This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer
File: I2o4zV7FL3Doi4BtcV63sELNfr8.cer (raw, json)
Hash identifier: 0yZz95AgMtMaDfIW2yl02qmOwjqDQxJSps1L9hsUzDo=
Subject key identifier: 23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 70CC
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 24 Dec 2025 09:56:11 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.182.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28876 (0x70cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Dec 24 09:56:11 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A918120B, serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:6f:7c:b4:9d:65:d6:1a:db:91:f3:0b:5b:
a4:b3:be:90:be:43:79:24:78:00:1e:40:2e:15:2b:
cd:5d:00:16:d1:0d:b7:b0:a4:da:90:59:d2:64:09:
32:12:31:fc:6f:13:37:99:e9:51:3d:17:05:4a:05:
ac:9e:4d:1f:20:4e:83:50:dc:32:74:ad:c4:a2:77:
29:fc:04:ff:14:fa:03:76:be:c3:ce:23:a6:81:9a:
da:f1:6c:f9:b4:3f:2e:8e:ff:20:4f:d6:58:dc:fd:
29:f2:ec:e2:0f:e9:d8:f7:4f:e1:ae:2e:49:ee:e7:
db:14:c2:05:68:17:45:1b:cd:cb:62:a2:37:f4:7c:
88:6c:38:6c:22:d5:2d:b9:5b:a4:e0:02:34:45:70:
bf:37:b4:b7:4f:0c:86:5d:83:a1:8b:c2:6d:1d:7b:
c1:52:64:a0:05:0f:ae:dc:6f:8b:28:f0:52:58:1c:
ca:25:74:50:f9:ab:2b:0f:2b:8a:18:7b:ab:ba:44:
35:ed:bc:64:6d:67:74:a5:6f:f3:81:12:2b:5f:d8:
4d:61:2f:a5:42:87:df:e3:42:4d:1d:bc:52:da:12:
42:3c:b0:6e:d5:a8:7e:33:d1:5b:fc:fc:66:fe:26:
10:12:3d:59:b4:0f:7e:02:25:0f:3c:56:80:70:88:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.182.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:fc:05:0c:61:0c:d6:7c:75:8d:9e:f0:48:76:7f:92:80:a6:
d5:b4:b8:08:12:61:d6:0f:5c:ff:04:17:d7:fb:2e:1f:f6:5c:
ca:98:40:f9:96:e0:43:d0:e9:ab:f0:2c:b6:54:83:83:bc:d1:
e2:16:ff:2e:66:44:4f:d9:94:41:65:b2:c6:cc:60:80:02:be:
bb:8a:82:e2:11:bc:e5:3a:78:f9:28:bf:47:a3:4b:ee:00:2a:
03:78:e4:82:dc:53:64:9b:23:ac:a5:d4:02:2a:5e:a1:da:da:
93:f8:33:35:8e:62:97:71:40:b1:b4:b1:45:43:ea:99:97:c4:
16:8c:b0:60:16:37:1a:68:1c:75:6d:e6:e2:09:12:8d:bf:b0:
4c:f1:e9:d0:1b:23:4e:ab:75:2f:b9:c5:9c:65:55:6d:9b:eb:
07:58:b0:e3:cb:fd:3e:42:7f:28:9a:c8:89:90:71:54:f7:f2:
9b:c6:31:58:f9:ae:f9:58:75:0b:bb:15:2d:ec:3a:c1:b5:cb:
f3:bf:c3:c7:8a:57:9d:31:b0:28:1f:e2:34:75:c6:80:4d:6e:
09:19:28:ac:59:93:29:18:64:87:cf:ea:9d:8f:fe:13:ae:eb:
e3:61:1d:ee:d2:04:15:d9:9d:c1:f8:8e:d5:e5:ab:9b:c9:4f:
22:b0:88:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 08:05:04 2026 by rpki-client