This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
File: gL6TDjBkmxKs7o3EC1dat93mSUU.cer (raw, json)
Hash identifier: ECVroXIzFLjPIOBG4TRSKktP6W66YHYCKqLKOhC7Ino=
Subject key identifier: 80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027930
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 29 Nov 2025 01:46:23 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 151844
IP: 103.249.114.0/23
IP: 2001:df2:ff40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 06:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162096 (0x27930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 29 01:46:23 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91E0C33, serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:04:45:c4:e4:e4:40:e1:1d:2c:e9:60:90:
d8:09:22:5a:0c:fc:05:c5:03:df:34:e1:19:58:d5:
f2:a8:e2:ac:d6:19:b6:b3:02:3f:80:e1:91:8d:d3:
27:53:dc:5d:17:9d:cd:df:38:4e:ea:ab:52:33:47:
b6:8e:fd:b1:5a:4d:b7:5a:32:69:12:49:e1:30:16:
44:c4:0d:e2:31:be:1f:2e:c5:a6:35:48:ac:64:22:
f5:4f:5b:b3:ff:e6:de:e9:ef:23:cd:aa:de:e2:71:
9b:87:4d:ec:99:89:0a:6e:8a:4b:33:1c:0d:dd:97:
7b:1d:50:0a:67:06:5f:fc:d7:b4:be:1a:78:14:49:
94:30:45:59:f1:9b:f1:07:91:c1:63:68:e5:81:9b:
7b:8a:f4:84:a1:f4:66:8e:89:19:a3:ab:de:1d:dd:
99:35:75:09:bd:91:5e:08:9a:bc:55:30:ea:c1:ea:
99:2a:fa:f5:9d:2a:a5:f8:3d:4d:30:64:2e:a8:4a:
3f:5e:8f:1b:d0:59:e0:74:b1:6d:54:a2:ad:31:80:
7a:5d:46:1b:69:38:fb:1f:94:76:ed:df:3c:5d:2e:
ff:91:b3:ea:8e:72:6a:43:e4:0b:29:b7:d0:bd:48:
f1:97:e8:a4:8e:b6:66:06:72:07:92:06:ed:a8:7f:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151844
sbgp-ipAddrBlock: critical
IPv4:
103.249.114.0/23
IPv6:
2001:df2:ff40::/48
Signature Algorithm: sha256WithRSAEncryption
a9:bb:90:cd:63:a1:65:7f:34:22:cb:86:db:04:f3:2e:7b:9c:
cd:28:64:45:81:ae:b9:82:9e:dc:61:b4:16:81:3d:93:7c:fd:
fd:19:21:eb:e4:34:69:5b:5e:92:2f:e4:17:65:d1:f2:e2:ff:
d6:e6:f7:6e:bf:8f:5f:f2:0c:5d:39:e6:47:b6:d1:17:76:b3:
df:6e:96:39:44:ff:d5:7e:e2:fc:8a:56:0c:fb:2f:f0:0b:76:
c2:a7:8c:ef:fe:9a:f0:35:23:de:3a:08:fd:ae:89:ec:2a:8d:
94:89:42:ca:72:be:fb:dd:29:7d:b5:f9:ff:23:03:42:e1:79:
e0:13:4c:e9:69:9f:5e:d3:2b:ee:ec:22:cf:84:2b:2a:e8:f9:
62:15:ab:5e:da:3e:d8:bb:46:9f:24:da:a0:c8:15:7a:21:56:
02:40:90:07:a1:7e:99:91:ff:85:19:1e:3c:39:6b:1b:02:2c:
13:9b:6d:a4:d5:ed:f9:51:dc:43:b7:ca:c2:69:32:7f:4c:23:
4b:3d:29:44:25:e6:32:30:de:53:ca:0b:ae:7d:d7:32:60:76:
3d:15:d6:86:59:92:b5:e9:94:23:11:bb:ff:44:16:a9:38:55:
f2:73:fd:70:01:a6:15:62:56:15:d8:cc:d9:42:6e:2e:a1:f4:
8f:75:4f:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:32:40 2025 by rpki-client