This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer
File: JgPGdCltNFZsjuj5fNtKSyD2I-k.cer (raw, json)
Hash identifier: XtoMdMbHmKLsQ9fK+JZbsXiiDDYEvpCqU1+O09lNIag=
Subject key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0273F9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 07 Nov 2025 19:42:27 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 133122
IP: 103.195.12.0/23
IP: 103.243.148.0/23
IP: 2001:df2:2900::/47
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 11:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160761 (0x273f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 7 19:42:27 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:02:50:ab:26:2c:0d:76:09:01:0b:78:27:
5c:8f:3c:8f:fc:db:16:9d:76:45:35:de:b6:8a:a9:
fd:71:29:ec:ec:7d:47:c0:05:ae:37:04:e4:6e:57:
d4:18:7d:8b:13:58:aa:7a:7e:6e:50:bc:1e:be:0c:
64:ba:5d:26:35:a2:7d:58:1e:20:7f:ec:bb:45:56:
c3:b3:10:3e:da:2a:08:aa:89:1b:57:8b:5b:2d:20:
6c:c4:98:71:3f:4a:24:bc:a7:81:74:49:25:54:97:
ba:80:33:00:fc:ee:ad:7c:3c:49:49:ff:5c:71:09:
ca:6a:35:93:04:93:e5:58:36:1c:31:95:cd:b9:ca:
f8:18:eb:38:02:3d:73:33:1b:06:81:9c:53:2e:0f:
50:ef:f9:c0:5c:7a:a1:e6:bc:f7:99:c7:84:3e:61:
f7:f6:d5:7a:84:03:dc:d3:05:0c:6c:c9:a3:68:6b:
79:17:12:65:4a:7f:0b:03:3a:af:21:27:aa:fd:da:
68:b5:9b:13:d5:c0:96:3a:34:6b:28:4d:2b:da:2e:
55:8b:a6:ab:2a:10:8e:43:99:71:5a:bc:41:01:55:
06:0a:81:ca:b2:62:f2:5c:03:25:ac:42:01:8a:cd:
f3:06:1d:93:0a:a6:9a:7b:d7:e8:15:de:4d:22:52:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133122
sbgp-ipAddrBlock: critical
IPv4:
103.195.12.0/23
103.243.148.0/23
IPv6:
2001:df2:2900::/47
Signature Algorithm: sha256WithRSAEncryption
7b:4b:3f:4b:dd:68:32:fc:28:b8:65:be:c3:f7:91:65:6f:44:
9a:30:71:9f:cf:e1:88:5f:ae:04:01:11:8b:eb:d3:56:8a:ea:
3c:34:3c:a0:58:39:e4:35:c5:15:58:60:1a:cf:75:1a:f4:3f:
0f:11:72:3c:f5:61:c1:d1:39:76:6c:0e:e3:ed:d1:95:13:a1:
38:ad:0b:3f:77:a6:ac:bb:65:48:7c:12:fc:99:5d:98:ac:25:
6f:a4:f3:95:9d:ed:da:2b:10:35:6a:ec:dd:e4:a8:21:a2:fc:
df:ff:40:a7:9f:d9:c2:33:45:e0:97:e2:b1:8d:38:d6:03:54:
2a:27:ce:7f:cc:dd:f2:d8:87:fb:74:03:4e:cd:82:4b:f8:a6:
e6:a2:9b:d1:1a:1f:28:d5:77:88:5d:76:a5:a8:4f:d3:30:ba:
a4:ca:41:68:b2:5d:d6:d6:a8:1d:f9:c8:e9:e1:c4:ae:a4:cf:
30:8f:99:2f:2e:c5:d1:f5:5b:99:4e:86:da:2c:44:01:ec:00:
e9:b0:64:14:9b:bc:1e:9f:d3:89:cc:25:3f:b7:c6:ec:04:d1:
6a:ce:f1:e2:c9:42:da:03:ac:e2:a1:49:0d:cd:5f:8f:9b:2a:
29:3c:e7:86:64:60:8e:e2:1f:b3:8f:b9:3b:eb:fe:e6:f8:b7:
d3:fc:4f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:48:47 2025 by rpki-client