This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
File:                     Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer (raw, json)
Hash identifier:          A5Qlla3f/AHPB+KVFDnU0rRYwssBLtGS82FYxi55STA=
Subject key identifier:   11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0283CC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 05 Jan 2026 13:30:05 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 152096
                          IP: 115.84.170.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164812 (0x283cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  5 13:30:05 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:77:f1:2b:d3:b3:90:5e:0a:7b:e3:0b:d3:
                    7a:8a:57:c0:a4:84:a5:1e:9b:ad:e3:ab:07:6d:97:
                    e0:a4:59:9b:cc:d3:8f:aa:ea:6c:f0:4f:20:d9:c5:
                    ec:59:e9:3c:46:ea:13:ba:0f:18:7e:49:40:3a:ad:
                    b8:9d:df:6b:bc:27:b0:d4:c3:f4:51:3f:28:d9:ac:
                    0a:0d:16:57:90:50:19:1a:3b:47:6a:33:b2:c3:56:
                    54:ad:64:90:4b:a1:00:ef:e6:eb:cf:dc:89:7f:07:
                    32:0b:55:19:41:c3:17:7d:cc:c5:a7:87:4f:f1:96:
                    8f:29:e6:0f:95:31:73:de:11:ce:46:26:ee:4f:45:
                    66:28:6e:ff:93:82:11:59:2d:01:68:95:e7:4d:32:
                    55:f1:ba:98:d8:b2:fe:fe:3a:72:54:8c:41:d8:9e:
                    58:11:b0:cb:ee:b6:cc:a2:8b:ac:32:ca:66:45:b5:
                    04:15:db:87:4d:5b:77:b9:c4:de:2d:60:d3:60:09:
                    d0:a3:8e:11:a7:c6:95:1b:01:8b:c0:fc:b2:9c:76:
                    36:6d:19:d8:98:14:d1:f2:f2:69:9d:bd:a3:26:06:
                    60:9f:20:3a:7b:83:a8:18:6e:0f:64:69:81:fa:99:
                    dd:e4:ed:46:d1:bd:c6:76:29:9f:1e:63:53:f6:00:
                    4b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152096

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.84.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:86:98:ee:1f:02:df:df:b7:f9:48:63:13:f2:56:de:2c:f5:
         0b:55:13:be:25:46:52:2f:02:f1:11:e6:4c:4a:46:6c:26:9e:
         2b:54:91:69:da:78:3f:53:e7:60:f1:2e:ff:c1:b6:e8:78:78:
         a1:03:b4:96:29:50:b5:c6:25:c1:bc:75:71:ed:21:a9:ad:c0:
         f6:f7:cc:91:49:6b:49:6c:9d:3f:3f:76:cf:ae:0f:ed:32:ee:
         22:24:3a:bf:f4:95:2e:d3:01:d8:e3:70:f9:d6:a1:38:dc:f5:
         12:0a:90:8f:d6:a7:8f:05:ce:27:b4:e0:5d:d1:ae:0a:75:ae:
         8f:88:1a:e3:34:b4:94:38:63:4d:36:67:01:ca:55:75:9c:41:
         7b:7f:e5:30:c6:e5:65:42:32:72:cd:ee:e0:8f:03:d1:63:bf:
         ca:4f:8e:d7:d1:11:c5:55:d6:28:ad:d7:32:6a:4b:0a:76:84:
         31:07:b1:c2:91:eb:73:c4:e5:da:a0:fe:e9:ff:01:16:1f:0d:
         b7:31:df:87:b9:6b:7f:dd:4e:7b:3a:a4:85:9f:7b:da:aa:46:
         06:90:89:3d:4d:52:07:af:dd:9e:97:ee:59:71:5a:91:5d:fd:
         cb:ee:1e:3b:23:60:0e:b8:a4:b9:c8:f1:1a:cb:de:d9:d8:3d:
         2e:bf:83:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:32 2026 by rpki-client