This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dan-nQ2Pn9jFksaB04JvojSPDU.cer
File:                     7dan-nQ2Pn9jFksaB04JvojSPDU.cer (raw, json)
Hash identifier:          X/SUfnvIILj9hweMtsETsnrmU8uPEoh+4E5BAphadqE=
Subject key identifier:   ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0275DF
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 18 Nov 2025 12:26:24 +0000
Certificate not after:    Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 133476
                          IP: 103.75.212.0/22
                          IP: 2407:5680::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 12:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161247 (0x275df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 18 12:26:24 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=A911AB93, serialNumber=EDD6A7FA74363E7F63164B1A074E09BE88D23C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c1:db:e2:f5:bc:1b:0a:18:15:c2:e0:eb:7b:
                    c1:86:b5:d6:1e:8b:40:88:7a:ae:d1:50:47:6d:fa:
                    6c:97:c4:d2:cf:e4:4c:c6:76:93:ea:05:ee:35:c7:
                    97:18:6c:d4:64:ba:13:4a:2b:c1:e8:65:ad:73:56:
                    8d:b7:8c:ce:d2:13:57:bc:b4:7c:d8:2d:cd:e8:fb:
                    0e:ae:11:1f:87:93:7a:68:a7:98:cd:d9:5c:09:05:
                    b7:9e:59:0e:a1:1b:2b:08:f1:43:00:2b:59:b5:c0:
                    24:a0:b8:1b:ff:99:80:f8:af:ea:ab:a9:7b:61:54:
                    e4:15:5c:d9:e7:b5:b6:65:31:cd:45:0b:79:16:15:
                    95:56:8f:72:8d:23:64:01:df:fb:7e:02:e5:65:99:
                    c2:db:9a:d4:38:62:6b:a8:6a:37:0e:ed:48:59:64:
                    20:03:a6:ee:d1:a4:5f:69:4a:07:b1:7e:e8:77:de:
                    28:dd:12:22:07:ca:01:47:0a:85:cb:a2:ca:f8:4e:
                    ef:45:e7:a2:bb:32:f7:2c:d4:9c:de:ce:5e:55:0c:
                    4e:2a:f9:5b:59:43:71:84:06:ff:e7:c4:68:f4:5c:
                    6b:6f:a0:4e:5c:ee:c0:de:39:c7:07:6b:49:9d:9a:
                    ee:4f:a6:8f:ed:7a:9e:99:07:03:4a:cf:01:2f:46:
                    41:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D6:A7:FA:74:36:3E:7F:63:16:4B:1A:07:4E:09:BE:88:D2:3C:35
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/7dan-nQ2Pn9jFksaB04JvojSPDU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133476

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.212.0/22
                IPv6:
                  2407:5680::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:3b:a4:bc:ed:74:9c:f7:25:27:4c:31:bc:8d:1b:6b:dd:12:
         0c:15:f0:86:17:88:53:6b:c8:17:c2:5c:52:e9:bf:6a:37:c4:
         69:1e:5d:a9:d4:ea:13:99:bb:a4:d8:35:38:70:1e:92:a8:10:
         81:ea:de:98:0d:7b:79:7e:6e:11:0a:2e:71:a1:f4:49:1f:33:
         fc:da:77:00:f8:48:6d:43:92:0d:9a:2a:5f:b1:f0:cc:52:2e:
         0a:a0:d4:67:a5:2d:a1:e1:f3:f1:8f:45:cd:a7:39:22:8e:24:
         54:d1:55:51:b6:ae:ad:47:47:d0:55:e5:d4:f1:de:e2:51:71:
         3a:ef:ed:5f:fb:87:54:2f:5a:cf:8f:39:c1:e6:f5:34:3d:57:
         18:a5:c3:ae:05:20:8b:40:9c:35:4e:86:d8:a4:38:85:91:0d:
         0a:00:e7:1a:d8:46:05:f9:bb:8e:20:65:97:ae:38:d5:1b:cc:
         5a:14:3b:70:9d:81:36:06:45:5c:5a:91:20:7b:27:2e:2a:bd:
         f9:ca:62:ab:e2:63:0c:b9:a8:03:60:2b:16:76:4a:49:3c:31:
         a3:e7:fe:60:5c:f0:32:1f:c8:34:35:81:23:7d:56:df:48:5a:
         61:f6:4f:a4:f1:0d:cf:e3:16:9b:b8:a2:90:e3:80:21:a6:eb:
         7b:41:28:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:31:25 2025 by rpki-client