This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
File:                     8qiUEKVLBHj2ArcxIAUVHClcc3k.cer (raw, json)
Hash identifier:          2FS+LWeLzqmP23IKSFgciMSJ7MOeqkA2X3980eYDxm0=
Subject key identifier:   F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0285DB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 13 Jan 2026 13:20:07 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 134973
                          IP: 27.54.148.0/22
                          IP: 103.204.84.0/22
                          IP: 2406:4840::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165339 (0x285db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 13 13:20:07 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:97:74:a4:ba:90:30:c9:56:6c:52:a5:4d:
                    e4:31:9c:75:68:17:50:92:75:64:fb:32:54:e8:6f:
                    c4:38:7d:97:6a:6f:35:e2:61:09:40:3b:c0:e7:b3:
                    e9:ce:b9:09:73:30:c0:c7:45:be:68:47:d5:9e:ae:
                    27:a5:ed:26:c5:3a:55:0e:4f:77:96:e4:20:6f:90:
                    ef:9a:c9:21:49:2f:8b:c1:c8:d8:b9:08:57:b3:9f:
                    56:02:8c:59:38:f2:0d:7d:ac:e7:34:47:9d:58:6e:
                    09:e7:94:39:32:f3:fc:01:a8:97:09:9b:83:0e:f0:
                    13:b2:1c:84:cd:2f:39:8e:02:98:40:6d:7e:e8:c1:
                    d0:31:26:65:13:56:bf:8e:84:12:9f:b9:ef:dc:c5:
                    62:4e:7c:2a:ac:12:63:b2:94:f9:11:73:33:0a:01:
                    3a:3a:72:4a:c3:f1:01:e7:0c:fb:2a:0c:43:2a:7e:
                    aa:a8:9f:b1:1a:1f:dc:ac:be:55:59:ef:7d:47:dc:
                    3e:76:a9:bf:7e:97:70:80:5e:f5:68:4d:e5:ab:f4:
                    b7:fb:2b:10:77:3f:f3:ab:35:24:57:98:6a:96:b5:
                    4d:c7:f0:62:df:56:9d:d8:df:c2:58:d7:43:a7:a9:
                    07:28:e6:6e:c0:af:1b:dd:94:49:6e:3e:f1:d5:5c:
                    31:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134973

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.148.0/22
                  103.204.84.0/22
                IPv6:
                  2406:4840::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:99:19:1f:d6:94:16:d8:5c:f4:07:16:0d:c7:ba:8d:50:bf:
         bf:5a:77:71:01:0c:cb:78:1d:82:a9:94:e7:56:63:ea:c2:61:
         9c:8e:ea:67:65:a1:7b:99:40:f3:60:d8:cf:fc:50:dd:a8:fd:
         8f:ea:6f:ef:08:44:99:cb:30:d5:2c:b7:d1:c0:93:5b:69:69:
         d3:20:1b:f7:3b:ae:3a:16:bc:d5:51:96:fa:49:74:25:8a:5c:
         a8:a0:c2:97:b4:c0:1a:56:0d:6f:14:c5:28:73:be:a2:d7:08:
         a6:7a:9b:70:da:42:28:b8:99:8f:79:13:40:5f:37:86:d6:6f:
         e8:9f:0f:d3:2e:50:35:3f:03:5b:14:92:cd:d5:0e:59:33:b8:
         13:86:89:d6:96:6b:b4:c8:f6:49:26:6d:eb:28:48:32:e5:eb:
         72:3c:5a:a8:3f:32:40:f0:a5:36:ee:c8:a2:8a:92:f5:ce:8e:
         88:80:e1:99:10:65:a5:aa:67:26:5f:41:36:42:27:16:48:5d:
         ca:fb:04:d4:9b:2b:6b:e4:5a:93:4d:60:5c:95:1f:f4:5d:a0:
         60:a0:4e:32:50:9b:af:a7:73:55:b1:98:45:5f:92:ee:1f:d9:
         49:3b:f4:e6:30:c9:ef:f4:0c:e1:4e:e4:32:79:0d:c4:f3:7d:
         ac:9e:14:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 01:13:42 2026 by rpki-client