This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OYVAYLL1jUyRnGTapLfrHwzfaDA.cer
File:                     OYVAYLL1jUyRnGTapLfrHwzfaDA.cer (raw, json)
Hash identifier:          4jcFFz2wNjMnDHOQUPuRHIHqgCaw7XR+0ndCwnSD80Y=
Subject key identifier:   39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0274C5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 12 Nov 2025 15:45:32 +0000
Certificate not after:    Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 56093
                          AS: 133145
                          IP: 202.7.2.0/23
                          IP: 2001:df4:800::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 06:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160965 (0x274c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 12 15:45:32 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=A91A1A51, serialNumber=39854060B2F58D4C919C64DAA4B7EB1F0CDF6830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:e8:a7:a7:f0:bc:21:fa:27:ce:32:06:5f:
                    07:ad:77:35:5e:0e:6e:42:9e:36:6e:33:70:9a:c7:
                    22:1c:59:54:19:9c:eb:62:82:21:81:4c:36:0d:11:
                    37:49:3c:0f:91:6c:07:ca:95:98:be:28:9b:42:38:
                    0a:ff:d8:b7:fb:96:3a:7f:ee:33:20:55:36:07:ff:
                    15:ec:e3:4d:11:64:7f:e1:33:c8:68:64:72:51:d3:
                    db:b2:fb:f2:c4:78:33:0c:54:e9:34:e8:d9:81:5a:
                    51:2b:7f:97:31:84:eb:8e:dd:ca:8e:2e:02:18:df:
                    2c:45:9a:81:87:8f:ce:be:d8:3f:dc:ec:76:3f:e7:
                    cb:fe:59:b9:41:62:8d:c3:c7:26:3d:cd:74:c9:3a:
                    17:ac:74:12:93:70:27:6c:38:82:91:b7:05:a6:e7:
                    ec:f2:06:7b:2c:86:89:3b:76:6a:ad:a1:3a:c2:2c:
                    29:3a:02:fc:00:9d:2b:22:fa:46:5a:26:fb:47:bc:
                    c2:7c:08:7f:8b:c3:d1:2c:74:83:3a:48:8e:cb:11:
                    53:ab:c6:d7:48:48:d5:3d:f5:bc:d0:b9:13:f9:38:
                    0c:a0:61:e0:35:a9:31:6f:cd:5e:6f:e8:3f:6f:98:
                    35:4c:30:0c:40:91:d4:d5:5a:a1:6a:eb:25:38:4d:
                    e8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:85:40:60:B2:F5:8D:4C:91:9C:64:DA:A4:B7:EB:1F:0C:DF:68:30
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A1A51/AF690F60B92011EC9915674FC4F9AE02/OYVAYLL1jUyRnGTapLfrHwzfaDA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56093
                  133145

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.7.2.0/23
                IPv6:
                  2001:df4:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:3d:3a:68:d7:f9:a2:2f:fe:dd:d0:fa:38:99:99:e7:f7:3a:
         2a:02:96:91:5f:ec:57:a6:aa:45:73:5f:d9:54:0e:d9:f4:ba:
         28:20:16:bd:64:3b:14:09:9f:55:f2:cd:4f:64:0f:4d:7f:33:
         72:78:7d:c4:b0:ef:dc:6b:82:37:0d:02:14:4b:6d:f1:ac:95:
         e5:28:1b:fe:b2:30:a0:5f:79:b5:cb:bb:6e:26:11:71:8e:d8:
         a4:5f:d3:55:7f:09:ca:73:a6:dc:03:e7:21:ef:16:89:ee:13:
         ed:6a:09:19:8c:2c:e4:db:a7:9a:f4:5c:dd:c0:28:8c:22:ad:
         12:c0:fd:6d:7d:a0:1c:e3:44:06:84:ab:67:dc:d4:a1:5f:7f:
         41:35:45:cc:d7:e7:a8:45:bb:2d:d2:77:71:a2:04:bc:42:34:
         cd:12:b8:94:6b:0d:97:d0:5f:3c:88:bb:b7:31:16:7f:67:f8:
         53:07:e9:a2:c1:48:55:3e:c2:58:d7:b4:32:7d:2e:5e:a2:21:
         1a:9e:e7:f0:a1:48:b4:cf:d2:2f:2e:b8:58:a7:97:18:7f:d8:
         c3:5f:6b:9b:f8:51:ea:5a:23:7b:5c:42:ce:a5:eb:2b:09:b2:
         c4:71:de:5b:f0:5f:e0:99:b8:97:2e:d6:69:12:a7:3a:08:09:
         9a:4c:7b:5a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIDAnTFMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTExMjE1NDUzMloXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQTFBNTExMTAvBgNVBAUTKDM5ODU0MDYwQjJGNThENEM5MTlDNjRE
QUE0QjdFQjFGMENERjY4MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCutOinp/C8IfonzjIGXwetdzVeDm5CnjZuM3CaxyIcWVQZnOtigiGBTDYNETdJ
PA+RbAfKlZi+KJtCOAr/2Lf7ljp/7jMgVTYH/xXs400RZH/hM8hoZHJR09uy+/LE
eDMMVOk06NmBWlErf5cxhOuO3cqOLgIY3yxFmoGHj86+2D/c7HY/58v+WblBYo3D
xyY9zXTJOhesdBKTcCdsOIKRtwWm5+zyBnsshok7dmqtoTrCLCk6AvwAnSsi+kZa
JvtHvMJ8CH+Lw9EsdIM6SI7LEVOrxtdISNU99bzQuRP5OAygYeA1qTFvzV5v6D9v
mDVMMAxAkdTVWqFq6yU4TeiLAgMBAAGjggMlMIIDITAdBgNVHQ4EFgQUOYVAYLL1
jUyRnGTapLfrHwzfaDAwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUExQTUxL0FGNjkwRjYwQjkyMDExRUM5OTE1Njc0RkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBMUE1MS9BRjY5MEY2MEI5MjAxMUVDOTkxNTY3NEZDNEY5QUUwMi9PWVZBWUxM
MWpVeVJuR1RhcExmckh3emZhREEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQgBAf8EEDAO
oAwwCgIDANsdAgMCCBkwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAHKBwIw
DwQCAAIwCQMHACABDfQIADANBgkqhkiG9w0BAQsFAAOCAQEAaz06aNf5oi/+3dD6
OJmZ5/c6KgKWkV/sV6aqRXNf2VQO2fS6KCAWvWQ7FAmfVfLNT2QPTX8zcnh9xLDv
3GuCNw0CFEtt8ayV5Sgb/rIwoF95tcu7biYRcY7YpF/TVX8JynOm3APnIe8Wie4T
7WoJGYws5NunmvRc3cAojCKtEsD9bX2gHONEBoSrZ9zUoV9/QTVFzNfnqEW7LdJ3
caIEvEI0zRK4lGsNl9BfPIi7tzEWf2f4UwfposFIVT7CWNe0Mn0uXqIhGp7n8KFI
tM/SLy64WKeXGH/Yw19rm/hR6loje1xCzqXrKwmyxHHeW/Bf4Jm4ly7WaRKnOggJ
mkx7Wg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:33:22 2025 by rpki-client