This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
File: dt6sBgRg9vilvVgpnFOryvmx01g.cer (raw, json)
Hash identifier: Sx5Rw48b199us/uWD316m1cCSCR/SUfyUKUbaPniXUw=
Subject key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 7066
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 17 Dec 2025 14:18:46 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 165.69.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Jan 2026 07:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28774 (0x7066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Dec 17 14:18:46 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:a9:fa:b9:18:45:c4:98:78:80:eb:91:61:
7d:6c:ec:4a:1e:b7:08:b2:cd:a6:87:07:1d:a6:2e:
35:cc:cb:c3:ec:e5:dd:cd:c8:a6:15:4a:0c:98:65:
60:e3:3c:3c:a1:a8:49:2f:0e:33:da:37:91:da:65:
40:e0:6e:be:9a:72:dd:18:26:fb:71:13:26:b4:f5:
8b:b2:1e:4d:cd:00:37:55:6e:10:c6:d4:d2:fc:2b:
7b:4d:82:cd:49:c2:07:f4:4e:46:e3:2f:32:15:45:
54:9e:f6:78:0b:8e:6e:b2:cb:a7:f8:1f:b3:38:4f:
3a:8f:c1:f1:0d:64:f0:ac:68:52:42:84:51:c3:1f:
25:17:ba:81:e7:7a:28:7e:5a:b7:09:5e:ad:5b:c6:
bf:94:71:71:e8:b1:1a:e2:24:12:40:85:29:87:6a:
bc:af:4e:94:31:ce:cf:15:43:67:c8:0f:4d:89:c2:
b2:6c:74:60:6a:c3:71:c9:df:f1:ca:27:ab:da:93:
3a:a9:43:67:3c:2d:40:31:27:a1:da:ad:ff:7f:d3:
a7:78:16:99:15:eb:e6:69:27:00:fc:3c:48:9b:48:
86:48:d2:7c:2e:c1:fc:0c:a6:de:83:fb:1b:69:19:
d5:e3:ce:8a:28:7c:cc:3b:99:6d:95:12:81:1e:ac:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c3:21:b7:d6:d1:76:d0:ff:de:f3:b4:d5:e4:cc:94:5f:a0:e1:
d8:cc:a3:44:81:6b:11:2b:80:92:81:0e:98:07:0a:e2:85:db:
22:f5:6f:1c:05:57:61:5f:83:b2:07:cc:f5:b1:04:4b:d4:d6:
61:bb:8a:7a:d4:32:5f:f7:55:35:02:5a:6d:b4:40:57:1f:59:
b7:c9:21:29:90:60:ac:4b:0d:fb:ad:43:d0:35:62:46:e2:cb:
bf:16:14:53:73:57:c9:5b:13:06:c0:6e:b2:6f:a8:cf:18:c7:
29:d6:8a:e6:3d:39:5b:d1:a8:aa:7a:39:e2:19:74:25:9a:8e:
4c:a2:0e:1f:cc:7b:99:fa:ac:59:4a:3e:f4:f0:90:19:35:6a:
0d:1a:c0:4e:d5:c0:25:2a:ce:e4:bc:72:3a:3e:41:a8:e9:21:
7e:2f:50:dc:ef:60:32:43:59:ac:cc:57:e8:c9:e0:33:cc:a8:
ef:54:53:6c:fb:cc:01:2c:e2:b0:ad:8d:8c:6d:ca:25:72:2a:
94:53:e9:d3:47:dc:3a:ef:2f:59:f1:2f:83:cd:b3:39:47:ec:
2a:17:5a:a8:fb:8a:94:2a:c8:ec:69:83:cf:8a:d4:db:c0:bf:
cc:64:75:f9:07:60:e8:96:0a:08:bc:5d:4d:66:8c:77:bf:5b:
c5:eb:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 14:05:11 2026 by rpki-client