This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
File:                     Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer (raw, json)
Hash identifier:          GHY2BR2Z3zQeksubYPwSzw+aac9lJvq1oKrrhp9EVLY=
Subject key identifier:   26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027423
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 09 Nov 2025 10:54:44 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 147016
                          IP: 2001:df6:4840::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 08:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160803 (0x27423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  9 10:54:44 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A919C7D0, serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2c:9c:67:e3:bd:ad:34:1a:2d:06:a9:57:07:
                    4d:eb:8a:8a:01:7a:d5:05:f3:e6:14:e6:06:f3:51:
                    ec:4f:dd:3f:2b:05:ab:9d:cc:55:f2:c9:2d:e7:e3:
                    56:18:0c:08:2d:9b:38:5b:d0:5b:de:7f:30:58:53:
                    c5:ba:e6:df:a6:56:32:02:ac:b3:32:bf:30:d2:2f:
                    c8:26:fc:0f:4c:88:40:c8:f7:b7:5d:6a:6d:c3:fa:
                    bc:66:af:ff:b5:5c:af:cd:91:dc:c5:f6:44:bc:01:
                    f9:b2:0e:bf:ca:92:2e:d8:04:80:5d:25:76:67:99:
                    8b:db:01:30:c1:03:a6:83:45:d8:7f:a9:c4:f0:20:
                    0f:56:02:c4:cf:2c:ff:2e:ba:01:5b:80:97:3b:b5:
                    f2:54:bc:48:7e:7c:a3:7c:ad:39:41:c1:19:3b:b7:
                    7b:15:b3:08:35:3b:f1:95:fe:b7:50:e8:89:f7:b9:
                    7d:d7:5e:8a:b6:88:cc:53:e4:f5:8e:8f:ce:7a:85:
                    91:47:b8:60:a4:e7:6c:11:e7:06:71:8f:7c:39:64:
                    cc:c0:7b:f1:0a:05:b5:c6:9b:38:d7:de:a0:08:a6:
                    da:40:a4:38:11:a5:91:39:6e:3e:a5:51:1b:b0:c7:
                    41:62:66:8b:19:af:86:82:e6:10:c5:58:b9:94:37:
                    f6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  147016

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:4840::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:45:7f:2a:5a:33:15:b6:57:f1:24:b4:f3:2b:2d:f4:f2:
         93:0e:b8:7f:c6:c1:80:8a:a1:56:b1:4f:a5:73:be:8f:01:2d:
         6e:88:3f:c0:36:ea:66:96:88:58:25:f4:26:fc:5e:d5:a1:48:
         05:b0:9d:17:b2:40:cc:09:b7:c8:80:4e:62:9c:f8:9f:ff:59:
         b9:22:b2:39:08:d9:81:23:d7:a2:4f:99:f8:1b:82:b6:aa:b2:
         40:d2:9e:8a:2a:d1:39:e0:56:0b:d4:02:7e:b1:bc:0c:9f:48:
         fd:a7:b8:00:38:87:94:4f:46:dc:eb:42:f6:ca:31:72:f8:27:
         41:35:56:79:12:2d:34:ad:cc:db:a2:bd:dc:95:40:ef:eb:8c:
         0b:d4:50:7b:5f:82:30:eb:9b:85:da:09:6f:28:c3:a1:df:a6:
         8e:d9:c1:57:50:bc:7f:d6:b2:43:92:a6:3e:28:81:41:2c:79:
         fb:d7:8b:fd:7d:4f:de:3f:93:0c:42:4c:92:5c:bc:c2:0b:74:
         17:7c:63:66:1e:62:18:97:e2:6d:27:e1:7e:02:ee:e0:de:81:
         3d:7e:25:19:d1:96:df:2f:d7:22:fb:2c:1b:06:c6:6e:7e:b1:
         29:b5:8d:3c:f4:44:61:47:70:90:fb:da:e1:2a:a2:ff:b2:f1:
         22:94:f9:84
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAnQjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTEwOTEwNTQ0NFoXDTI3MDMwMjAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOUM3RDAxMTAvBgNVBAUTKDI2N0UzRDM1RDgxMUE4NzJCRkVEREYw
NTdCNzVENTUwREU0N0Y3MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYLJxn472tNBotBqlXB03riooBetUF8+YU5gbzUexP3T8rBaudzFXyyS3n41YY
DAgtmzhb0FvefzBYU8W65t+mVjICrLMyvzDSL8gm/A9MiEDI97ddam3D+rxmr/+1
XK/NkdzF9kS8AfmyDr/Kki7YBIBdJXZnmYvbATDBA6aDRdh/qcTwIA9WAsTPLP8u
ugFbgJc7tfJUvEh+fKN8rTlBwRk7t3sVswg1O/GV/rdQ6In3uX3XXoq2iMxT5PWO
j856hZFHuGCk52wR5wZxj3w5ZMzAe/EKBbXGmzjX3qAIptpApDgRpZE5bj6lURuw
x0FiZosZr4aC5hDFWLmUN/Y9AgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUJn49NdgR
qHK/7d8Fe3XVUN5H9yYwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTlDN0QwLzdFNTgyM0Y2QkQ1QTExRjBCODlCMUQ2NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5QzdEMC83RTU4MjNGNkJENUExMUYwQjg5QjFENjZDNEY5QUUwMi9KbjQ5TmRn
UnFIS183ZDhGZTNYVlVONUg5eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAj5IMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9khAMA0G
CSqGSIb3DQEBCwUAA4IBAQCNlkV/KlozFbZX8SS08yst9PKTDrh/xsGAiqFWsU+l
c76PAS1uiD/ANupmlohYJfQm/F7VoUgFsJ0XskDMCbfIgE5inPif/1m5IrI5CNmB
I9eiT5n4G4K2qrJA0p6KKtE54FYL1AJ+sbwMn0j9p7gAOIeUT0bc60L2yjFy+CdB
NVZ5Ei00rczbor3clUDv64wL1FB7X4Iw65uF2glvKMOh36aO2cFXULx/1rJDkqY+
KIFBLHn714v9fU/eP5MMQkySXLzCC3QXfGNmHmIYl+JtJ+F+Au7g3oE9fiUZ0Zbf
L9ci+ywbBsZufrEptY089ERhR3CQ+9rhKqL/svEilPmE
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:33:54 2025 by rpki-client