This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JGQlARmdbB3pb6P_Lr5new4DDRA.cer
File:                     JGQlARmdbB3pb6P_Lr5new4DDRA.cer (raw, json)
Hash identifier:          a8ZlLYbj1okhxKqsaUbadwNlbrqrostVUkiuP5/yR3w=
Subject key identifier:   24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027603
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 18 Nov 2025 16:35:14 +0000
Certificate not after:    Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 9419
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161283 (0x27603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 18 16:35:14 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=A9177C3F, serialNumber=24642501199D6C1DE96FA3FF2EBE677B0E030D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7e:9d:80:a0:e9:85:91:cd:e9:9d:31:5a:9f:
                    ec:b3:d0:08:12:87:20:46:06:1d:ab:d0:34:75:0c:
                    68:71:65:a3:c0:ac:29:86:ce:f1:7e:a7:b8:56:c3:
                    db:04:cd:af:eb:b2:54:7d:1a:60:75:2b:da:e5:0b:
                    9b:9a:f1:18:24:c6:54:80:4a:9c:9d:78:07:25:a5:
                    94:a1:cc:cc:0b:52:0d:e9:45:3a:0e:f2:f3:44:93:
                    af:f2:a0:7c:dd:93:13:12:64:c5:ba:8a:d0:76:bc:
                    37:1e:d6:86:1a:48:cd:69:bd:0f:18:8b:44:ea:f3:
                    af:fe:95:b3:52:12:ac:0a:4a:69:d4:53:69:29:21:
                    62:b3:10:a1:a1:bd:7d:72:12:a9:5f:c9:eb:79:23:
                    ec:bd:8e:53:ab:b9:15:51:81:22:41:bd:bd:2f:61:
                    4e:28:a8:a8:0b:40:70:02:43:f9:8a:51:dc:4b:74:
                    a2:33:22:f5:e9:cf:9c:cd:3a:ec:aa:f7:e9:36:03:
                    88:b1:fc:00:7b:0c:17:d0:c6:45:96:1f:de:f9:fd:
                    b9:e8:44:87:c5:f2:5b:8a:68:b9:65:e3:b1:b3:bc:
                    5d:96:b7:27:69:b8:99:dd:10:c3:4b:7f:ef:0a:24:
                    26:4b:27:71:4b:dd:bf:ad:8c:6a:ff:e9:9b:f3:af:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:64:25:01:19:9D:6C:1D:E9:6F:A3:FF:2E:BE:67:7B:0E:03:0D:10
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/D737437E733311F0839CDC83C4F9AE02/JGQlARmdbB3pb6P_Lr5new4DDRA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9419

    Signature Algorithm: sha256WithRSAEncryption
         d0:b0:2c:f4:ae:e9:47:6e:3a:f2:3a:11:17:44:2d:20:84:3f:
         fc:44:9f:58:cc:a9:3c:4a:21:0a:ba:6e:ee:48:34:01:f4:c7:
         d0:4c:b8:65:2b:bf:6e:a3:d6:17:60:45:53:84:2f:d2:33:75:
         b9:00:7d:05:52:8b:47:0c:fa:66:18:18:0d:3d:0f:45:6e:95:
         37:ec:5f:67:85:f5:1b:d4:75:cb:ee:d9:58:54:56:b0:e3:d2:
         26:eb:18:36:d2:eb:4d:26:c1:52:ec:ae:19:a5:92:81:1a:5d:
         ac:ef:75:ba:65:e1:22:38:1d:22:be:bf:16:fb:42:7f:c1:cb:
         2f:7d:3d:3c:b3:be:11:ea:40:33:34:f1:df:34:a0:9c:e0:30:
         2e:e6:a3:04:c7:b7:ea:b1:cd:39:cb:40:29:3e:6b:e0:e2:2c:
         eb:6d:a2:d6:ae:4c:1d:ce:7f:fd:dc:ce:dd:fd:50:cf:60:b4:
         1c:29:97:33:9a:b1:15:0a:32:65:88:97:fd:ff:76:c4:dc:bd:
         8d:72:99:44:8d:73:ed:9b:2c:51:6b:e6:20:86:46:46:cb:0d:
         66:cb:63:30:fe:9b:7d:55:8c:8d:30:23:0f:57:76:c8:cc:dd:
         69:6f:f1:75:58:c3:06:d1:c7:32:48:ec:8b:a6:18:e6:35:9c:
         85:8a:64:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:58:05 2025 by rpki-client