This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
File:                     KTzh3tGmQEsAssDM-z886vshpQg.cer (raw, json)
Hash identifier:          TU45Cu8Vu/kPjFiNel7tr/CtvuJRyqmzz41UtCrYysk=
Subject key identifier:   29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02867F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 15 Jan 2026 13:22:31 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 59292
                          IP: 103.224.107.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165503 (0x2867f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 15 13:22:31 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91790EC, serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:db:7a:9c:84:ab:a3:6f:96:bb:78:2c:0c:
                    f3:e1:0d:48:b5:c8:9f:40:9b:ce:74:47:6f:37:f0:
                    40:32:fb:42:b5:ef:f0:2b:b3:3b:d8:c2:8f:33:ff:
                    9f:ac:03:35:fd:34:3c:42:cc:64:6e:83:ab:16:11:
                    47:62:f6:4f:36:54:45:dc:5b:4a:f9:89:e3:a2:a3:
                    55:7a:68:bb:81:c5:60:58:27:da:f8:d7:6b:2f:a9:
                    cf:a0:2f:5b:90:6e:95:10:5b:58:18:5c:4f:eb:97:
                    fb:96:01:29:90:20:e3:fe:2b:08:0e:5f:7b:f8:d2:
                    32:cd:7d:0d:a5:87:00:e5:95:6a:fc:21:2e:da:bd:
                    0f:c1:51:73:fa:fa:b5:54:86:81:e1:d2:16:bc:30:
                    9a:68:86:c6:18:a4:c5:0d:83:81:f0:33:c7:2a:60:
                    4d:e8:22:72:28:de:bf:b3:ff:34:24:c5:e2:8c:01:
                    80:a5:38:48:71:f4:b0:f8:32:36:7d:f5:a6:bd:56:
                    33:3c:aa:54:c4:c5:8c:d6:6b:01:fc:d1:37:90:2e:
                    bf:b5:f7:93:60:e3:16:c0:e9:b5:4c:e9:4d:31:b2:
                    66:18:e3:84:4b:af:f7:70:09:6a:24:e0:9d:c7:8c:
                    b3:1a:45:d2:b1:75:07:16:e8:41:6e:5e:af:46:df:
                    aa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59292

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:99:8d:80:10:7c:85:4c:60:8d:07:48:1d:7f:3c:9e:1e:b5:
         0f:e1:93:5b:53:3c:6e:e3:19:42:7f:3e:a4:63:d7:5e:94:f8:
         6f:54:4d:1a:40:c9:db:83:9f:f5:fe:57:6b:28:18:af:e2:96:
         2d:33:c5:b4:6d:85:d5:e3:71:ee:15:a0:b7:df:f8:f9:94:fc:
         50:cd:85:47:42:45:de:f6:3a:28:20:b0:d5:14:43:5a:5b:59:
         8b:48:96:2c:be:1c:de:e6:a6:ff:28:9e:d0:b3:d4:46:88:59:
         73:05:46:ff:6e:3a:e2:1d:6d:97:f0:0a:67:55:b3:d1:8a:a5:
         59:cd:39:02:8e:55:dc:f3:e6:49:de:d0:7f:88:b6:fd:c7:11:
         17:bb:a1:73:20:6b:d8:8c:16:51:4c:2d:cc:c7:f1:07:0f:a1:
         30:e2:3c:e3:92:12:16:9e:3a:6f:7e:1a:07:d8:fd:9f:f6:f6:
         bf:5a:ab:04:32:d4:68:10:c4:c9:72:4a:0f:68:6e:8f:45:f0:
         b0:f2:f8:d0:b5:f7:f6:81:32:13:c6:7b:8b:a1:71:a5:3c:b1:
         b2:03:d2:85:39:f0:5b:06:0a:9e:b8:30:29:11:c3:56:50:7e:
         f5:b2:87:b4:02:ed:2f:bd:db:8c:5f:b8:7c:8e:ea:de:94:be:
         af:01:7f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:41 2026 by rpki-client