This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
File: Wr7NjqrTfqV665OfLAsUKXSEH4o.cer (raw, json)
Hash identifier: NDRsyqLCAABAP9xx3t8gLwpUuT8o/f44DL9pfEaTzv4=
Subject key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028393
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sun 04 Jan 2026 13:42:40 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 153598
IP: 203.24.49.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 09:19:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164755 (0x28393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 4 13:42:40 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:49:39:17:7d:7d:2e:ff:b9:bd:8e:53:a3:
87:90:f3:3a:fe:1e:c1:66:d7:c5:40:7b:97:0b:b9:
ec:cc:45:72:5d:51:a2:9c:a5:c7:14:4f:a8:f1:eb:
9d:f7:0a:90:af:09:7a:2e:1a:e9:ec:70:48:6c:52:
92:8b:3f:9c:6a:06:2c:de:b4:58:a8:c0:79:6a:29:
e7:dd:e7:39:69:30:1a:3b:cb:3c:29:10:fd:5a:18:
33:10:03:83:3b:e5:23:f7:17:56:a1:69:de:55:7b:
bb:0b:58:aa:b7:e4:ed:92:06:94:ec:3f:a4:7f:93:
16:35:8b:a7:34:f4:a9:08:3c:5f:ab:2e:fb:b6:1a:
26:d1:a3:13:bb:c2:95:a9:bb:4e:9d:55:c3:4c:a5:
96:bd:b3:7f:30:3f:b1:f6:70:fe:99:dc:d9:1f:5b:
41:7f:66:76:dc:08:24:50:b7:f7:9d:2d:cd:32:a3:
47:73:e5:72:59:10:8c:74:36:af:a5:8e:c2:d0:d3:
23:55:ac:69:02:20:86:14:5e:92:f0:9b:7f:3e:d5:
48:2d:af:68:38:36:1b:bc:45:0f:9a:f1:f2:5b:9b:
39:18:b2:87:c7:1f:3c:80:51:03:6c:20:da:7e:c2:
16:70:ec:8d:37:8e:33:01:7f:61:c9:88:6d:6b:17:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
153598
sbgp-ipAddrBlock: critical
IPv4:
203.24.49.0/24
Signature Algorithm: sha256WithRSAEncryption
47:69:1e:1d:8a:33:d1:04:9f:52:47:0b:e9:55:4b:46:ea:46:
51:4a:da:64:05:c7:21:8c:78:e1:a9:24:30:08:40:2b:55:6e:
f8:33:ab:da:59:53:07:c0:ef:ad:f9:47:4a:f1:ad:2d:10:c9:
f6:b6:43:28:34:66:8b:c5:b2:00:ce:0e:72:6f:21:36:f6:6a:
43:53:d8:fd:53:8f:82:e6:23:52:be:03:91:f3:28:cd:50:e5:
ca:96:86:ce:5f:a1:02:46:5e:77:b3:c2:b3:e0:b0:3e:5e:54:
06:ca:07:cf:b5:30:56:4c:96:f2:2a:1c:a5:ce:77:33:ec:fc:
38:6c:1f:b3:f5:f9:25:ab:f8:59:27:03:4f:4a:d7:e4:ec:2d:
14:d4:ef:26:8d:f4:59:fd:14:83:24:c8:07:8f:da:17:51:27:
01:14:2f:40:e4:1f:be:85:d0:19:aa:5a:50:85:a0:11:4d:a0:
c2:e8:7f:be:ec:4e:92:e3:04:3f:da:e9:0c:57:45:88:46:9b:
41:7a:42:0a:83:f3:02:41:df:1f:d7:44:67:92:29:ff:09:ef:
69:b9:c3:fc:1d:fa:91:44:bc:01:67:b1:01:5b:fb:19:84:47:
34:a8:78:ea:fb:69:0f:6b:19:ef:5a:e3:8b:5c:fc:40:cd:6e:
23:5a:4d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:24:25 2026 by rpki-client