This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
File: Kt1a2PtDrdgNUrtYNpPDG42asuw.cer (raw, json)
Hash identifier: RPDydK6Ab264p5uTQhRblKY16S/FdmwPNuZu9wULmmo=
Subject key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028840
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
caRepository: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 24 Jan 2026 12:40:12 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 137415
IP: 103.107.184.0/24
IP: 2001:df3:e300::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165952 (0x28840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 24 12:40:12 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:dc:d1:da:c4:2e:28:2e:4a:1f:cf:d2:aa:
e2:16:98:9a:eb:19:20:c2:55:29:76:e4:8b:14:c2:
1c:b8:d4:fd:08:ce:8d:48:1d:fb:67:c5:79:56:e0:
cf:d5:ef:d7:98:9f:52:35:c5:bd:d9:9e:12:2c:f8:
64:f9:92:e5:0d:d4:46:a5:6e:46:6d:18:18:97:c7:
7e:38:20:c7:ab:bf:39:38:07:61:2c:e0:b7:9b:3f:
d6:63:d1:14:39:5a:e1:33:01:26:10:83:c8:9a:c4:
e3:db:6f:65:a5:8d:4a:b1:07:ef:c5:89:7e:b7:cf:
26:c6:31:52:05:24:c4:e6:b2:48:4b:dc:2b:90:12:
41:7c:b7:60:03:8e:28:a1:89:84:8d:2f:92:c4:ef:
eb:df:e9:ad:0f:57:1c:33:75:d0:9d:70:4e:1d:e5:
29:08:a0:d6:e7:a0:70:44:22:27:e1:11:ff:fd:d7:
b5:0a:5c:93:cd:e4:03:a0:06:ec:73:93:6b:65:66:
01:0b:f4:33:37:68:ff:ab:a8:8f:ec:08:14:e8:90:
ab:c5:3a:c4:35:9a:88:5b:d1:58:8c:09:ba:ca:53:
5a:e5:52:d2:f0:1b:17:12:45:c5:bc:87:40:68:ed:
ce:f1:cf:70:64:4d:9f:6b:10:e2:4f:89:22:db:52:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137415
sbgp-ipAddrBlock: critical
IPv4:
103.107.184.0/24
IPv6:
2001:df3:e300::/48
Signature Algorithm: sha256WithRSAEncryption
19:65:23:49:b3:db:f0:ac:60:ed:f6:f9:54:d8:b1:78:4f:16:
ef:91:63:d7:b0:75:a6:08:41:0c:0c:bc:53:71:c0:80:d7:b2:
bc:4e:ae:16:23:a6:d0:d3:c2:15:6d:9b:b0:bb:b0:90:69:c3:
2f:54:a6:fc:93:07:eb:d7:6c:f5:f4:be:8f:87:72:67:16:8c:
3d:f0:44:16:d6:22:5e:b4:3c:0e:12:45:33:55:4b:55:e7:75:
c2:a4:60:7b:36:a3:f8:00:ae:16:e2:5c:25:ba:6b:fa:6c:ca:
25:5b:4c:2d:44:a6:51:aa:eb:97:7b:8f:72:30:f4:5c:50:de:
31:83:c8:7a:f0:3f:ed:c1:78:8c:c6:9a:db:9b:0b:a5:50:4e:
3a:ae:0d:fc:94:fb:12:38:4a:91:89:84:63:ed:f7:4b:72:29:
70:fe:0b:a8:d1:03:50:59:5a:9e:b4:43:06:c0:d1:d4:48:59:
e5:12:fa:bc:de:53:d8:dd:14:3f:40:78:8a:53:d8:04:d1:d4:
9b:85:d3:34:40:5d:ba:b5:3b:fb:c8:e5:71:9f:19:c9:65:42:
42:bd:d7:7c:3e:7a:35:7e:e8:c1:4b:70:51:e2:94:5b:d2:6e:
2e:f6:00:d3:b3:49:30:0c:4f:e7:aa:71:90:31:be:04:a5:18:
1b:e9:a1:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:07:58 2026 by rpki-client