This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer
File:                     CB6icKn0s2sOyJai0hSO5Ok-Xys.cer (raw, json)
Hash identifier:          1cC3nPwSX/quZb5Pbr4Q8AlHTa4WlQfy+dNzvhX00gE=
Subject key identifier:   08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027A58
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 02 Dec 2025 01:42:04 +0000
Certificate not after:    Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 147056
                          IP: 103.173.187.0/24
                          IP: 2001:df7:a680::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 06:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162392 (0x27a58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  2 01:42:04 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=A91BB921, serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:7e:7a:b4:5e:ed:87:3c:d7:5c:ca:f6:e0:
                    2f:37:52:f2:f2:f8:cc:22:1a:62:41:ea:b8:ce:3e:
                    09:bf:2b:20:09:9c:fd:12:45:30:2f:ba:83:ab:35:
                    48:b7:3e:d4:3b:0d:ad:55:a9:e6:84:32:33:8f:12:
                    b8:c8:9b:c3:9d:eb:18:19:8a:0a:94:45:ab:45:12:
                    2d:38:e9:05:50:a6:a8:19:25:b6:f6:57:58:72:41:
                    9a:19:3c:eb:73:bd:b3:02:1c:ca:68:8f:6e:25:fd:
                    79:16:cb:80:cc:e3:1b:62:c9:e9:66:b9:d1:01:1a:
                    d7:22:5a:4a:6c:7c:ad:0d:7a:86:da:5f:84:2d:ab:
                    0d:21:1f:23:a2:cc:36:40:2a:d8:e5:bd:9b:51:cd:
                    68:fc:19:b6:21:48:c4:61:8c:0e:0b:6e:3d:24:89:
                    0d:bc:3b:cc:3d:51:90:d8:b9:b6:df:19:d7:f5:03:
                    e9:15:a6:2b:5d:99:22:43:e3:e8:b4:43:7f:4d:d4:
                    15:ac:93:66:c7:0d:10:6a:bd:80:a2:f2:3e:bf:87:
                    34:dc:61:a7:bb:4b:81:f3:f8:9a:86:c0:52:34:c9:
                    c7:eb:4b:b5:fb:49:cf:5f:8b:db:0e:ad:24:a9:7b:
                    d4:87:bf:6c:22:79:b4:9e:8f:f7:1a:6d:34:be:47:
                    85:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  147056

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.187.0/24
                IPv6:
                  2001:df7:a680::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:1c:24:6e:25:75:06:48:c8:0a:0f:ea:00:e2:a9:fe:32:55:
         67:39:2f:fd:2b:8d:e7:81:7e:a5:f8:0f:e9:5b:fc:63:ed:76:
         8d:e2:3d:9d:04:61:1a:92:f8:7c:9f:b2:be:2c:11:43:00:72:
         8f:b9:32:e4:ad:c3:1a:04:7b:40:ff:fd:45:77:a9:66:bd:8b:
         c9:55:44:78:31:0a:9f:6e:e0:ea:ea:76:f2:86:35:ad:10:f0:
         06:2f:5c:63:85:8b:10:b0:3d:43:d0:32:5b:10:f2:8a:d7:0b:
         7a:cc:96:25:87:8b:85:27:ef:8b:c2:67:f7:a6:f9:49:d5:c5:
         98:25:06:89:98:c5:04:ec:93:b9:c3:95:7d:54:bb:68:da:5f:
         3d:92:8b:f4:34:13:08:e1:e6:7c:cf:5e:93:1d:18:06:8f:e1:
         a9:8a:a5:bf:89:ff:11:1c:cb:7e:fb:35:73:a6:8a:56:45:51:
         6f:fd:92:ce:da:09:0e:8f:c6:f6:fb:93:f0:98:0e:c1:b5:51:
         fa:a8:19:fe:fe:07:5b:f8:e3:0b:af:67:72:85:95:3f:86:32:
         8b:70:1a:cb:c0:0b:4c:b2:9f:af:e7:49:ba:b6:a0:ed:1e:e4:
         cf:dd:31:30:87:34:dd:86:f9:1b:64:0c:9b:a2:6e:f3:86:48:
         81:e8:7a:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:33:23 2025 by rpki-client