This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
File:                     IL0_f5mO1D1fxPhindDBiOx92uA.cer (raw, json)
Hash identifier:          tsGMAe4OeXwSpBF7qJ/t21NEtV/VoTSMCNeu3w3ECj0=
Subject key identifier:   20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027C4E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 05 Dec 2025 16:07:11 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    AS: 151955
                          IP: 36.50.37.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 12:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162894 (0x27c4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  5 16:07:11 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:65:b0:8a:02:c5:ed:58:d6:ff:6d:c5:11:
                    09:67:64:c0:1f:dd:b9:da:e6:a0:0c:92:1b:f8:e9:
                    f7:0f:d4:e5:f7:27:b1:d7:c3:a5:34:2e:cf:8b:64:
                    3e:71:c5:b3:ce:96:4a:a8:e2:18:10:e4:12:82:3c:
                    10:c1:c1:49:95:1c:89:70:76:87:f3:20:82:b0:a6:
                    23:dc:ee:54:a4:95:52:42:45:cc:14:7a:8b:2a:89:
                    aa:d7:cb:32:31:34:57:92:da:e1:b0:40:c2:92:cf:
                    f8:e1:1e:3e:e6:c1:c3:05:9f:6e:e2:8e:af:4a:e2:
                    8c:27:c8:08:a5:94:1c:d5:a2:59:7d:ff:d8:f8:8d:
                    03:f6:c5:29:e7:f6:53:1d:10:9c:71:3f:b9:5e:4e:
                    ae:08:27:7d:25:ca:13:22:00:0b:de:da:83:54:29:
                    d4:f0:96:92:c7:f4:42:8f:87:7e:e2:ed:62:c6:35:
                    4b:3c:a1:79:5e:1f:b1:9c:95:f0:9d:a8:e2:df:a5:
                    c7:8e:2b:d0:f1:b3:d5:be:95:48:00:63:bb:15:29:
                    34:dd:73:1b:08:97:af:b9:bd:af:8f:cd:37:52:89:
                    7f:d8:86:5a:ac:b6:57:b3:60:f0:32:2a:8b:5d:1d:
                    ed:3f:63:5d:f6:d5:ae:ae:fa:80:e9:e9:e8:60:89:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151955

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:e9:54:c3:25:15:fb:c7:bf:0f:44:e9:94:1f:b8:09:35:72:
         85:dd:9c:97:64:90:da:37:22:0d:e0:23:86:42:aa:ea:43:b7:
         37:d9:26:bf:41:35:b7:0d:2d:a5:46:6a:f7:37:9f:b2:1f:87:
         5a:39:c7:14:0a:e1:a9:03:25:17:29:4f:73:f3:62:5a:23:59:
         f5:97:09:9b:d9:50:2d:46:2d:00:98:2a:cd:94:b0:69:21:4b:
         c3:ab:db:64:1c:de:de:b1:95:73:e0:9e:ad:c9:3e:bf:aa:f4:
         27:86:cf:84:85:f6:00:1e:9e:81:bd:9f:6f:dd:22:55:5f:c7:
         8f:f2:3c:30:0f:a2:68:5a:1c:5f:93:67:04:5d:9d:83:d5:c6:
         4e:8d:7e:87:db:15:8d:65:dc:fc:d8:6d:45:22:27:23:f2:06:
         f6:92:39:17:be:ed:e8:df:22:93:70:cc:2d:c7:ec:4a:34:1c:
         22:d4:ee:f2:c8:a3:11:b3:3f:fe:88:41:9a:02:9f:b9:fb:dd:
         e9:5a:6f:7e:b5:80:3a:ea:78:3e:fe:97:17:1e:18:71:8d:3f:
         88:15:33:64:58:e0:36:05:bd:fe:76:9d:b7:c6:a0:a3:3b:28:
         56:a4:c1:28:1d:5d:63:2c:82:47:92:18:fd:b2:5e:89:62:10:
         ed:50:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:48:44 2025 by rpki-client