This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xwH8WXnzqxZZwZkFuelJyaY7w4.cer
File:                     5xwH8WXnzqxZZwZkFuelJyaY7w4.cer (raw, json)
Hash identifier:          j/BVczkuGWBqUFvsPYxiDYXT7ruTrTZ/rJxQvWQNqMQ=
Subject key identifier:   E7:1C:07:F1:65:E7:CE:AC:59:67:06:64:16:E7:A5:27:26:98:EF:0E
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028169
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/5xwH8WXnzqxZZwZkFuelJyaY7w4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 29 Dec 2025 05:19:18 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 154462
                          IP: 2402:4320::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164201 (0x28169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 29 05:19:18 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A9193C07, serialNumber=E71C07F165E7CEAC5967066416E7A5272698EF0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:21:b0:80:70:03:b2:14:62:e2:75:35:30:d4:
                    8c:3d:c2:2e:45:87:d2:44:91:67:bb:64:7c:20:e7:
                    4b:cd:b9:54:e2:f6:ac:0d:4c:5d:9c:f4:64:94:4b:
                    75:5f:f0:07:12:83:fb:b5:19:a3:14:4b:0a:8c:17:
                    3c:1e:ee:4f:46:5d:09:5d:14:e3:05:e7:9b:2b:fe:
                    67:3e:00:45:a5:23:34:80:84:b9:01:2a:ad:cf:94:
                    52:ff:e8:87:cc:39:99:3c:2e:c8:64:e9:51:8c:6a:
                    b6:e9:42:72:e1:fd:8b:f9:69:3a:31:c3:26:83:df:
                    47:0a:9b:01:d5:eb:90:be:b6:ac:ce:15:d6:b3:2e:
                    48:a3:6d:5d:16:c3:24:c2:c2:74:25:a7:7b:4a:70:
                    3b:1b:0d:43:74:e1:31:52:b5:15:66:5a:0a:aa:33:
                    a9:eb:85:34:8f:c4:39:3c:41:33:9e:d8:8d:1c:5c:
                    ef:47:0e:87:96:ac:2b:3c:7f:c0:8a:b2:93:24:fd:
                    ca:bb:a8:f8:5a:28:05:44:c5:ba:44:99:1a:23:51:
                    2f:4c:02:6f:82:c1:76:25:94:9d:b3:dc:db:4d:4f:
                    90:fc:09:5b:80:c0:71:02:2a:a0:fa:93:a2:37:2a:
                    9b:aa:f6:90:99:90:b5:6a:d2:31:a2:43:53:5a:a2:
                    77:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1C:07:F1:65:E7:CE:AC:59:67:06:64:16:E7:A5:27:26:98:EF:0E
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/5xwH8WXnzqxZZwZkFuelJyaY7w4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154462

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4320::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:7e:e8:bf:17:11:7a:0e:2f:4c:43:df:28:3a:bc:56:8b:0b:
         88:da:12:cf:b2:b1:a9:19:d6:43:b7:f8:e6:65:be:3f:ef:46:
         f5:47:0b:cf:fc:50:96:c3:c8:66:c4:d2:23:d5:e9:03:e9:53:
         aa:55:d8:3a:44:c3:08:a7:d6:8b:b2:8d:ed:40:fe:49:bf:75:
         63:7c:4b:f1:60:53:80:f0:8a:cd:80:e1:9b:30:47:d9:82:91:
         3b:b8:b9:ef:59:b4:01:8b:5d:7e:1d:3f:bd:86:10:de:e1:c5:
         bd:8b:54:18:e5:55:ce:af:9d:8e:2a:7e:34:99:87:36:2f:35:
         3f:7f:5b:f4:f3:09:95:f5:53:da:a0:42:c9:aa:bd:6b:5e:47:
         bd:53:78:1d:c1:55:26:42:3c:02:98:61:5f:e2:60:35:38:8f:
         7f:94:a5:19:a4:1d:61:2d:c4:e4:b5:df:66:b8:bc:66:5d:2a:
         7c:86:ce:37:0f:92:d3:c4:14:36:c5:88:0e:88:2a:8c:82:98:
         95:9a:57:cc:79:a6:82:6e:38:60:a1:34:32:ec:c7:a6:06:13:
         70:82:95:0d:f8:72:17:71:61:59:eb:34:c1:67:a3:59:2d:e1:
         25:20:68:65:7f:7e:56:5a:96:62:fc:4f:e7:ed:0e:64:27:2f:
         f4:2a:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 01:11:42 2026 by rpki-client