This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer
File:                     7IKxn5B5ht6zu4AtInPQNNFBSy0.cer (raw, json)
Hash identifier:          WUMGfhh4DgsHta8KzAYpo80N39WNyfPBpAhN/FU7EVg=
Subject key identifier:   EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028141
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 28 Dec 2025 14:18:45 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 139865
                          IP: 103.146.94.0/23
                          IP: 2001:df2:5880::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164161 (0x28141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 28 14:18:45 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A91EC3CA, serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:98:35:62:60:bc:f9:3d:91:0e:01:35:fc:37:
                    37:b5:cf:4f:9b:7a:b2:5a:b9:d6:24:0b:c1:a0:4c:
                    39:a4:b5:05:84:93:99:f5:d8:ba:94:10:39:c0:c7:
                    53:ba:d4:33:5d:b5:8c:1b:c4:92:b5:a2:65:84:8d:
                    62:85:30:64:0f:1a:ea:f2:4f:5d:00:9c:26:7f:d0:
                    01:93:a5:fc:ce:82:64:20:5f:d1:8c:51:63:b4:33:
                    f6:4d:0f:8d:69:19:22:44:f9:8b:1c:ef:bb:d1:10:
                    81:a2:67:b3:a5:8f:79:de:37:04:84:cc:70:90:e1:
                    39:11:c3:32:79:0d:ff:67:39:cc:e1:d5:30:3f:40:
                    ee:c4:a5:f9:59:6b:55:bd:a1:5b:bf:90:0d:52:eb:
                    84:23:ff:c9:f9:9c:63:11:16:d1:bb:6b:19:3c:25:
                    15:38:a1:05:50:23:75:48:18:da:8a:fd:15:06:50:
                    4a:c9:37:b2:09:75:f2:5f:96:5b:92:7d:e3:a5:8c:
                    df:ec:47:59:49:24:7e:0f:f6:4d:25:b1:2d:3a:07:
                    53:c1:ea:c0:1b:70:99:ae:21:9f:d3:8d:1f:c1:37:
                    e5:42:d8:9d:34:42:cf:fb:30:6d:b5:18:b2:6a:8f:
                    37:ac:49:e7:2c:76:31:41:e4:32:59:16:06:d2:cf:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139865

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.94.0/23
                IPv6:
                  2001:df2:5880::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:65:4f:e2:75:25:47:15:08:29:32:4a:d5:8c:a7:37:e3:ff:
         04:1a:79:cc:1e:05:9d:4f:d0:25:ac:7b:63:fb:9b:6a:56:5e:
         10:62:9c:6d:86:1b:01:4b:14:b8:91:a9:b9:1f:0e:9a:71:c3:
         40:20:13:a7:f0:77:e4:56:8b:a5:5e:7c:22:69:13:46:95:33:
         41:9e:2c:10:4c:19:b3:a4:d4:6c:cd:f8:66:7f:92:5f:26:51:
         a6:ec:cf:89:f0:7c:fc:d7:1c:1f:55:94:28:33:84:14:5c:0e:
         4e:30:13:e0:7e:d1:93:95:84:ea:65:0c:1a:a9:4e:8c:54:45:
         4b:12:54:5e:4e:fa:f4:46:37:41:0f:d5:c4:51:55:51:f5:43:
         67:c3:7c:fc:17:63:50:e2:48:e8:08:69:5f:b8:80:3b:0d:cc:
         bc:d6:4a:85:a4:00:83:e7:38:d1:b4:bd:30:84:85:d5:eb:be:
         e9:38:9a:2d:b6:81:f9:e4:b7:0c:83:52:c8:2b:8b:20:de:9b:
         23:ad:3a:87:df:8d:79:f0:67:ea:e7:40:7f:ce:0e:21:58:33:
         64:a8:e5:fb:34:90:f5:03:72:6e:10:3d:88:ff:bd:a3:30:7b:
         50:e6:b1:db:b7:67:59:c2:dc:c6:5e:67:2a:0b:ae:b9:5c:54:
         e8:a6:04:a9
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAoFBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTIyODE0MTg0NVoXDTI3MDMwMjAwMDAwMFowRjERMA8G
A1UEAwwIQTkxRUMzQ0ExMTAvBgNVBAUTKEVDODJCMTlGOTA3OTg2REVCM0JCODAy
RDIyNzNEMDM0RDE0MTRCMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDamDViYLz5PZEOATX8Nze1z0+berJaudYkC8GgTDmktQWEk5n12LqUEDnAx1O6
1DNdtYwbxJK1omWEjWKFMGQPGuryT10AnCZ/0AGTpfzOgmQgX9GMUWO0M/ZND41p
GSJE+Ysc77vREIGiZ7Olj3neNwSEzHCQ4TkRwzJ5Df9nOczh1TA/QO7EpflZa1W9
oVu/kA1S64Qj/8n5nGMRFtG7axk8JRU4oQVQI3VIGNqK/RUGUErJN7IJdfJflluS
feOljN/sR1lJJH4P9k0lsS06B1PB6sAbcJmuIZ/TjR/BN+VC2J00Qs/7MG21GLJq
jzesSecsdjFB5DJZFgbSz97lAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQU7IKxn5B5
ht6zu4AtInPQNNFBSy0wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUVDM0NBLzgxMzg2MDQ2MjE4MzExRUE4Q0I4NDczN0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFQzNDQS84MTM4NjA0NjIxODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVC
NWh0Nnp1NEF0SW5QUU5ORkJTeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiJZMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBZ5JeMA8EAgAC
MAkDBwAgAQ3yWIAwDQYJKoZIhvcNAQELBQADggEBADNlT+J1JUcVCCkyStWMpzfj
/wQaecweBZ1P0CWse2P7m2pWXhBinG2GGwFLFLiRqbkfDppxw0AgE6fwd+RWi6Ve
fCJpE0aVM0GeLBBMGbOk1GzN+GZ/kl8mUabsz4nwfPzXHB9VlCgzhBRcDk4wE+B+
0ZOVhOplDBqpToxURUsSVF5O+vRGN0EP1cRRVVH1Q2fDfPwXY1DiSOgIaV+4gDsN
zLzWSoWkAIPnONG0vTCEhdXrvuk4mi22gfnktwyDUsgriyDemyOtOoffjXnwZ+rn
QH/ODiFYM2So5fs0kPUDcm4QPYj/vaMwe1Dmsdu3Z1nC3MZeZyoLrrlcVOimBKk=
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:49:09 2026 by rpki-client