This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer
File: E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer (raw, json)
Hash identifier: DY44PhqP9XmZGp5lfM+V/SJzhZgYm1X4ks6hnj6ullA=
Subject key identifier: 13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7233
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 13 Jan 2026 23:13:09 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 138.252.154.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29235 (0x7233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jan 13 23:13:09 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A91A68C0, serialNumber=13C2AB779B5A8DBBB396C9E5845817930BBE16AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:83:37:4c:dc:4f:e4:2d:2c:95:94:b6:5d:
ec:77:ab:d4:22:45:23:db:30:79:5d:43:e8:ba:d0:
ba:fc:0e:01:f6:59:d6:90:a7:b3:9b:2a:b3:95:49:
5d:fe:cb:4d:16:65:bc:61:6f:30:12:94:b1:0c:a7:
5d:1d:6e:f3:76:70:20:1d:0c:a3:fe:2f:27:77:46:
35:a9:e3:87:67:70:fc:12:f1:10:a4:d5:9e:c1:b6:
86:7b:92:26:a3:6b:07:f2:12:10:cc:b0:21:63:25:
c1:19:8c:92:6a:0b:dc:76:ea:f0:be:b6:01:6b:1e:
6f:a7:a2:36:fc:3b:63:46:b3:43:67:6b:74:d2:b8:
3f:c1:02:b7:63:96:86:7f:12:a9:8d:e5:3b:f2:18:
32:07:3e:d8:78:03:13:fb:8e:13:15:3c:fb:60:38:
1b:d5:50:b4:db:b1:02:43:25:0f:00:3f:1f:d1:90:
5b:12:86:43:d4:87:3e:39:ca:01:88:59:f8:29:91:
66:57:3c:3a:03:c0:0d:3e:61:bc:72:3d:6c:85:f7:
f1:fd:59:6b:15:a9:63:23:ec:ee:03:4f:ed:eb:a3:
81:2a:96:a9:10:e4:11:ab:83:dc:3a:7b:c8:50:33:
4b:f6:b8:83:9d:cd:5b:67:27:30:e8:44:fd:23:9e:
72:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.154.0/23
Signature Algorithm: sha256WithRSAEncryption
59:86:23:c2:c5:d8:3a:5a:08:c1:c0:1e:55:00:f1:7b:20:6d:
b0:ab:47:59:c2:4c:2a:0a:86:c4:c2:1d:b5:85:48:18:8c:45:
0f:77:7b:0c:f4:71:8d:1d:3d:e1:a2:4b:00:a4:9a:03:f5:ff:
29:c0:c3:6e:b7:4c:21:5e:36:da:f2:8d:da:30:d8:7e:c4:f0:
bd:ed:89:d7:8b:d9:15:2d:87:c1:96:be:25:6f:1e:35:b2:bb:
eb:81:f2:a2:a8:96:12:bb:d1:49:ba:c5:6a:00:b9:cf:7a:d6:
a4:5a:b0:78:f5:c8:09:27:6a:ce:6e:d1:50:e3:b6:83:16:72:
5b:af:cb:79:0d:44:9d:92:55:c9:2e:17:b3:06:8c:87:a5:bb:
c8:97:ff:f8:5d:5e:d4:7d:72:fc:3d:54:29:e5:43:ed:1b:86:
4e:08:b6:84:35:ac:40:69:5b:4c:e3:6e:31:af:1b:dc:e5:96:
3a:ce:22:06:b5:c8:a0:f2:db:06:12:e7:5e:e7:2b:08:52:f0:
f5:b6:cb:8a:ec:54:fd:d4:c1:fe:ad:fa:fd:32:0b:48:30:59:
27:a1:d1:4a:ad:46:31:74:b9:2b:9b:32:fe:b2:e5:d1:17:30:
e2:13:de:96:6a:27:d8:57:0d:8a:e9:72:30:4a:78:e0:f5:de:
d6:1d:38:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:50:42 2026 by rpki-client