This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer
File: JxcwkTdorwE4ujkDJNqUMcQJukQ.cer (raw, json)
Hash identifier: pVo4AH/Ay1mU6pzjDkdF78QZoBz5zbdQdJod8x1kG5I=
Subject key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027D0C
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 09 Dec 2025 14:19:41 +0000
Certificate not after: Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources: AS: 150429
IP: 103.14.144.0/23
IP: 2001:df1:8b40::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163084 (0x27d0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 9 14:19:41 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=A916091A, serialNumber=271730913768AF0138BA390324DA9431C409BA44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:81:fb:45:8f:07:dc:6a:da:3e:4e:d7:8d:
34:45:4e:a6:58:e2:fb:1e:63:e2:4e:da:7e:bd:5d:
40:20:c5:f3:86:7f:01:4b:ad:5c:d3:ba:86:14:86:
b6:c7:78:c1:b2:01:de:bd:de:85:bc:d5:ed:45:92:
66:41:81:95:e9:53:22:25:7c:7c:77:8b:5f:03:50:
2d:85:ad:fc:aa:c5:0e:59:20:ce:56:61:b7:75:8f:
76:58:ad:86:ab:40:92:bc:e5:45:18:9f:cc:2a:9e:
8d:dd:9f:63:04:33:7f:77:f5:96:52:1a:53:e7:0e:
88:1d:fc:49:ae:f5:cd:cc:1f:92:1d:d4:10:fd:0c:
10:58:8f:0c:5d:d2:93:73:4c:02:c6:61:dd:b3:3d:
c1:4d:0a:ce:8f:09:c6:af:7f:cb:16:ac:23:51:c7:
9e:3d:0c:82:69:d6:98:47:1c:14:10:6b:ea:a3:a3:
d3:3d:60:fe:66:43:97:00:5c:4e:df:b3:54:f8:e9:
4c:67:03:55:4d:c2:4e:88:1d:89:b8:35:ea:fb:d4:
61:02:4d:48:d0:0c:d3:e9:0b:98:4d:40:9a:43:24:
97:6b:e9:20:5b:84:ca:c6:01:f5:39:ad:94:60:b0:
94:87:3f:89:13:d5:a0:e3:59:a1:87:69:60:18:c1:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
150429
sbgp-ipAddrBlock: critical
IPv4:
103.14.144.0/23
IPv6:
2001:df1:8b40::/48
Signature Algorithm: sha256WithRSAEncryption
97:91:3f:93:5d:49:73:e1:ec:03:a3:64:73:00:3f:6b:35:4d:
80:7f:10:8a:3c:51:09:89:fa:52:4e:ec:cd:bb:85:7d:06:6e:
5c:73:94:07:70:bf:a6:a7:d9:0a:d0:a0:e0:98:24:3f:8c:b4:
60:7b:7a:87:8b:1a:3c:b4:c9:09:dd:b0:36:57:ad:33:10:80:
ed:a3:0a:a2:e3:d7:f8:2a:c3:48:2b:68:de:ef:2e:2d:ea:71:
db:2d:80:fb:61:ae:26:2b:e3:5e:2a:62:fe:04:dd:ef:bc:0d:
5e:2f:32:da:6c:a1:ed:34:4c:75:a0:b1:4d:94:24:a8:d8:7f:
0d:d5:4a:2a:b9:c4:b6:cb:02:e3:02:b0:53:88:b3:b3:f4:3d:
6a:27:01:b6:a2:92:da:75:2d:e1:85:1f:31:9b:cf:98:e7:fa:
6c:96:8e:78:af:ac:4b:2c:32:8f:6a:6c:c5:c2:f4:2b:8b:d5:
6c:20:df:e4:87:c5:fd:6e:80:90:55:f5:99:5d:eb:78:90:75:
c0:0a:28:3d:6d:b9:82:bb:3f:a9:78:7d:d2:9a:96:0f:1a:fb:
5e:5f:ba:6e:40:35:dc:b0:75:3a:cd:c1:9c:2e:7e:95:b6:29:
5d:c3:02:c3:bc:f5:31:33:34:59:49:26:a4:c4:e6:b0:b5:ad:
ba:76:b2:ac
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAn0MMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTIwOTE0MTk0MVoXDTI3MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkw
MzI0REE5NDMxQzQwOUJBNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9AoH7RY8H3GraPk7XjTRFTqZY4vseY+JO2n69XUAgxfOGfwFLrVzTuoYUhrbH
eMGyAd693oW81e1FkmZBgZXpUyIlfHx3i18DUC2FrfyqxQ5ZIM5WYbd1j3ZYrYar
QJK85UUYn8wqno3dn2MEM3939ZZSGlPnDogd/Emu9c3MH5Id1BD9DBBYjwxd0pNz
TALGYd2zPcFNCs6PCcavf8sWrCNRx549DIJp1phHHBQQa+qjo9M9YP5mQ5cAXE7f
s1T46UxnA1VNwk6IHYm4Ner71GECTUjQDNPpC5hNQJpDJJdr6SBbhMrGAfU5rZRg
sJSHP4kT1aDjWaGHaWAYwdQNAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUJxcwkTdo
rwE4ujkDJNqUMcQJukQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTYwOTFBLzQyMDQwNTdFNjY2RDExRURCNTU2NTc3N0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE2MDkxQS80MjA0MDU3RTY2NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rk
b3J3RTR1amtESk5xVU1jUUp1a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAkudMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZw6QMA8EAgAC
MAkDBwAgAQ3xi0AwDQYJKoZIhvcNAQELBQADggEBAJeRP5NdSXPh7AOjZHMAP2s1
TYB/EIo8UQmJ+lJO7M27hX0GblxzlAdwv6an2QrQoOCYJD+MtGB7eoeLGjy0yQnd
sDZXrTMQgO2jCqLj1/gqw0graN7vLi3qcdstgPthriYr414qYv4E3e+8DV4vMtps
oe00THWgsU2UJKjYfw3VSiq5xLbLAuMCsFOIs7P0PWonAbaiktp1LeGFHzGbz5jn
+myWjnivrEssMo9qbMXC9CuL1Wwg3+SHxf1ugJBV9Zld63iQdcAKKD1tuYK7P6l4
fdKalg8a+15fum5ANdywdTrNwZwufpW2KV3DAsO89TEzNFlJJqTE5rC1rbp2sqw=
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:29 2025 by rpki-client