This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
File: TT_EcGT06hvcqym55lsx103iZOA.cer (raw, json)
Hash identifier: X+obyPVfmHNwyJOWEbVInRz9cMR2ci8pgXqbrOE4o7M=
Subject key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 6FDF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 09 Dec 2025 04:50:26 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: IP: 160.250.24.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28639 (0x6fdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Dec 9 04:50:26 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:b9:07:28:57:c0:23:60:d8:06:0b:6f:06:
9f:1f:2e:f2:93:e3:29:1c:72:44:29:a3:45:f0:58:
93:cd:c7:2e:6f:ca:84:e3:76:9b:0a:1b:e8:f9:fa:
a1:c3:cc:04:e2:b2:f7:24:a6:07:a7:20:f9:7f:7f:
45:17:a4:f6:d0:ab:53:53:10:b2:e9:39:5b:d3:14:
7d:81:0f:e3:75:0b:b4:a3:b0:84:91:5a:05:5f:aa:
5b:75:15:2a:cc:45:11:e8:ed:0e:97:98:b5:6e:e8:
82:3d:2f:54:63:36:17:16:88:8a:6d:15:c8:bf:97:
0f:ee:3c:e8:1a:05:ed:c1:54:c5:e7:8e:00:a1:a5:
5b:da:32:cd:8c:66:31:f7:10:82:ff:64:97:dc:ab:
a8:20:4c:dc:3e:d8:11:16:bd:84:75:6d:79:06:f9:
99:f4:00:29:29:0f:58:45:fc:50:bf:fe:8a:41:4b:
82:f8:d5:35:ac:24:7b:7b:00:69:44:6b:38:25:65:
e1:20:0e:f0:4b:8c:a9:3b:8c:0e:40:18:64:ef:af:
b7:a0:02:4c:df:85:d3:0a:d4:82:01:e8:65:a6:24:
9a:d0:1b:9a:e9:87:9e:10:3f:1d:f5:10:43:db:4b:
23:38:bc:5b:9f:5a:af:5e:5f:84:c0:c6:da:d5:1e:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.24.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:5f:fa:04:5c:ba:bc:d0:a4:ca:41:12:3e:25:00:8c:72:5c:
d3:a9:1f:35:37:54:47:7c:0e:a2:5f:fe:04:73:6d:1a:81:70:
dd:d7:4d:84:31:60:17:cf:c6:34:44:8e:26:bf:a6:22:83:8f:
7f:83:07:48:90:db:de:1a:30:02:22:84:55:96:1a:16:5b:e3:
3e:2a:4e:b8:70:4f:e0:70:26:c6:99:28:48:36:d7:96:fd:73:
64:ea:5f:09:d6:7e:ef:11:d6:56:f5:44:84:2a:40:a8:93:e8:
5f:e9:e0:72:c4:6f:b4:e9:23:93:9e:72:66:93:50:3b:0d:66:
73:7e:6b:28:5f:be:ee:db:18:19:29:4b:03:cf:3a:a0:07:ff:
b5:fe:9d:ac:f2:ee:12:56:d3:4e:3a:d2:6f:4a:ec:4e:a1:22:
1f:70:9f:25:a8:70:0f:d7:8d:af:54:6e:f7:d4:82:9f:ce:c0:
0e:45:79:3a:e0:2c:2c:80:d0:c5:38:48:2f:6e:85:1b:bf:a2:
b1:0d:76:c6:51:d0:05:c4:fa:de:63:5c:47:e7:ff:1f:e0:e1:
36:33:3a:84:8f:16:32:f2:e2:78:45:c9:6e:e1:24:bd:f6:21:
e1:76:0e:a3:0b:15:8b:09:f1:b5:9c:4d:ca:4e:78:52:08:5f:
b0:91:b7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:53:34 2026 by rpki-client