This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
File: 44pe3hloyTdeUVUfrpiIigu1RJA.cer (raw, json)
Hash identifier: FShRbfxKpXiOxZWkD4qiLop5MWkTxT0MMxQx5H5XoOI=
Subject key identifier: E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7114
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 29 Dec 2025 13:52:43 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 161.248.53.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28948 (0x7114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Dec 29 13:52:43 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91AAC4B, serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b0:df:87:bf:f3:fa:ec:2d:30:46:66:b2:bf:
01:52:cc:07:42:0e:bf:f1:57:43:53:9f:7e:cf:08:
25:42:87:96:32:05:c0:89:1e:79:8e:cb:19:97:a3:
83:e5:3a:13:c8:c6:0c:92:ca:72:8b:2a:b6:28:11:
94:e1:30:2c:7c:87:8f:37:05:b3:f4:88:f6:0d:bb:
36:ed:b9:bf:d1:ad:07:70:98:14:ac:d3:44:3a:6e:
4d:4a:d1:03:04:9c:29:09:2f:8c:77:df:b1:88:b5:
8d:fb:ba:4b:a6:06:c1:b7:4b:2d:0e:f3:51:81:74:
28:1b:dc:e8:09:6d:8c:b7:2f:59:a3:d2:69:17:a8:
6b:f0:db:4c:9c:d4:b6:5b:5b:fa:03:c3:63:a8:2a:
4d:23:d1:76:a5:55:3c:6f:27:7c:81:97:08:af:59:
91:90:4d:08:15:53:55:61:58:bc:dd:18:e2:87:0f:
44:c5:fc:af:0e:f0:cb:c3:e7:05:69:17:53:f3:4b:
9c:a5:23:1d:e6:e4:68:98:93:15:54:d3:bf:ab:47:
a7:5e:ec:46:2d:14:e4:0c:63:ae:da:bc:0f:a3:77:
54:62:d3:3e:56:d9:12:42:90:52:0d:16:64:9b:98:
9e:fe:3a:75:f5:a0:87:7d:c9:27:43:4a:e0:10:c6:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.53.0/24
Signature Algorithm: sha256WithRSAEncryption
74:50:32:a1:7d:38:38:0c:b5:dd:62:31:92:76:aa:09:70:f0:
55:f1:7d:11:90:1b:08:84:42:de:1e:80:a0:cb:ea:50:bd:75:
48:04:ee:e7:48:5c:2e:1e:58:1c:5c:ea:e2:0e:03:21:ed:30:
04:72:1a:6b:f0:9f:99:25:f7:1e:14:53:25:b6:32:bc:10:ee:
59:98:99:d6:d6:37:38:4e:a9:f5:94:a6:cd:73:f6:60:d6:61:
1b:de:69:0c:2f:2a:9a:42:38:a4:8f:96:ad:f0:e7:4c:e7:86:
33:b0:e3:fa:ae:4a:65:65:8c:52:46:d6:21:05:fd:4f:bb:e4:
6a:6e:af:86:55:e3:01:f8:0a:80:a4:f4:7a:7e:34:dd:ac:f4:
41:e8:dc:b2:e3:f1:c1:03:53:6f:88:9e:8d:f2:fa:75:10:af:
a1:74:f4:52:9b:73:95:24:f8:b6:7a:4d:00:b0:08:fc:92:06:
b8:42:2a:57:b5:9a:ab:2d:9f:8c:6b:bb:0d:58:ae:d2:18:d8:
49:ce:30:c8:ec:b2:81:02:50:44:3d:94:28:ed:f9:be:69:ba:
cd:37:fe:dd:e7:c9:e3:79:61:ec:9a:7d:71:3d:77:fd:ec:dc:
a6:ff:ad:22:70:d7:68:fe:cf:ec:71:a7:a6:08:ed:12:a3:7a:
98:8f:3f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:52:11 2026 by rpki-client