This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
File:                     LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer (raw, json)
Hash identifier:          wDriOnXMV42sCt0gC6cPlqiVvk2LyB9ZKvyLtOwerdY=
Subject key identifier:   2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0274B9
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 12 Nov 2025 14:21:06 +0000
Certificate not after:    Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources:    AS: 140877
                          IP: 2400:dc60::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 06:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160953 (0x274b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 12 14:21:06 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=A9178E49, serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:0d:b3:a6:6e:a1:2b:6f:36:a4:93:08:f8:
                    b0:2b:6e:37:eb:06:fc:8c:6d:00:6d:42:33:0a:a9:
                    74:ef:58:23:7e:57:68:5c:3b:ad:11:4e:37:5d:76:
                    0a:ab:ae:42:4a:1a:5d:6d:0a:2f:8e:be:dc:2b:3a:
                    b0:9b:4a:af:11:54:4b:ee:1a:65:45:dd:c8:3f:db:
                    2f:8b:2a:bc:8d:97:68:ea:ff:91:59:10:b8:03:cb:
                    2f:74:7d:e0:87:5b:8e:76:fa:41:3b:54:06:6b:1b:
                    89:08:e3:45:5c:f3:8b:34:a8:db:ce:ac:17:27:cd:
                    30:2e:7b:f2:42:7a:2c:79:c0:d8:c3:60:98:27:06:
                    da:25:ab:02:8b:41:e5:81:e2:bf:c1:b3:08:ba:9e:
                    ad:d6:23:f2:e6:a7:28:14:ed:54:e8:6c:36:4b:0f:
                    8d:10:ed:5d:87:66:bc:f7:4d:8d:7a:02:c7:1f:62:
                    88:2c:29:90:1e:0e:eb:d6:b2:d9:1d:2f:73:a1:ca:
                    82:eb:f3:69:1f:65:e6:5b:b5:2e:92:7e:6a:7d:37:
                    dd:53:c3:29:6b:3c:15:56:40:21:a7:d7:55:76:91:
                    ab:98:68:39:62:58:e1:a3:1d:52:fd:1d:f8:3f:4e:
                    84:82:ec:73:e3:25:de:bf:72:9e:e1:c2:7d:1c:e6:
                    00:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140877

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:dc60::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:1b:a8:33:b5:ac:79:d1:b3:ee:37:14:de:0f:56:b4:ac:e0:
         98:dd:5f:28:15:3e:c0:c7:b2:88:1c:af:bf:6a:4b:0c:7f:3a:
         c3:f5:27:a4:3a:ad:53:f9:8f:71:3e:3e:2e:db:f1:50:5c:be:
         dc:92:65:cf:10:df:79:e7:98:4e:10:23:2d:51:c9:37:35:e0:
         bd:f3:57:0a:c3:03:7c:d8:d2:be:9b:86:d3:6c:f5:09:9f:eb:
         38:c8:69:44:19:9a:df:0b:cb:a8:e3:78:0f:1b:3a:1c:e5:a7:
         49:e3:b3:ca:cf:f8:88:98:2b:9c:c8:4b:8d:fa:8e:89:d8:a3:
         1b:77:d4:36:69:49:29:3b:9b:a1:29:e7:d9:96:bb:1e:6d:cd:
         44:96:1a:22:bc:e7:fb:5b:df:a5:60:8c:88:b2:95:02:d2:d6:
         dc:85:31:28:f6:6e:5b:6f:3b:4d:06:40:cf:2c:b9:10:af:5f:
         a4:25:17:95:c8:6d:38:b1:72:03:c7:e3:0e:71:8a:45:f1:c3:
         64:42:12:43:d0:53:97:ca:08:95:b8:49:45:01:c0:a5:f7:cd:
         56:53:70:ca:d4:e7:6d:c5:ea:11:6a:e5:09:77:42:80:5b:5a:
         7e:a0:49:89:e0:4f:2c:5b:f9:c3:7e:e4:b7:8a:65:99:32:7a:
         35:5f:e6:b5
-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIDAnS5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTExMjE0MjEwNloXDTI2MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNzhFNDkxMTAvBgNVBAUTKDJEM0RGQjVFMjIxMkIyOTA1ODY4QjE3
NzE2N0Q1NDhCMERGRTNDRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7Xw2zpm6hK282pJMI+LArbjfrBvyMbQBtQjMKqXTvWCN+V2hcO60RTjdddgqr
rkJKGl1tCi+OvtwrOrCbSq8RVEvuGmVF3cg/2y+LKryNl2jq/5FZELgDyy90feCH
W452+kE7VAZrG4kI40Vc84s0qNvOrBcnzTAue/JCeix5wNjDYJgnBtolqwKLQeWB
4r/Bswi6nq3WI/LmpygU7VTobDZLD40Q7V2HZrz3TY16AscfYogsKZAeDuvWstkd
L3OhyoLr82kfZeZbtS6Sfmp9N91TwylrPBVWQCGn11V2kauYaDliWOGjHVL9Hfg/
ToSC7HPjJd6/cp7hwn0c5gDfAgMBAAGjggMQMIIDDDAdBgNVHQ4EFgQULT37XiIS
spBYaLF3Fn1Uiw3+PPQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTc4RTQ5LzNGMDIwMjQ2QkUxMjExRUFCQjYwQTI4MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3OEU0OS8zRjAyMDI0NkJFMTIxMUVBQkI2MEEyODJDNEY5QUUwMi9MVDM3WGlJ
U3NwQllhTEYzRm4xVWl3My1QUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAiZNMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJADcYDANBgkq
hkiG9w0BAQsFAAOCAQEAtBuoM7WsedGz7jcU3g9WtKzgmN1fKBU+wMeyiByvv2pL
DH86w/UnpDqtU/mPcT4+LtvxUFy+3JJlzxDfeeeYThAjLVHJNzXgvfNXCsMDfNjS
vpuG02z1CZ/rOMhpRBma3wvLqON4Dxs6HOWnSeOzys/4iJgrnMhLjfqOidijG3fU
NmlJKTuboSnn2Za7Hm3NRJYaIrzn+1vfpWCMiLKVAtLW3IUxKPZuW287TQZAzyy5
EK9fpCUXlchtOLFyA8fjDnGKRfHDZEISQ9BTl8oIlbhJRQHApffNVlNwytTnbcXq
EWrlCXdCgFtafqBJieBPLFv5w37kt4plmTJ6NV/mtQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:37:40 2025 by rpki-client