This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer
File:                     HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer (raw, json)
Hash identifier:          Obrs6r0aix9VO2vNd/SIpIutwWFsQ0BHtN2HrlBnH2A=
Subject key identifier:   1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       026160
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 31 Aug 2025 00:00:38 +0000
Certificate not after:    Tue 30 Dec 2025 00:00:00 +0000
Subordinate resources:    IP: 2001:df0:d980::/48
Validation:               Failed, certificate revoked on Thu 09 Oct 2025 19:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156000 (0x26160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 31 00:00:38 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=A91D246A, serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:90:49:6b:1a:42:5d:36:0d:65:f4:d9:2b:14:
                    c3:44:11:d6:6c:2a:48:ed:f5:7b:0b:fd:0d:1b:6f:
                    b2:e8:6e:37:92:dc:38:83:1c:b2:81:97:39:d4:9b:
                    92:5f:29:8d:b5:4b:1f:e0:90:c8:45:44:a5:f5:c7:
                    61:41:2c:13:83:20:c6:fb:cf:47:05:cc:bb:fe:25:
                    ed:ae:4e:2d:4e:af:30:1a:bd:ea:99:57:b8:bf:90:
                    ee:fd:cc:af:91:2e:bf:46:12:24:1a:3a:2c:0c:fe:
                    77:24:54:1b:0b:d6:46:a2:a0:59:ff:30:86:b9:0c:
                    6b:2a:6c:eb:e4:c2:39:69:b1:fb:e8:b8:0b:b4:29:
                    2e:ad:68:47:95:d0:e4:01:2d:76:92:f9:19:08:1a:
                    ae:89:52:64:24:02:80:71:82:f7:09:ec:c8:6c:63:
                    dc:86:1c:34:ff:26:c3:fd:6b:55:f2:a7:32:81:16:
                    c2:f0:bf:29:1c:40:da:dd:dc:c6:df:47:0f:38:90:
                    d6:73:bb:f8:c9:58:53:49:9c:64:b1:bd:4f:30:9d:
                    91:c8:11:be:88:68:ed:c0:0b:d1:fa:5e:2f:a5:dc:
                    04:d5:5c:49:08:9b:d1:e3:25:4a:0e:e0:29:a6:b3:
                    3f:83:0e:c8:f3:bb:64:bc:37:c1:57:a0:42:6b:4d:
                    f1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:d980::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:20:9d:e1:c8:77:cb:b4:cc:5b:2c:f1:da:81:a5:6c:91:70:
         be:16:56:06:ec:1b:d2:81:12:62:59:c9:b5:f5:ac:74:35:28:
         0e:57:a9:ec:ff:53:a1:75:12:49:f5:23:fd:9b:93:be:24:12:
         45:dc:ad:0b:1f:d0:15:c2:aa:20:2d:8b:d7:52:8f:11:f1:0b:
         80:76:aa:40:3d:75:e3:bc:ed:ee:85:52:91:24:0f:dc:d6:d2:
         56:35:4c:a1:ee:67:d1:8c:bb:1f:4a:5b:cf:01:b5:16:1f:54:
         98:eb:9e:b7:d0:fc:4c:f4:9d:90:12:c6:73:fd:cf:dc:22:39:
         fb:ee:8f:b2:49:c3:2e:05:46:2a:74:86:c2:93:f5:5d:d5:50:
         ca:9f:2f:ad:3d:9b:f9:48:83:49:74:0d:49:37:19:87:58:24:
         50:50:a9:1c:36:ff:1e:ef:ab:69:87:c3:02:0e:11:fa:b9:b6:
         42:37:81:d9:dc:06:83:cf:b6:21:7e:ca:e8:5a:fc:a8:48:18:
         e6:71:0e:4b:0f:aa:a3:75:e6:e5:98:f4:a9:2f:45:51:3d:78:
         44:cc:80:ff:88:2a:e1:4f:89:ee:70:35:be:87:74:59:d1:78:
         cb:b1:22:ee:6e:af:ec:2e:e4:a1:91:00:0b:66:d3:0e:21:58:
         7b:5b:88:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----