This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
File: TYBwR6bhsNMLr2Qme_lSJIr906k.cer (raw, json)
Hash identifier: XOmlEl7C8j9bTB/XspX1J7zkS0SDFpa+m1Ls78JwgKA=
Subject key identifier: 4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 724B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 15 Jan 2026 10:58:06 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 144.79.246.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29259 (0x724b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jan 15 10:58:06 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91F7D5E, serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:a2:7e:a6:ed:87:ec:1d:dd:25:77:ca:18:
ce:80:ce:ae:56:74:ad:57:c3:67:cf:a3:ed:37:5b:
c0:f2:1c:a1:fd:f7:79:bf:2a:30:49:2d:f3:0a:fc:
dc:36:03:c7:f2:27:6a:35:5a:4e:54:dc:68:b7:ea:
43:68:b7:f9:05:76:a6:80:62:6c:05:d7:3a:37:bc:
a0:5f:f8:36:28:cc:c2:fa:bc:99:6a:7e:dc:e4:c1:
33:30:16:b2:7b:28:73:cc:1d:04:41:56:9c:0a:59:
90:31:5d:00:15:05:ab:54:6f:78:30:1e:c6:08:d5:
f2:42:d6:c6:2b:b8:bd:86:8b:19:30:44:82:f6:57:
76:fc:91:e3:64:f1:f6:2e:52:f3:7a:94:83:7f:fe:
dc:ee:98:28:49:1b:71:f5:45:13:85:07:37:7b:58:
70:d8:23:42:e0:d5:39:81:80:36:3f:83:29:95:a5:
48:22:f4:0f:07:e0:4e:94:e7:c8:07:a0:2d:ce:43:
8c:77:8d:88:b8:c6:7d:02:0c:32:13:05:bf:af:e3:
19:d7:87:4c:d1:a9:ea:96:df:5a:c9:ac:b7:98:47:
55:db:40:7f:55:23:d5:8c:04:a9:fc:b1:2d:0c:5b:
97:a5:87:38:5c:a2:11:73:92:eb:a0:f4:1a:2b:34:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.246.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:2f:93:13:18:05:83:1b:3c:43:90:19:06:1c:4d:15:ca:22:
5f:23:c2:37:fa:7f:a8:07:80:48:87:19:84:90:af:3a:fd:8f:
8e:69:45:14:9c:66:0e:2b:3e:b6:56:de:55:af:48:da:f5:d0:
21:b5:ef:2a:00:c8:96:85:89:38:66:e6:84:bd:d7:15:f4:3c:
be:bc:71:53:87:38:c8:72:40:1e:f2:90:e8:ab:3a:fc:5f:0c:
2c:c8:23:33:66:05:fb:50:75:33:0d:e0:8c:9a:41:c2:19:95:
80:6f:1f:6b:b3:6f:08:3f:a4:14:50:e0:be:7d:75:bd:9e:28:
3f:d1:d4:be:a5:e0:a4:2c:e6:b5:6d:e2:cb:de:c5:fb:57:dc:
2e:3a:75:aa:bd:70:64:50:a1:c6:68:72:c3:9b:b3:22:73:28:
e5:34:8c:fc:66:4d:f3:99:da:10:f3:f0:e5:f6:c8:b2:4e:5b:
4b:74:07:cc:bf:1e:e3:9a:b1:59:65:56:02:f1:ee:6f:4d:54:
13:54:3c:02:d5:be:d1:27:14:53:03:18:de:52:59:49:9a:2d:
b0:78:16:d1:a5:9f:df:12:68:6e:a1:7a:fa:2f:10:8c:6f:c8:
89:0c:15:9a:c0:79:51:e1:73:be:d6:25:98:4d:dc:50:a7:4b:
05:c1:70:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:50:43 2026 by rpki-client