This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOaM6FoDjZ4wcEODfKbmsaZglu4.cer
File: cOaM6FoDjZ4wcEODfKbmsaZglu4.cer (raw, json)
Hash identifier: 7thje6CGQX9zONMw1NutEtaMqqtPFdqKaZQK0lAXOQY=
Subject key identifier: 70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 027E70
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 15 Dec 2025 21:43:46 +0000
Certificate not after: Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources: AS: 139714
IP: 103.143.250.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 14:26:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163440 (0x27e70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Dec 15 21:43:46 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=A91F6ADE, serialNumber=70E68CE85A038D9E307043837CA6E6B1A66096EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:80:3e:de:1f:e1:32:5b:b5:0d:bc:24:41:
85:15:d3:05:c1:ce:38:cb:cb:f7:63:40:ee:d8:60:
14:eb:ec:92:a2:69:5d:31:79:19:67:14:e4:c5:21:
75:7b:a1:b5:83:03:6c:3c:af:8f:59:f0:59:ff:69:
02:f8:58:82:1f:c7:a5:9d:a4:78:8b:ee:20:6e:3e:
9a:b8:c6:5b:e1:71:10:b0:5f:c2:33:7e:a9:f1:09:
e5:09:a3:8c:aa:03:80:b1:6f:16:20:c8:5e:c8:3d:
0c:cc:4e:1c:ca:ab:41:46:70:4f:52:f2:5c:7b:c0:
18:3f:4b:82:b1:97:cb:3c:80:98:e4:4a:7c:f2:23:
53:77:d8:6b:d3:13:29:e5:b7:9a:3a:31:91:b2:e3:
25:27:b0:93:d5:4e:29:31:83:74:cd:52:c5:67:fc:
ed:7f:f0:96:74:55:62:07:2f:dd:17:9c:47:95:59:
83:0a:ac:cf:84:c6:28:76:b2:81:98:e5:9b:3a:82:
fa:46:54:cf:f8:59:cf:4d:99:ac:48:b7:1f:b8:7c:
3e:7f:31:0d:0f:82:6a:4a:9e:eb:32:2d:1d:bf:28:
2d:be:86:86:61:e0:8a:c9:c8:04:48:e7:88:cc:5e:
a3:ae:cd:34:ea:57:13:74:03:14:c7:91:a3:01:86:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E6:8C:E8:5A:03:8D:9E:30:70:43:83:7C:A6:E6:B1:A6:60:96:EE
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6ADE/28739D3A41DF11ECA3DC2F85C4F9AE02/cOaM6FoDjZ4wcEODfKbmsaZglu4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139714
sbgp-ipAddrBlock: critical
IPv4:
103.143.250.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:3d:24:a8:3c:05:b5:92:f0:86:bf:34:30:12:f8:ec:b6:3f:
95:82:ea:57:ba:6b:73:ca:89:63:c9:22:77:00:70:df:83:b6:
77:6a:60:c5:4c:2d:dd:12:5c:75:ba:63:22:96:d1:df:db:98:
21:fb:cd:a1:cb:63:6f:13:26:e8:3e:90:4d:a2:8f:cd:f0:0d:
a6:16:3a:17:fc:86:f6:a8:7a:97:dc:cd:5f:09:51:c3:5c:2b:
a2:97:81:8a:b0:2c:8e:92:e5:47:d6:d2:0a:4d:ff:46:4d:35:
f2:b3:d9:90:6b:1a:d1:c0:b0:e9:45:77:6c:08:5c:ab:f8:98:
5c:2d:f3:b1:29:20:7e:da:31:1b:8d:3c:06:03:9d:1f:a5:13:
87:3e:1b:03:6a:18:86:f3:fd:f7:5d:c4:35:13:33:c6:fb:09:
1d:b3:d9:e8:98:86:d6:7b:c1:c7:c4:af:ed:7d:04:cf:40:31:
85:15:fe:9c:5e:78:c9:0b:79:26:ea:c2:3f:20:47:a5:86:e6:
1a:a6:cd:09:72:bf:d4:31:65:24:ce:4d:fd:bf:27:f4:06:70:
46:cc:89:44:7f:dd:f8:da:39:60:12:bf:4e:1c:28:b3:de:4d:
ad:59:b8:4f:d0:8a:90:2b:59:d0:8f:f2:98:10:d9:26:53:49:
c0:26:38:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:00:50 2025 by rpki-client