b1:b2:ce:0a:
eb:45:f9:d5:3c:8f:fb:fc:b0:5e:10:cd:ba:c9:8d:
57:16:00:72:4e:a4:91:db:cb:09:97:a3:9a:8e:a9:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142223-142224
sbgp-ipAddrBlock: critical
IPv4:
103.254.92.0/23
IPv6:
2400:6980::/32
Signature Algorithm: sha256WithRSAEncryption
79:a4:69:f0:55:c4:dd:23:d9:a1:a5:0d:76:93:60:29:41:8c:
a8:e0:eb:82:15:38:ee:32:99:37:a3:ed:95:83:38:88:f3:bd:
cd:0e:e5:ed:cf:20:58:6b:71:e9:05:6e:d6:c3:45:4c:1f:0f:
39:81:c1:ae:5b:9e:29:42:f4:31:15:26:89:49:64:27:c5:b3:
52:e3:f7:ee:58:6e:0e:a2:3a:e9:00:dd:07:3a:7e:77:f9:93:
23:63:9b:6b:fa:50:3b:0c:f7:cd:21:20:be:36:49:bb:ff:bd:
fe:0c:62:7f:31:6e:2c:f5:28:69:55:6a:17:ef:59:0e:5e:bf:
f1:98:ec:e2:45:30:f1:27:d9:49:e1:03:f8:d9:b1:de:c9:46:
12:51:32:1f:f7:08:80:65:a1:e6:6d:dd:b4:e4:d4:c6:a9:b6:
4e:af:76:df:13:b4:59:0c:6c:67:14:91:0a:dd:fd:98:d4:4d:
5d:58:02:6a:6d:d8:54:ea:1f:bd:6c:8d:d4:27:60:43:12:c2:
9d:a0:d5:b5:d5:93:6c:b9:51:a4:17:21:bd:70:91:c3:61:81:
63:0e:7e:c5:39:59:b9:a0:17:cf:b6:79:33:28:6e:be:55:41:
15:a4:45:c7:4b:50:4c:e5:a2:ab:a4:1c:f6:2a:d5:3c:ae:83:
b8:22:e1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:29 2026 by rpki-client