This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer
File: 7Ubg2mfUm_C8p7L9IOxIu86EepE.cer (raw, json)
Hash identifier: kqg1sW8zVkZKTaYc5dS8620aur75fBZQAriNk4n+ugI=
Subject key identifier: ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027EEF
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
caRepository: rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 17 Dec 2025 13:00:20 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 154363
IP: 2001:df6:7640::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 14:26:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163567 (0x27eef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 17 13:00:20 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A915E38A, serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:b4:dc:66:7d:7f:62:f4:2b:00:b8:02:f1:
c6:2d:ab:ac:2a:91:57:84:78:22:cd:9e:65:b9:68:
a9:a2:8f:6c:09:61:06:92:27:59:c6:5f:7a:f4:1a:
87:4f:6d:bf:5d:a7:3d:70:f2:47:da:75:f2:be:db:
4e:f8:fb:52:3f:24:b1:40:3d:bb:ec:cf:6c:a0:bb:
c6:10:a3:6f:ff:11:ea:a5:03:75:4a:2d:56:fc:bc:
e4:93:6d:3a:cf:5c:c7:3f:bf:5b:8e:2e:53:3d:4f:
aa:78:10:55:c4:30:f4:ff:11:b2:3c:05:a8:7d:de:
4f:5a:08:e8:34:3b:c7:6c:a2:0c:b5:d5:46:dc:d4:
ce:cf:2a:c7:b4:14:65:57:27:d9:a3:3a:b0:f8:2a:
e6:23:2f:2a:a0:20:35:f9:60:c2:61:d9:22:11:b6:
24:ca:1e:c2:b5:b4:b0:a6:be:00:f2:84:f2:10:41:
07:9b:7a:f8:39:35:99:67:97:a2:66:70:9f:ff:a9:
3b:86:be:9d:c1:31:4a:a9:cf:7a:0a:ca:b2:f5:68:
47:88:8f:7a:7e:9e:08:cd:8c:ad:40:26:ea:ed:69:
ec:b3:4f:65:18:d9:91:b8:01:5d:5f:fd:f7:94:91:
cf:5e:90:e1:25:22:b0:95:9d:a1:e3:c9:ee:78:b4:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154363
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:7640::/48
Signature Algorithm: sha256WithRSAEncryption
1b:12:7f:c9:cd:7a:80:55:95:b6:66:68:09:c9:69:84:b8:b9:
24:4c:a9:17:d9:67:bf:d5:45:06:78:1c:6f:55:68:ef:a6:76:
f7:54:c2:86:dd:1f:0f:f5:d0:92:b4:e7:62:9f:69:c7:a4:b4:
9d:7d:4d:ca:1a:80:b2:79:59:17:09:95:e1:a6:f6:7b:fd:7d:
5d:f6:1a:9d:2c:3c:e1:dc:af:73:a3:d1:57:a4:96:76:0a:91:
ca:a6:19:1b:e3:26:ef:cd:d7:35:82:44:93:f9:ea:10:2e:3b:
cb:4a:cb:4d:9d:51:84:5a:c0:ec:bc:d2:b9:47:53:80:eb:e5:
c8:55:95:e9:ea:ab:d0:db:d2:00:4f:66:40:48:82:0c:6b:d3:
78:65:c4:63:12:37:a8:0b:3d:de:5a:ac:7c:dc:bd:61:5b:3c:
4b:bd:ee:b1:fc:96:21:ae:0a:65:c0:8e:bf:d9:2f:d2:00:9e:
89:2b:43:80:ea:83:f9:e7:b2:e0:6f:d8:84:7c:ac:ed:05:91:
5b:39:72:3c:01:29:68:a3:63:f6:82:0e:45:e1:a7:21:84:78:
ec:40:ea:5f:eb:59:cd:42:1a:ce:5c:a5:8f:3a:26:83:0a:f1:
39:b8:9c:a9:42:42:c2:f3:83:81:1d:0d:f7:21:a0:60:94:d4:
0e:37:04:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:06:29 2025 by rpki-client