This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.cer (raw, json)
Hash identifier: j41mmmKBq9SCqN2+xEeW0hO5TpeybNfqoav1TX7oPAs=
Subject key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial: 4F0B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 30 Dec 2025 13:41:37 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 185.175.228.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 02:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20235 (0x4f0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Validity
Not Before: Dec 30 13:41:37 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:c4:74:6e:f9:26:01:a3:96:1e:66:ff:22:
fa:de:8e:99:95:48:e9:a8:dd:ae:d6:79:13:41:f9:
c2:64:02:00:9f:ea:99:26:c5:7b:2a:8d:9e:0b:1f:
6e:82:0a:c3:06:60:df:01:65:00:35:bd:dd:f6:93:
a8:47:b1:a8:b3:46:43:62:f8:3c:cb:0c:a5:9d:a7:
70:9e:2a:f0:2e:d0:41:a2:91:8b:33:13:3d:c5:5d:
9c:a1:cb:e9:d3:d9:32:72:62:44:97:ec:69:91:cd:
72:67:91:df:9d:c3:62:7f:af:11:1d:e8:b0:43:69:
ea:aa:3f:89:ae:a8:c6:3e:0d:7d:10:2d:ec:2d:d2:
68:5f:0e:86:a6:c2:e5:10:e0:9d:b5:23:34:7b:d0:
77:5d:9d:28:75:ab:45:86:12:9a:07:7e:0b:20:ae:
34:d7:d8:c9:b5:2c:f3:a1:0b:43:63:92:06:9e:03:
3a:ff:32:b5:bd:3a:01:ae:54:88:69:13:7e:0d:6e:
d2:18:3c:a3:28:22:35:94:ab:99:1a:bf:a3:3e:8c:
1c:15:ca:8c:14:54:46:6b:b2:f5:4d:25:97:e6:44:
dc:30:24:4c:57:aa:e4:41:8d:98:bc:e5:e4:a2:bf:
50:40:00:1c:34:dc:a5:f4:5b:1e:e2:23:0b:e3:db:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
X509v3 Authority Key Identifier:
keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.175.228.0/22
Signature Algorithm: sha256WithRSAEncryption
85:3b:f0:bf:9f:b9:3b:ba:fe:fa:2a:d9:83:4e:86:06:1d:ab:
43:b2:60:8b:49:41:9b:b8:01:22:3f:c3:2e:b2:4c:3f:43:dc:
9c:ee:5d:5f:84:b3:1c:ac:1c:ea:77:64:fa:b3:37:07:3a:52:
09:eb:d7:a9:dd:9f:f8:57:a9:e2:93:5d:66:f2:8f:76:a8:60:
43:ef:f1:d1:18:c5:55:df:a6:85:ec:a9:06:a7:ef:76:a9:3d:
7f:0b:88:01:fe:9e:fa:c8:25:ae:a4:ce:54:94:b2:ff:4b:61:
23:de:49:0d:3b:be:db:8e:32:c8:84:35:6c:76:95:ae:2c:54:
47:5f:cd:f3:ae:cb:a3:ca:19:31:e5:a2:90:6a:b5:e6:a6:f6:
20:e8:1f:56:1b:5d:75:76:9e:54:92:fd:0f:38:6e:ff:7d:8b:
a5:a4:c4:bd:19:ff:fb:d4:b0:4b:b4:61:6d:a4:41:71:89:19:
3e:78:25:c2:0c:fe:6c:26:b9:bc:9c:d8:6b:90:1c:72:3b:be:
74:e7:d9:ec:a2:ab:f0:3d:27:8d:b2:4c:47:52:c1:8c:8e:6d:
9c:e5:b9:26:2a:04:01:72:25:7f:2f:02:cc:3e:0d:4b:23:0b:
57:60:24:68:05:79:25:a8:5d:3e:61:70:66:83:67:12:a6:ed:
ee:32:2e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:09:28 2026 by rpki-client