This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
File: AryISFcqsaDRBj5XuCIPK1LWvec.cer (raw, json)
Hash identifier: 5Ha2BP/dTDV2f23kgEgSNtXX1cZxwgfqamjSdkEDoQ0=
Subject key identifier: 02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027E27
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Dec 2025 02:39:25 +0000
Certificate not after: Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources: AS: 154170
IP: 202.6.194.0/23
IP: 2001:df6:e40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163367 (0x27e27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 15 02:39:25 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=A9153B58, serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fa:d0:09:5b:d6:55:1b:77:bb:a1:eb:7a:62:
9c:56:be:53:e1:e3:89:ac:84:d7:97:2e:4c:aa:e1:
15:b5:eb:11:01:c4:ba:5d:e2:a7:43:42:41:18:9a:
36:8c:47:cc:a7:f1:f2:4a:33:7e:89:bd:db:3c:ca:
53:6e:59:8d:a0:2d:fc:7e:30:04:e8:50:64:06:c7:
60:2e:21:a0:aa:f6:10:c7:e7:df:a8:a8:37:9c:8b:
73:61:37:71:d8:07:5f:df:2a:6d:ac:26:08:1f:4a:
59:f0:1c:e8:5a:3c:f9:94:31:fd:d6:b5:57:f7:c5:
2c:2c:cb:35:47:83:ce:81:71:6c:56:bb:3e:2b:40:
de:81:f3:ad:82:ec:a5:07:c7:d2:f5:76:d1:55:09:
e9:b6:19:7b:00:44:da:97:ce:47:13:c3:5f:52:8d:
40:92:20:63:d8:dd:29:e1:0d:fc:d9:91:70:68:a4:
e7:f5:21:94:23:58:58:c2:f8:2f:99:b6:26:8d:2c:
54:0d:69:1d:b6:f7:cb:c5:c3:e2:96:65:10:43:5a:
33:bd:60:2b:1d:ce:81:4d:29:9b:0f:f6:8e:7c:0a:
fc:6e:67:08:8b:60:90:7d:ea:eb:98:1a:72:04:d0:
13:2a:45:87:56:d3:11:1d:64:3e:36:53:9d:3e:fe:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
154170
sbgp-ipAddrBlock: critical
IPv4:
202.6.194.0/23
IPv6:
2001:df6:e40::/48
Signature Algorithm: sha256WithRSAEncryption
14:74:bc:b2:6a:8f:2f:c6:55:00:cc:64:3c:09:53:18:66:41:
aa:9c:6f:d0:25:72:df:da:f0:e5:7c:43:28:78:c8:35:03:e5:
96:17:b6:5b:77:01:dc:cd:a6:99:11:fe:ac:89:72:a6:2f:d8:
a6:38:3b:79:33:0e:c8:6d:1c:61:54:ed:8b:f0:59:45:30:af:
be:a8:7e:bd:6c:5f:68:1b:8a:b3:1b:99:28:30:ae:3a:31:07:
7f:09:82:99:ea:e4:2a:7c:71:bd:02:2d:ef:59:ff:6c:26:a9:
49:4e:0b:fc:e6:d4:87:a9:28:90:f2:23:af:8b:0a:0c:ae:85:
62:87:10:c0:9d:36:95:e5:66:2e:6e:ca:4a:66:1a:a6:81:9e:
04:1c:a7:37:d0:46:d0:ae:6d:f4:4f:4e:07:dd:7d:0b:5e:a4:
82:f1:6f:85:22:ac:94:a1:d2:02:c5:90:3b:e3:16:fe:b1:47:
32:f7:67:6a:f3:e7:38:fb:92:97:e5:9e:59:9d:66:1b:3e:74:
9e:2e:ae:b5:48:9c:20:5a:b0:db:71:3b:6e:02:cb:a5:c5:19:
3e:80:4f:43:40:5c:e9:3c:eb:e9:1e:2e:70:2f:9e:fc:70:1e:
3d:83:cf:7c:d7:89:ac:59:1c:47:6d:a2:41:25:a1:f4:24:6a:
d2:66:64:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:40:29 2025 by rpki-client