This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer (raw, json)
Hash identifier: V95H3OysCvNZPC4pX7yc7MsJq1EbLvuxqoJBE9+O5MM=
Subject key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0277FF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 25 Nov 2025 19:28:03 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 151813
IP: 103.131.134.0/23
IP: 2001:df2:f440::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161791 (0x277ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 25 19:28:03 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:98:2d:ab:5b:9e:23:99:c3:de:bf:ab:43:
6c:58:c0:81:f7:b2:b8:df:e7:85:02:af:cf:9c:a0:
94:7d:dd:89:0f:40:e7:47:9e:fc:6f:98:b1:86:68:
d0:7d:3f:af:69:b4:d7:b4:9f:26:cc:ac:92:1d:fb:
42:66:52:0b:d4:51:5d:e1:cd:ea:25:d5:bf:80:2a:
c1:37:4c:7e:23:6c:fc:a9:ad:b6:6a:ab:ba:1f:5e:
c8:51:9d:77:2b:da:17:b2:3d:7c:3c:fe:6d:ab:cb:
a3:71:84:bc:60:3e:40:3a:54:dd:cf:f0:e0:57:79:
33:64:f7:ed:a3:14:eb:ca:62:32:97:48:18:2b:44:
99:cd:78:b5:d2:f3:1b:f5:34:b6:d7:e8:d2:19:62:
9f:2d:a6:45:27:04:cc:18:b9:06:25:1e:c8:3b:19:
bc:e3:5b:7f:32:63:1c:3a:b4:e5:ea:d6:52:73:b9:
14:d3:be:8a:4f:d0:42:88:f7:ca:65:e5:da:3f:46:
f0:b3:72:05:5a:de:4e:60:cc:cb:70:e9:1d:d1:23:
fe:04:67:72:44:00:f7:5d:f1:3e:eb:68:88:55:1e:
76:ec:55:fa:96:4a:af:86:18:f9:50:24:b1:37:60:
2a:d1:f4:a5:e4:8d:ec:70:ff:51:1a:db:27:5b:81:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151813
sbgp-ipAddrBlock: critical
IPv4:
103.131.134.0/23
IPv6:
2001:df2:f440::/48
Signature Algorithm: sha256WithRSAEncryption
08:26:21:db:39:a2:91:ab:6d:ef:67:37:0e:91:c2:17:28:d9:
67:48:d5:95:3e:35:51:6e:3b:45:5f:1f:d6:df:f3:0e:12:b6:
6d:d1:02:e7:be:c5:48:f3:10:2e:26:19:65:55:c0:7e:f1:ee:
f0:e6:f6:c4:99:d9:b6:e0:ed:74:9f:5f:a1:18:b1:fb:93:a2:
91:d7:2a:f5:5c:fb:28:8a:c8:27:34:b7:ef:9e:92:a0:8b:c8:
1a:78:22:5c:0a:68:d3:f2:39:91:cb:37:a2:f7:3e:b4:a5:22:
1c:e8:81:07:b6:c0:1e:13:b9:8b:ec:4f:d4:2a:a1:fc:d2:b9:
ed:fd:ed:7e:14:d3:04:cf:81:24:eb:0e:bd:4f:4c:82:a0:e6:
d6:f7:27:bb:c6:a7:05:1d:53:89:d6:2f:f1:86:95:bd:87:09:
68:19:dd:0c:2b:eb:af:13:04:f2:dc:3d:3c:3d:28:66:69:92:
86:7c:73:91:17:39:53:41:af:1e:e9:d3:64:ae:72:32:d7:c6:
bc:29:8b:85:73:58:17:1b:68:a8:c5:9c:e5:6e:0a:e3:1a:5c:
c5:7e:ba:60:4d:f8:53:30:27:66:b2:9b:8c:e0:a1:c0:69:8b:
83:af:38:a9:75:15:59:9d:de:cf:d3:ef:27:af:9e:68:3e:79:
9c:ac:af:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:54:50 2025 by rpki-client