This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer
File: cA9SATINxKfw-nMFyVWhmUwYJgA.cer (raw, json)
Hash identifier: acTEr/IU7eeRAhCoSPpbVI8O0JWgc+WSsZHxRELLn6w=
Subject key identifier: 70:0F:52:01:32:0D:C4:A7:F0:FA:73:05:C9:55:A1:99:4C:18:26:00
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028670
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Thu 15 Jan 2026 11:28:28 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: IP: 2001:df6:93c0::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Jan 2026 23:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165488 (0x28670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 15 11:28:28 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A9151290, serialNumber=700F5201320DC4A7F0FA7305C955A1994C182600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0c:27:21:83:cd:b3:4a:1a:24:02:2b:f0:b8:
58:1c:a0:13:43:01:e0:52:74:8b:43:1a:a6:20:c7:
37:4d:c4:7f:2a:5a:bf:88:82:53:9a:74:eb:9b:41:
33:d5:db:75:7d:a1:e7:f0:a0:27:48:2c:92:86:b8:
4f:48:9e:06:fe:0b:64:81:0e:40:be:ff:b2:f0:fe:
a1:78:b7:18:ae:98:08:14:9d:25:87:f1:eb:8b:7c:
2b:2a:60:61:3a:32:93:f8:f6:42:26:02:9c:17:72:
23:43:47:53:a2:d5:2b:70:65:2e:8a:1c:46:81:f5:
97:38:6a:7a:0e:e7:58:bf:a1:55:86:af:85:cd:db:
a6:35:24:88:90:e1:38:c2:2b:35:f9:0d:cc:d0:24:
91:74:99:50:1a:30:13:2e:87:b5:91:db:89:f4:d0:
1d:f4:0b:22:0b:29:d9:32:bb:cd:a7:54:e3:bd:b0:
dd:29:34:6c:db:0d:f6:b2:4e:c6:ff:5d:e6:b4:30:
1b:2e:97:5a:d8:4f:ac:b7:89:26:d6:8d:60:b4:d0:
71:51:53:07:2f:ca:bc:4e:bc:1f:31:28:26:6d:5c:
ed:ca:3a:32:e4:e6:61:b5:b4:ad:12:0d:cf:8c:ae:
87:42:8f:15:f9:96:d0:7b:77:16:ca:30:89:4d:1d:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0F:52:01:32:0D:C4:A7:F0:FA:73:05:C9:55:A1:99:4C:18:26:00
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:93c0::/48
Signature Algorithm: sha256WithRSAEncryption
09:1b:5b:c6:96:d5:bb:19:8e:2d:fe:8a:85:ff:84:5a:24:f1:
a9:1d:cb:ec:be:f9:b4:bf:8d:e5:6f:63:f1:d8:2e:a0:d4:4a:
7a:d9:3c:88:85:8b:c6:5b:c8:6a:d6:83:38:28:56:4a:b6:cd:
0f:32:71:a2:bd:fa:5f:65:cf:05:a8:7b:42:8a:d7:8b:f3:48:
d3:f2:a7:3c:4f:67:92:ca:15:84:0b:ff:77:83:1a:a5:94:04:
f5:ad:5b:0d:b8:8f:3b:97:dd:1c:7e:ba:3a:a9:be:63:c8:3b:
6e:12:66:95:24:0d:66:42:0b:87:26:a8:da:4e:ab:e0:d1:83:
46:4a:34:2b:71:a5:62:84:46:90:be:18:4f:1f:bc:2e:bb:d6:
37:d4:89:5f:8a:96:0d:8b:78:7b:1c:e1:f8:fa:13:07:9f:9c:
0d:43:f0:64:24:7c:5b:c0:bf:57:0e:6c:15:83:9a:ce:2a:14:
f0:c5:86:33:2e:ef:ad:ad:79:79:cf:9f:ac:ff:30:19:ed:ca:
28:39:70:18:b7:35:c4:d4:ef:63:69:2f:d2:87:77:14:97:f8:
a9:38:e7:73:0e:c8:09:fb:9a:d0:4a:5b:8f:5a:27:9d:58:c4:
91:ac:e5:94:cf:f4:af:a7:05:1a:17:37:ac:4d:93:b0:60:a9:
77:c6:6f:57
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgIDAoZwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDExNTExMjgyOFoXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAwwIQTkxNTEyOTAxMTAvBgNVBAUTKDcwMEY1MjAxMzIwREM0QTdGMEZBNzMw
NUM5NTVBMTk5NEMxODI2MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCHDCchg82zShokAivwuFgcoBNDAeBSdItDGqYgxzdNxH8qWr+IglOadOubQTPV
23V9oefwoCdILJKGuE9Ingb+C2SBDkC+/7Lw/qF4txiumAgUnSWH8euLfCsqYGE6
MpP49kImApwXciNDR1Oi1StwZS6KHEaB9Zc4anoO51i/oVWGr4XN26Y1JIiQ4TjC
KzX5DczQJJF0mVAaMBMuh7WR24n00B30CyILKdkyu82nVOO9sN0pNGzbDfayTsb/
Xea0MBsul1rYT6y3iSbWjWC00HFRUwcvyrxOvB8xKCZtXO3KOjLk5mG1tK0SDc+M
rodCjxX5ltB7dxbKMIlNHV5NAgMBAAGjggL2MIIC8jAdBgNVHQ4EFgQUcA9SATIN
xKfw+nMFyVWhmUwYJgAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTUxMjkwLzREODE2NkNDRjIwNTExRjBCRDI1ODYwNTRBNkY1NkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1MTI5MC80RDgxNjZDQ0YyMDUxMUYwQkQyNTg2MDU0QTZGNTZCQy9jQTlTQVRJ
TnhLZnctbk1GeVZXaG1Vd1lKZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAgAQ32k8AwDQYJKoZIhvcNAQELBQADggEBAAkbW8aW1bsZji3+
ioX/hFok8akdy+y++bS/jeVvY/HYLqDUSnrZPIiFi8ZbyGrWgzgoVkq2zQ8ycaK9
+l9lzwWoe0KK14vzSNPypzxPZ5LKFYQL/3eDGqWUBPWtWw24jzuX3Rx+ujqpvmPI
O24SZpUkDWZCC4cmqNpOq+DRg0ZKNCtxpWKERpC+GE8fvC671jfUiV+Klg2LeHsc
4fj6EwefnA1D8GQkfFvAv1cObBWDms4qFPDFhjMu762teXnPn6z/MBntyig5cBi3
NcTU72NpL9KHdxSX+Kk453MOyAn7mtBKW49aJ51YxJGs5ZTP9K+nBRoXN6xNk7Bg
qXfGb1c=
-----END CERTIFICATE-----
Generated at Fri Jan 23 00:54:18 2026 by rpki-client