This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
File:                     A8hWADTpF_SEBrQEaVALI_OVa10.cer (raw, json)
Hash identifier:          kQg4jtyFB2FgoWIx4VmGb2/OLAJnZVMCGq5rWQtCszc=
Subject key identifier:   03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0277BC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 25 Nov 2025 06:17:20 +0000
Certificate not after:    Wed 30 Sep 2026 00:00:00 +0000
Subordinate resources:    AS: 151615
                          IP: 103.238.154.0/23
                          IP: 2401:1920::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 10:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161724 (0x277bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 25 06:17:20 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=A91A98E5, serialNumber=03C8560034E917F48406B40469500B23F3956B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:e0:07:24:6e:ed:2c:53:63:91:72:a9:fd:
                    bd:a1:f5:54:cc:77:6d:f3:49:6d:df:1b:15:3b:52:
                    ac:42:54:0b:4f:27:0a:4d:fb:f2:9c:38:9e:7c:92:
                    91:e5:ad:6f:00:59:a7:af:3e:85:4f:d4:41:f2:b9:
                    eb:07:f1:40:dc:05:db:52:72:ab:35:57:b5:44:dc:
                    3c:fa:ff:3f:76:80:f9:b1:68:e5:a5:03:28:c7:45:
                    a6:38:cb:2c:f2:00:2a:30:d9:52:c2:cb:b1:7e:4c:
                    6c:8a:8d:6d:0d:69:fa:ed:3e:4e:3f:e5:e0:c9:88:
                    9f:62:f5:b4:7e:8c:07:58:5a:f1:7b:87:50:1d:75:
                    76:e7:3c:71:db:a9:90:ba:2f:8e:95:76:20:e2:e2:
                    9e:72:ca:0b:7c:36:31:53:a3:c3:7f:57:dc:e0:c1:
                    5f:35:62:28:ee:1f:ea:52:17:80:3e:53:0d:f4:d2:
                    47:b9:b9:f0:6d:52:f7:c8:e9:18:d7:a3:e1:92:7c:
                    d9:ba:e2:a7:24:20:3d:f2:18:c3:cc:88:d1:86:2d:
                    da:55:ca:34:21:13:37:c2:8d:53:cd:73:6f:91:16:
                    17:5f:d0:52:6b:8d:f1:e9:42:fa:52:ef:1e:92:ef:
                    0a:9f:40:73:05:f7:7b:7a:6f:ca:fa:a2:da:05:84:
                    64:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151615

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.154.0/23
                IPv6:
                  2401:1920::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:e5:d9:a9:4d:2c:60:01:68:51:69:ba:16:a3:78:6a:2d:26:
         82:2d:28:fc:99:48:35:38:dd:55:2e:e8:9d:eb:12:61:be:e5:
         72:a5:54:b0:b4:1a:9f:64:7b:9e:27:ff:dd:5d:92:45:25:6a:
         62:68:a1:59:a7:f9:6a:8e:7e:b8:3e:6a:07:30:0a:9d:6c:98:
         60:3f:57:93:68:51:6e:0f:d3:bb:f3:d5:e2:1f:12:46:0e:85:
         5c:85:bc:3e:f9:2c:00:25:cf:a0:a3:68:13:75:42:62:85:f7:
         83:02:4d:ac:2c:57:ad:8b:39:5b:53:b4:97:bc:88:e9:e7:35:
         eb:93:d6:e3:11:1a:4d:36:bb:ab:9f:25:13:55:d0:69:13:96:
         61:35:fe:3e:eb:18:2c:f6:ba:08:b4:b4:97:75:0c:14:a9:ba:
         d3:c9:f3:04:77:65:94:05:89:31:8f:52:6d:53:27:2f:26:d5:
         f0:36:ff:86:62:90:f5:ce:23:33:56:91:b7:af:b1:fe:6c:f1:
         2e:b6:4e:ed:b5:75:30:c1:a5:7f:67:69:ab:6c:2b:54:83:3a:
         6d:de:ee:eb:c8:40:96:54:ea:7c:0d:be:c0:e8:79:78:c5:86:
         66:18:13:6f:08:e2:17:42:f2:ac:00:c3:d7:3c:eb:1d:b8:06:
         37:a4:14:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:27:32 2025 by rpki-client