This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
File: X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer (raw, json)
Hash identifier: vhdl4Qz7TEzj9VLnrXi+YyUTlUJgrNFry53y6HkiD/g=
Subject key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 0276D9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 21 Nov 2025 11:53:23 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 139613
AS: 139646
IP: 103.143.14.0/23
IP: 2407:21c0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 08:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161497 (0x276d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 21 11:53:23 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:6e:e5:5a:86:8c:44:71:97:1c:51:ea:2b:
2c:5a:a5:fa:5e:c8:76:d3:8c:d5:7b:56:61:b6:39:
10:e9:77:77:b8:66:8b:de:95:3c:ef:bc:14:4a:fb:
d0:86:b8:31:04:64:19:f2:70:3f:92:7d:92:81:44:
ef:4b:c8:a6:43:d7:5c:26:7c:16:d4:d3:cc:9d:04:
ba:18:cd:bc:58:fb:a1:44:9b:ff:6c:7b:37:7f:58:
a9:98:be:70:6f:4b:dc:ec:48:f0:7f:28:0a:61:34:
b6:1f:b7:6b:3d:92:10:0f:ea:60:76:bf:2f:6f:55:
dc:1b:9e:14:64:cc:3f:31:69:22:11:51:37:45:45:
c2:f0:9d:c6:43:54:8c:33:42:6a:78:14:43:cd:07:
3c:fa:ca:92:0b:3a:7a:f9:d7:91:70:08:af:05:25:
a6:08:e7:13:59:ae:c2:73:36:c9:ca:4b:ad:40:14:
3d:42:ff:e4:24:e2:33:d3:e7:0f:8b:e0:03:b6:de:
93:6c:5e:30:82:6a:45:19:68:93:5b:66:2e:5d:6a:
3c:58:a5:5b:e2:8d:7c:43:9e:27:e3:d1:79:6d:3c:
eb:9e:92:a3:a9:13:44:29:33:75:05:5b:b4:34:7e:
fe:be:0e:5d:da:57:cb:3f:73:e1:7e:b0:a4:f4:67:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139613
139646
sbgp-ipAddrBlock: critical
IPv4:
103.143.14.0/23
IPv6:
2407:21c0::/32
Signature Algorithm: sha256WithRSAEncryption
74:77:d4:e6:84:40:4b:3c:1d:45:ad:e7:42:4d:02:5a:04:26:
8e:f6:ce:29:52:3b:1b:df:59:40:6c:f7:42:b5:7c:55:de:cd:
e5:55:11:66:df:22:96:50:2a:d2:6c:ed:37:15:2d:61:05:08:
5c:83:21:8e:de:9a:a6:d2:de:d3:6d:73:21:2c:27:18:14:3a:
4a:ab:08:8d:b9:22:42:44:82:69:25:ec:94:27:95:3c:2a:68:
b0:96:10:48:b4:a3:85:f1:08:f3:95:28:5a:70:b4:b0:39:a5:
d5:9f:b5:23:60:7e:e5:df:23:43:31:c6:8a:36:4b:b6:8d:49:
af:1a:c8:9a:e9:2f:68:04:87:c4:cd:56:2e:eb:e5:a4:56:77:
b7:cb:10:50:1f:8c:27:49:40:24:6a:dd:00:fd:e2:98:d8:0e:
e9:fb:e5:a0:8b:b2:8b:f4:a5:90:13:92:aa:44:f9:2b:c8:dc:
01:ac:e4:fc:82:3b:df:4e:f1:c5:f5:ff:2a:c9:08:ba:6c:2b:
14:3c:57:11:5b:58:c9:ec:64:08:82:c4:99:e6:f4:ac:ec:b5:
9d:d3:7e:36:68:c9:e2:11:b5:9d:21:f0:e6:1b:17:f9:7d:d1:
a8:b3:b6:7f:8a:23:7c:3c:3f:0f:8e:68:86:75:c7:83:45:ae:
2d:97:53:03
-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgIDAnbZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTEyMTExNTMyM1oXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxRDI5OEMxMTAvBgNVBAUTKDVGQzI2QjkyOERFREM5MEMzOTFDQzRG
NTI5QkE3QjlFMDlBNTA0NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4DW7lWoaMRHGXHFHqKyxapfpeyHbTjNV7VmG2ORDpd3e4ZovelTzvvBRK+9CG
uDEEZBnycD+SfZKBRO9LyKZD11wmfBbU08ydBLoYzbxY+6FEm/9sezd/WKmYvnBv
S9zsSPB/KAphNLYft2s9khAP6mB2vy9vVdwbnhRkzD8xaSIRUTdFRcLwncZDVIwz
Qmp4FEPNBzz6ypILOnr515FwCK8FJaYI5xNZrsJzNsnKS61AFD1C/+Qk4jPT5w+L
4AO23pNsXjCCakUZaJNbZi5dajxYpVvijXxDnifj0XltPOuekqOpE0QpM3UFW7Q0
fv6+Dl3aV8s/c+F+sKT0Z901AgMBAAGjggMjMIIDHzAdBgNVHQ4EFgQUX8Jrko3t
yQw5HMT1Kbp7ngmlBG4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUQyOThDL0FDNUU4QUMyQzZEMDExRjBCRDg4NEE3OUM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFEMjk4Qy9BQzVFOEFDMkM2RDAxMUYwQkQ4ODRBNzlDNEY5QUUwMi9YOEpya28z
dHlRdzVITVQxS2JwN25nbWxCRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDAiFdAgMCIX4wLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAFnjw4w
DQQCAAIwBwMFACQHIcAwDQYJKoZIhvcNAQELBQADggEBAHR31OaEQEs8HUWt50JN
AloEJo72zilSOxvfWUBs90K1fFXezeVVEWbfIpZQKtJs7TcVLWEFCFyDIY7emqbS
3tNtcyEsJxgUOkqrCI25IkJEgmkl7JQnlTwqaLCWEEi0o4XxCPOVKFpwtLA5pdWf
tSNgfuXfI0Mxxoo2S7aNSa8ayJrpL2gEh8TNVi7r5aRWd7fLEFAfjCdJQCRq3QD9
4pjYDun75aCLsov0pZATkqpE+SvI3AGs5PyCO99O8cX1/yrJCLpsKxQ8VxFbWMns
ZAiCxJnm9KzstZ3TfjZoyeIRtZ0h8OYbF/l90aiztn+KI3w8Pw+OaIZ1x4NFri2X
UwM=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:34:09 2025 by rpki-client