This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer
File: VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer (raw, json)
Hash identifier: /2HhlMnzaJbAmhaU6IXc8eavsLWBZdNxcNM/uG3BQ5w=
Subject key identifier: 54:90:49:D5:76:1E:C6:1D:30:4B:38:9F:58:6B:B3:F5:EE:8A:A3:C3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028B86
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 02 Feb 2026 06:46:53 +0000
Certificate not after: Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources: IP: 45.116.224.0/22
IP: 103.20.72.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Feb 2026 19:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166790 (0x28b86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Feb 2 06:46:53 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=A9159BAE, serialNumber=549049D5761EC61D304B389F586BB3F5EE8AA3C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:42:21:55:fc:86:7b:67:9c:bc:b5:44:f1:
99:1e:6c:ad:a5:49:97:74:06:dc:33:6c:bd:d3:28:
2d:00:d1:ca:de:7b:f4:d0:7f:91:11:ec:34:7d:54:
c2:5d:61:c6:c9:f4:11:36:d6:2d:24:32:11:4b:ea:
d8:fc:78:39:b6:94:1c:6b:85:60:b5:c3:34:28:4e:
d8:12:02:88:a7:9e:93:be:84:c7:03:1c:87:8e:6f:
26:c6:64:32:ab:d7:08:78:40:c5:3d:03:d8:13:84:
fe:cf:4e:a7:50:1c:58:2a:6a:7c:6b:b3:25:78:0e:
c7:46:60:41:31:42:d0:9f:92:bf:02:31:46:fe:b8:
9e:3d:91:6e:7f:03:df:f9:e2:ca:8a:77:0d:e1:36:
b6:39:66:52:79:a7:2d:e0:bf:a7:53:30:78:2a:32:
c5:2b:78:70:58:7f:8f:ff:92:a5:6a:4b:e1:cc:b0:
28:d5:7e:92:fc:6e:4a:4b:54:09:a3:25:ec:a1:63:
aa:ba:96:a4:38:99:db:4d:c0:79:c4:ce:96:f4:90:
97:c5:43:c5:cf:d0:01:55:b2:41:bf:51:12:a8:bb:
69:5a:0d:22:40:ed:15:f7:ff:37:24:42:37:e9:39:
17:95:c3:83:de:d1:af:6f:a7:ec:00:5b:b6:4a:a0:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:90:49:D5:76:1E:C6:1D:30:4B:38:9F:58:6B:B3:F5:EE:8A:A3:C3
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.224.0/22
103.20.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:a3:1b:f8:14:1d:e0:49:22:57:89:5f:ca:4f:92:f5:44:8a:
09:c7:82:01:6d:be:5a:27:16:1a:27:79:72:68:22:6a:88:5b:
19:4e:89:01:bc:08:79:bc:f3:da:0e:4a:e3:9e:42:38:6f:ba:
61:2e:79:7d:a9:1b:bf:9f:7f:49:67:3b:94:73:2a:7f:18:73:
e6:b3:e1:23:74:fd:ee:18:49:ea:86:e9:a0:42:61:4a:59:58:
84:e8:ab:58:a9:ab:35:cd:b7:d9:ec:b9:87:4d:ba:ae:d2:41:
ac:df:0b:57:86:51:f9:fe:01:5f:df:4b:0d:5f:bb:23:ef:e3:
ac:07:f5:46:1c:5f:45:8b:b5:d2:8c:7e:2f:86:11:17:a3:2b:
80:9c:00:9d:e8:a1:1f:16:d7:f6:2d:74:56:01:02:91:45:bf:
c5:b2:51:40:40:8a:f1:2b:70:c2:72:ea:33:d3:db:30:3b:05:
fd:62:44:1a:37:95:6f:08:32:28:98:a5:8e:f6:c2:58:ea:f5:
11:f5:bc:c5:71:4b:3a:f5:8c:df:c4:fa:2e:53:43:ba:65:43:
ae:b5:ee:f5:8a:57:6d:d2:62:08:a8:2f:9a:2e:d1:45:64:c7:
b5:2c:f5:75:3f:1e:ae:f0:b8:12:8b:f1:dd:c2:7b:4f:18:93:
43:34:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 22:41:19 2026 by rpki-client