This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer
File:                     15_6dyN1rrQCGo_1GC_qqjJZKP0.cer (raw, json)
Hash identifier:          OpClBqNDZAP8qJwx+9Tl9yE42UTXWL2pae55fDJSz4M=
Subject key identifier:   D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02881A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 23 Jan 2026 09:34:52 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 18395
                          AS: 23672
                          AS: 56196
                          IP: 103.155.182.0/23
                          IP: 203.78.165.0/24
                          IP: 2404:9980::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165914 (0x2881a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 23 09:34:52 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=A91A95AB, serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:c5:d0:46:c7:35:da:e8:b8:8f:bb:9f:fe:
                    83:b2:c4:5c:97:06:00:77:7e:a1:ef:6e:e4:22:df:
                    c7:39:12:ee:cb:db:2b:55:85:ca:57:58:85:d2:af:
                    9b:34:25:e0:7e:9a:6f:df:03:33:0a:32:f9:79:f1:
                    65:96:07:b8:0e:0b:6b:5a:ae:73:20:b9:dd:e2:3b:
                    ca:3b:07:d2:45:ac:6a:f5:a0:2c:6a:a3:56:4a:09:
                    a6:17:4a:11:45:e7:71:60:33:79:50:74:98:47:b4:
                    42:3e:17:a0:6c:a6:d2:59:75:65:78:c1:5e:16:02:
                    31:85:85:7d:3a:8b:d3:f8:8a:e2:2e:10:ba:19:5d:
                    dc:6a:af:ad:e5:db:36:63:52:00:65:91:d7:c0:b0:
                    6b:22:cb:e9:b9:15:28:7d:c6:3c:1f:ba:41:b1:1f:
                    5a:e7:43:d4:06:de:10:00:37:25:c5:b7:d9:f2:9f:
                    44:e7:b6:6e:86:15:23:e6:5c:45:b6:81:69:89:17:
                    e4:1a:c0:34:f7:8a:81:e5:e7:99:76:33:d0:ac:54:
                    b1:64:ef:8e:ed:e0:6b:6f:40:2e:69:36:0c:2b:63:
                    49:fc:82:a4:26:2a:c6:ac:b8:21:fa:7d:f9:c0:5c:
                    d8:1a:10:48:3e:ea:72:32:e5:e4:24:43:62:b8:6b:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18395
                  23672
                  56196

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.182.0/23
                  203.78.165.0/24
                IPv6:
                  2404:9980::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:38:22:ce:25:ae:99:37:28:bb:d2:57:a1:cf:d2:ff:a6:b7:
         5d:7b:bc:7c:45:68:2a:9e:1b:84:74:86:dc:78:2e:ee:70:e8:
         3c:df:4e:b1:91:73:0a:1b:f1:dc:45:bf:9d:f8:73:4e:f3:51:
         dc:94:c1:69:a4:23:9f:5d:00:1e:6f:ad:3f:3c:9c:d7:d4:db:
         6b:d8:97:2c:2a:73:78:cd:98:1c:01:03:d8:97:49:87:38:31:
         c3:c8:09:12:4e:4e:77:f6:59:8e:a4:2f:f2:aa:6a:07:35:a3:
         0f:a0:55:cb:b6:98:8e:5c:51:47:f0:76:95:07:22:dc:69:35:
         bc:d7:10:26:a2:97:9c:52:d9:5d:cb:10:90:d8:41:9b:1e:d4:
         5c:77:fa:80:19:13:0d:1f:6b:0b:5f:6c:8e:8b:02:38:93:aa:
         ec:d8:ee:b2:bf:32:dd:09:aa:b2:0a:b1:1e:73:f8:49:6e:fa:
         db:5c:4c:09:d1:68:d7:8a:62:f0:1d:07:dd:cb:0c:b2:09:62:
         d2:cb:50:ea:84:00:b1:35:a2:7a:4c:c1:8c:7f:22:26:36:3d:
         b0:e2:b5:77:57:73:06:b3:52:91:f9:54:79:de:9a:f0:28:37:
         37:c4:95:e5:cf:af:26:5f:3a:31:e5:3f:47:f8:09:e9:69:b2:
         98:c6:82:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:24 2026 by rpki-client