This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
File: hTkiUckhyp9RnbkRxagKd9_jVMQ.cer (raw, json)
Hash identifier: w9DNtKGbF7zYJvVEp6/0p/IXnDJP3j0F/D9h8dH/bJY=
Subject key identifier: 85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02860E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 14 Jan 2026 06:46:55 +0000
Certificate not after: Sat 01 May 2027 00:00:00 +0000
Subordinate resources: AS: 142200
IP: 2402:47a0::/32
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 09:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165390 (0x2860e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 14 06:46:55 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=A915B358, serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:dc:68:97:82:a8:f6:9b:3a:de:8f:98:ff:ae:
d5:86:9b:1f:57:43:15:71:cd:c2:b4:68:a8:b4:2d:
f1:85:7d:57:fb:c5:b0:fc:69:2d:a2:ad:88:c5:50:
73:e8:77:a6:8b:4b:5c:ff:3e:b1:15:bf:18:c0:4e:
2c:25:7e:f1:ea:19:54:34:15:3b:57:45:43:4e:78:
92:a6:07:47:be:60:b8:41:f4:58:ff:68:98:f8:29:
7c:bd:e0:6e:ce:6e:ae:e6:cf:07:7e:c5:aa:6b:a2:
fd:ec:ac:4f:9b:fc:2c:78:f7:6d:11:31:ef:ad:68:
3d:f4:3d:0f:7d:fe:ff:d1:98:05:55:8a:13:80:3d:
a3:cc:82:c0:81:23:40:15:b1:67:92:32:1f:22:3d:
8c:2c:02:f7:85:84:c1:fb:70:4c:ff:37:bc:45:54:
38:cd:97:80:4c:0f:66:4e:20:fd:6c:41:1a:21:00:
0f:1e:40:3d:14:cd:a2:ac:b0:6a:9f:b2:65:77:bd:
6d:59:16:ab:4a:cd:ce:0c:a2:e0:d8:26:3b:68:be:
f6:ea:6c:d0:05:d6:4c:b0:a9:16:9a:19:75:6e:8b:
61:4d:53:2d:a2:00:29:02:31:42:0f:54:63:80:41:
2b:3a:1f:3e:eb:78:59:6a:e2:86:31:a7:39:5d:62:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
142200
sbgp-ipAddrBlock: critical
IPv6:
2402:47a0::/32
Signature Algorithm: sha256WithRSAEncryption
ac:03:21:c1:96:5e:09:6a:b6:e8:bd:4c:58:d9:1d:95:de:01:
34:a4:0a:d3:4b:b7:c5:ec:b2:34:58:8d:69:d2:b3:02:24:d1:
30:50:38:f9:5b:3c:21:97:dd:33:0b:ea:4f:a3:a1:c8:f3:6c:
b8:cb:46:3f:59:d5:47:61:05:69:c9:43:f7:5f:fd:a6:d1:d5:
a5:40:00:fa:94:73:00:c6:ee:6e:52:5b:38:ae:ab:72:5d:f1:
95:bc:56:78:0c:0f:8d:46:c7:15:6f:6b:dd:78:f0:ea:2c:03:
39:f2:b2:a1:91:c7:e1:74:80:0c:59:5e:15:fb:9f:fc:b4:82:
a9:73:d5:ed:3a:14:57:13:37:96:5c:d6:3f:fe:20:b1:1f:31:
87:d7:69:cb:64:ef:6b:a0:a8:0c:ad:90:56:bd:76:9d:74:51:
d5:f4:bc:7c:7c:af:23:cb:f1:3c:62:1d:08:6e:5a:e4:73:5e:
33:ec:94:19:26:b6:8a:ac:ea:af:e4:34:ff:fb:3f:8c:2a:ca:
33:68:55:14:e5:41:76:40:83:a5:51:d6:ed:24:c4:d0:f3:62:
fa:20:7c:b9:77:e2:a2:3b:4d:51:f8:49:3e:ac:e6:4c:73:86:
6e:14:0c:24:34:2c:03:21:06:75:a6:5a:80:3d:95:a5:44:32:
39:2b:ed:bf
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAoYOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDExNDA2NDY1NVoXDTI3MDUwMTAwMDAwMFowRjERMA8G
A1UEAwwIQTkxNUIzNTgxMTAvBgNVBAUTKDg1MzkyMjUxQzkyMUNBOUY1MTlEQjkx
MUM1QTgwQTc3REZFMzU0QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDq3GiXgqj2mzrej5j/rtWGmx9XQxVxzcK0aKi0LfGFfVf7xbD8aS2irYjFUHPo
d6aLS1z/PrEVvxjATiwlfvHqGVQ0FTtXRUNOeJKmB0e+YLhB9Fj/aJj4KXy94G7O
bq7mzwd+xaprov3srE+b/Cx4920RMe+taD30PQ99/v/RmAVVihOAPaPMgsCBI0AV
sWeSMh8iPYwsAveFhMH7cEz/N7xFVDjNl4BMD2ZOIP1sQRohAA8eQD0UzaKssGqf
smV3vW1ZFqtKzc4MouDYJjtovvbqbNAF1kywqRaaGXVui2FNUy2iACkCMUIPVGOA
QSs6Hz7reFlq4oYxpzldYrsVAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQUhTkiUckh
yp9RnbkRxagKd9/jVMQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTVCMzU4L0NFN0Y4RUU0RjExNDExRjA5NkNENTU0RDRCNkY1NkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE1QjM1OC9DRTdGOEVFNEYxMTQxMUYwOTZDRDU1NEQ0QjZGNTZCQy9oVGtpVWNr
aHlwOVJuYmtSeGFnS2Q5X2pWTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAit4MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAJHoDANBgkq
hkiG9w0BAQsFAAOCAQEArAMhwZZeCWq26L1MWNkdld4BNKQK00u3xeyyNFiNadKz
AiTRMFA4+Vs8IZfdMwvqT6OhyPNsuMtGP1nVR2EFaclD91/9ptHVpUAA+pRzAMbu
blJbOK6rcl3xlbxWeAwPjUbHFW9r3Xjw6iwDOfKyoZHH4XSADFleFfuf/LSCqXPV
7ToUVxM3llzWP/4gsR8xh9dpy2Tva6CoDK2QVr12nXRR1fS8fHyvI8vxPGIdCG5a
5HNeM+yUGSa2iqzqr+Q0//s/jCrKM2hVFOVBdkCDpVHW7STE0PNi+iB8uXfiojtN
UfhJPqzmTHOGbhQMJDQsAyEGdaZagD2VpUQyOSvtvw==
-----END CERTIFICATE-----
Generated at Wed Jan 21 13:31:46 2026 by rpki-client