This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItyTZY3G6XAwereu8eJV3j1D9bc.cer
File:                     ItyTZY3G6XAwereu8eJV3j1D9bc.cer (raw, json)
Hash identifier:          e9l00PLDZFhhctH7d/1ynh/GHK6oYvDy1nKSz1y3RFo=
Subject key identifier:   22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028762
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 20 Jan 2026 07:25:52 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 142223 -- 142224
                          IP: 103.254.92.0/23
                          IP: 2400:6980::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 10:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165730 (0x28762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 20 07:25:52 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A91F0C45, serialNumber=22DC93658DC6E970307AB7AEF1E255DE3D43F5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:38:03:3e:a2:4d:86:1c:05:c6:27:25:20:
                    9b:fd:e7:3a:c1:f9:1c:7a:31:a1:66:56:21:ec:b4:
                    6b:ac:b0:ff:d9:ab:87:f3:f5:41:ab:74:21:70:8a:
                    01:2d:f1:6b:21:4b:6a:68:da:68:06:a8:f7:f9:ed:
                    11:6b:d7:44:04:3b:df:00:9f:9c:1f:97:fe:b6:76:
                    b9:b9:69:e7:48:77:8e:b5:01:03:ea:47:52:4a:66:
                    2b:9a:02:cf:68:46:ef:f5:64:05:a0:71:ae:ec:ea:
                    aa:7d:c4:40:9b:97:71:ac:ce:16:79:61:15:2d:23:
                    00:7b:28:53:bf:64:98:4d:08:07:00:da:aa:4f:8a:
                    fc:34:a5:4a:3d:22:13:94:37:d5:54:9b:a1:e2:35:
                    ae:de:8b:57:c3:60:54:06:23:7a:a4:be:87:68:1f:
                    79:db:47:ce:6f:28:1a:46:8a:1f:d6:24:42:d8:da:
                    ce:44:1d:f3:e3:15:40:16:89:5b:43:43:d2:8c:e9:
                    7a:04:6f:19:86:18:73:a9:20:1b:d1:9a:39:b4:b3:
                    d8:98:cc:31:e4:fd:60:22:13:5e:3e:b1:b2:ce:0a:
                    eb:45:f9:d5:3c:8f:fb:fc:b0:5e:10:cd:ba:c9:8d:
                    57:16:00:72:4e:a4:91:db:cb:09:97:a3:9a:8e:a9:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DC:93:65:8D:C6:E9:70:30:7A:B7:AE:F1:E2:55:DE:3D:43:F5:B7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/91A1899E892E11F097AC662FC4F9AE02/ItyTZY3G6XAwereu8eJV3j1D9bc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142223-142224

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.92.0/23
                IPv6:
                  2400:6980::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:a4:69:f0:55:c4:dd:23:d9:a1:a5:0d:76:93:60:29:41:8c:
         a8:e0:eb:82:15:38:ee:32:99:37:a3:ed:95:83:38:88:f3:bd:
         cd:0e:e5:ed:cf:20:58:6b:71:e9:05:6e:d6:c3:45:4c:1f:0f:
         39:81:c1:ae:5b:9e:29:42:f4:31:15:26:89:49:64:27:c5:b3:
         52:e3:f7:ee:58:6e:0e:a2:3a:e9:00:dd:07:3a:7e:77:f9:93:
         23:63:9b:6b:fa:50:3b:0c:f7:cd:21:20:be:36:49:bb:ff:bd:
         fe:0c:62:7f:31:6e:2c:f5:28:69:55:6a:17:ef:59:0e:5e:bf:
         f1:98:ec:e2:45:30:f1:27:d9:49:e1:03:f8:d9:b1:de:c9:46:
         12:51:32:1f:f7:08:80:65:a1:e6:6d:dd:b4:e4:d4:c6:a9:b6:
         4e:af:76:df:13:b4:59:0c:6c:67:14:91:0a:dd:fd:98:d4:4d:
         5d:58:02:6a:6d:d8:54:ea:1f:bd:6c:8d:d4:27:60:43:12:c2:
         9d:a0:d5:b5:d5:93:6c:b9:51:a4:17:21:bd:70:91:c3:61:81:
         63:0e:7e:c5:39:59:b9:a0:17:cf:b6:79:33:28:6e:be:55:41:
         15:a4:45:c7:4b:50:4c:e5:a2:ab:a4:1c:f6:2a:d5:3c:ae:83:
         b8:22:e1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:29 2026 by rpki-client