This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
File: 3owRZVEEK-jnJkvttYLwo3e7JL0.cer (raw, json)
Hash identifier: bz/ODervYrpgXVV8ufut36fCpe3pS42w0G7UXXjylLY=
Subject key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028BC2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Feb 2026 13:00:14 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 43.226.20.0/22
IP: 103.45.68.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Feb 2026 07:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166850 (0x28bc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 2 13:00:14 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:db:7b:9a:bc:28:07:54:29:b4:2a:80:d7:
df:2b:20:21:ae:2b:96:32:2c:a4:53:d8:a9:6b:c4:
40:40:b9:b0:2e:f9:16:b5:72:5f:1e:50:d9:94:75:
c1:23:07:13:35:94:80:bf:73:33:ec:1f:02:e3:85:
4b:a3:a5:18:56:da:7d:df:4d:5d:3f:e7:3c:9a:18:
42:f7:7b:57:30:8d:7a:59:2d:85:36:7a:1f:a1:8d:
08:41:73:42:38:c7:ec:d8:b9:39:2f:81:e5:de:21:
49:1b:09:a4:38:d7:b8:34:8d:0b:35:71:2c:9c:1d:
9b:20:81:0f:3b:af:c0:09:d7:74:7f:3c:18:d0:7b:
c8:eb:5b:4d:d4:db:b3:e6:5d:db:8c:06:d1:f0:29:
a7:67:71:51:73:4f:77:33:59:84:a2:2d:cc:f1:8f:
6d:3f:a7:95:f9:e3:ba:8a:41:bc:36:f7:6c:da:cd:
bc:22:05:ae:6e:5c:07:8a:a2:25:b8:bc:96:e7:dc:
d7:16:f1:fb:1b:55:de:c9:14:0f:aa:70:37:73:d8:
5e:90:aa:08:7e:c4:50:be:d0:79:7c:91:6e:d0:3e:
19:b6:c6:bd:7b:ae:85:30:17:89:43:a0:07:56:05:
76:2e:ff:60:15:66:e8:20:ac:b1:99:74:70:bc:59:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.20.0/22
103.45.68.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:56:55:70:e6:b6:78:e0:6e:ed:11:a5:19:55:0a:b0:e5:fb:
ea:c0:b8:1a:7c:36:be:cf:dd:ab:f0:28:06:bd:6c:14:98:72:
2a:54:8b:49:0b:ac:fd:da:03:8b:f8:af:9c:ec:ac:db:a1:c5:
76:aa:aa:3f:db:e8:14:c0:3b:ab:b6:f2:46:7b:93:c4:15:2a:
41:0d:7f:c8:26:3b:d6:86:b5:63:fa:9b:68:b3:5c:f3:fc:46:
54:c3:d7:ea:98:a6:ce:e3:3f:2a:39:c6:fe:ba:12:ff:29:c9:
c3:a1:c1:a0:ce:00:69:ab:26:2c:7c:d1:ad:35:86:d3:fc:4b:
6c:f9:e6:50:e4:b0:39:d7:9b:3a:b3:cb:cd:86:80:08:3e:4a:
bb:93:1a:00:56:24:0d:11:59:7e:a9:fe:31:d4:ba:2c:30:be:
08:92:51:eb:99:9c:81:de:bc:38:fb:d9:a1:4c:60:ae:c3:36:
d3:4d:c1:21:61:2d:da:51:2d:80:54:27:aa:64:b0:7a:ee:90:
a4:38:79:de:92:ed:fe:a6:35:d8:69:c2:e5:c1:24:44:f7:c5:
79:6f:7f:ed:6c:59:aa:49:42:42:74:d4:41:38:0a:2d:ba:ac:
eb:68:75:09:23:e1:03:f3:d0:cf:75:f9:a2:a0:85:0b:be:3a:
eb:c0:a9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 10:36:50 2026 by rpki-client