This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer
File:                     JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer (raw, json)
Hash identifier:          Acz3QyepB1KQLQ0tXPPKeYTW2je5zYT2H/QxLB0wjxU=
Subject key identifier:   24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027A5C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 02 Dec 2025 02:34:27 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 152141
                          IP: 210.79.178.0/23
                          IP: 2001:df3:39c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 08:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162396 (0x27a5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  2 02:34:27 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:2b:0e:fe:96:18:a2:5a:b4:b3:f5:7c:65:
                    68:00:58:04:44:5c:67:e6:14:85:a6:34:cb:48:8f:
                    13:5d:51:4f:61:c5:08:8e:c3:fb:60:df:50:f3:4d:
                    11:a1:50:3e:4a:6d:5f:33:6e:6b:a8:69:17:ad:b6:
                    8c:7a:c2:91:67:a4:10:8a:c7:3d:b8:8a:66:05:c1:
                    1e:7b:05:40:5b:99:fe:57:c2:84:e1:58:db:12:76:
                    bc:69:84:80:f8:8d:94:44:dd:4e:85:2e:23:0d:09:
                    98:12:6f:af:04:01:55:8e:8f:b2:d2:58:2f:13:fa:
                    62:b5:1d:d8:b0:60:20:dd:72:96:53:e6:3f:a3:fa:
                    84:62:2d:e1:cd:54:c5:b0:87:3d:7b:d7:b9:21:66:
                    6e:76:4b:4a:b1:a5:9d:8e:63:ba:14:c4:c6:e9:06:
                    ca:b2:92:7d:b9:9d:18:02:d3:4e:62:b8:de:3b:d3:
                    55:22:6b:be:b3:32:13:86:ca:01:86:33:71:b6:63:
                    99:25:ff:33:cd:5b:ce:fb:11:b7:c1:d1:76:40:4d:
                    67:f3:2b:c9:c4:7f:13:18:76:fc:46:39:7b:45:57:
                    fe:fd:d7:16:a6:6e:56:b2:55:5b:3b:59:bd:0b:04:
                    2f:a2:79:59:19:5a:11:1e:88:bf:c2:ab:f6:de:b3:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152141

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.178.0/23
                IPv6:
                  2001:df3:39c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:34:83:93:a6:6e:af:4c:ca:91:36:d6:92:c6:30:9b:64:59:
         ec:05:e0:b6:43:e8:2e:27:0a:b7:c2:94:0c:c3:da:3d:8c:1a:
         09:e4:7d:63:47:fe:88:ee:12:f1:ec:6a:55:37:a2:6c:fa:b1:
         d2:5f:5f:a2:f3:d8:81:84:cb:16:a3:78:84:fb:02:a6:fa:6e:
         79:ab:ea:5c:88:26:44:d4:60:54:af:00:17:d2:83:aa:68:12:
         8b:19:03:05:28:1d:43:cd:57:d6:6f:93:e0:03:36:08:90:f5:
         c2:00:13:5a:18:a5:12:64:5f:95:2b:c8:b4:35:57:b9:a6:ab:
         9f:57:d3:27:72:c9:8f:9f:50:b1:85:5b:2a:00:3c:80:b4:ac:
         c7:08:8f:e5:a5:5b:03:35:cc:4c:cf:68:20:24:d9:22:35:2e:
         2f:57:40:0c:b2:fe:7d:6c:19:fb:b2:b3:53:a3:b3:a6:b7:4e:
         03:ca:4e:b2:5b:09:df:aa:39:23:09:d7:2f:f2:9b:63:f7:76:
         17:bd:25:f9:7d:15:53:cb:6c:82:32:3f:45:43:a1:6e:cc:e8:
         62:93:3b:0b:27:0a:e6:d2:44:cb:7f:fa:91:2d:3b:66:c6:75:
         a8:13:f8:4e:54:e8:a5:1a:65:24:3a:2f:bf:f3:78:10:9c:92:
         5e:d5:9d:b9
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIDAnpcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTIwMjAyMzQyN1oXDTI3MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMy
NEMzMUVDQTZFRDdBNDNCMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwnSsO/pYYolq0s/V8ZWgAWAREXGfmFIWmNMtIjxNdUU9hxQiOw/tg31DzTRGh
UD5KbV8zbmuoaRettox6wpFnpBCKxz24imYFwR57BUBbmf5XwoThWNsSdrxphID4
jZRE3U6FLiMNCZgSb68EAVWOj7LSWC8T+mK1HdiwYCDdcpZT5j+j+oRiLeHNVMWw
hz1717khZm52S0qxpZ2OY7oUxMbpBsqykn25nRgC005iuN4701Uia76zMhOGygGG
M3G2Y5kl/zPNW877EbfB0XZATWfzK8nEfxMYdvxGOXtFV/791xamblayVVs7Wb0L
BC+ieVkZWhEeiL/Cq/bes7/DAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUJHtdbmLk
pJ6d9Nwkwx7KbtekOygwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM1NEExLzc0MDJEOEQ4OUI2MDExRUU4NkVFMUQxMEM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDNTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1M
a3BKNmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlJNMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQB0k+yMA8EAgAC
MAkDBwAgAQ3zOcAwDQYJKoZIhvcNAQELBQADggEBAE40g5Ombq9MypE21pLGMJtk
WewF4LZD6C4nCrfClAzD2j2MGgnkfWNH/ojuEvHsalU3omz6sdJfX6Lz2IGEyxaj
eIT7Aqb6bnmr6lyIJkTUYFSvABfSg6poEosZAwUoHUPNV9Zvk+ADNgiQ9cIAE1oY
pRJkX5UryLQ1V7mmq59X0ydyyY+fULGFWyoAPIC0rMcIj+WlWwM1zEzPaCAk2SI1
Li9XQAyy/n1sGfuys1Ojs6a3TgPKTrJbCd+qOSMJ1y/ym2P3dhe9Jfl9FVPLbIIy
P0VDoW7M6GKTOwsnCubSRMt/+pEtO2bGdagT+E5U6KUaZSQ6L7/zeBCckl7Vnbk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:38:38 2025 by rpki-client