This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer (raw, json)
Hash identifier: Acz3QyepB1KQLQ0tXPPKeYTW2je5zYT2H/QxLB0wjxU=
Subject key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027A5C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 02 Dec 2025 02:34:27 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 152141
IP: 210.79.178.0/23
IP: 2001:df3:39c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 08:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162396 (0x27a5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 2 02:34:27 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:2b:0e:fe:96:18:a2:5a:b4:b3:f5:7c:65:
68:00:58:04:44:5c:67:e6:14:85:a6:34:cb:48:8f:
13:5d:51:4f:61:c5:08:8e:c3:fb:60:df:50:f3:4d:
11:a1:50:3e:4a:6d:5f:33:6e:6b:a8:69:17:ad:b6:
8c:7a:c2:91:67:a4:10:8a:c7:3d:b8:8a:66:05:c1:
1e:7b:05:40:5b:99:fe:57:c2:84:e1:58:db:12:76:
bc:69:84:80:f8:8d:94:44:dd:4e:85:2e:23:0d:09:
98:12:6f:af:04:01:55:8e:8f:b2:d2:58:2f:13:fa:
62:b5:1d:d8:b0:60:20:dd:72:96:53:e6:3f:a3:fa:
84:62:2d:e1:cd:54:c5:b0:87:3d:7b:d7:b9:21:66:
6e:76:4b:4a:b1:a5:9d:8e:63:ba:14:c4:c6:e9:06:
ca:b2:92:7d:b9:9d:18:02:d3:4e:62:b8:de:3b:d3:
55:22:6b:be:b3:32:13:86:ca:01:86:33:71:b6:63:
99:25:ff:33:cd:5b:ce:fb:11:b7:c1:d1:76:40:4d:
67:f3:2b:c9:c4:7f:13:18:76:fc:46:39:7b:45:57:
fe:fd:d7:16:a6:6e:56:b2:55:5b:3b:59:bd:0b:04:
2f:a2:79:59:19:5a:11:1e:88:bf:c2:ab:f6:de:b3:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152141
sbgp-ipAddrBlock: critical
IPv4:
210.79.178.0/23
IPv6:
2001:df3:39c0::/48
Signature Algorithm: sha256WithRSAEncryption
4e:34:83:93:a6:6e:af:4c:ca:91:36:d6:92:c6:30:9b:64:59:
ec:05:e0:b6:43:e8:2e:27:0a:b7:c2:94:0c:c3:da:3d:8c:1a:
09:e4:7d:63:47:fe:88:ee:12:f1:ec:6a:55:37:a2:6c:fa:b1:
d2:5f:5f:a2:f3:d8:81:84:cb:16:a3:78:84:fb:02:a6:fa:6e:
79:ab:ea:5c:88:26:44:d4:60:54:af:00:17:d2:83:aa:68:12:
8b:19:03:05:28:1d:43:cd:57:d6:6f:93:e0:03:36:08:90:f5:
c2:00:13:5a:18:a5:12:64:5f:95:2b:c8:b4:35:57:b9:a6:ab:
9f:57:d3:27:72:c9:8f:9f:50:b1:85:5b:2a:00:3c:80:b4:ac:
c7:08:8f:e5:a5:5b:03:35:cc:4c:cf:68:20:24:d9:22:35:2e:
2f:57:40:0c:b2:fe:7d:6c:19:fb:b2:b3:53:a3:b3:a6:b7:4e:
03:ca:4e:b2:5b:09:df:aa:39:23:09:d7:2f:f2:9b:63:f7:76:
17:bd:25:f9:7d:15:53:cb:6c:82:32:3f:45:43:a1:6e:cc:e8:
62:93:3b:0b:27:0a:e6:d2:44:cb:7f:fa:91:2d:3b:66:c6:75:
a8:13:f8:4e:54:e8:a5:1a:65:24:3a:2f:bf:f3:78:10:9c:92:
5e:d5:9d:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:38:38 2025 by rpki-client