This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
File:                     QtPsuchXCrCQ62Ae2zN5wNPYptA.cer (raw, json)
Hash identifier:          xLUgwxgQjkNufTCgQNtmKp+dJE7afpMty4RfF7m0yRk=
Subject key identifier:   42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028279
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 31 Dec 2025 17:20:04 +0000
Certificate not after:    Fri 01 May 2026 00:00:00 +0000
Subordinate resources:    AS: 139038
                          IP: 103.138.210.0/24
                          IP: 103.178.52.0/24
                          IP: 2001:df0:5580::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164473 (0x28279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 31 17:20:04 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:80:80:60:8a:85:c2:7c:20:44:f9:c2:60:
                    c0:b9:99:ac:57:c6:7e:a2:cc:c8:88:54:a6:c6:4d:
                    e9:8e:a5:eb:76:d8:01:5c:f9:e1:29:3f:b6:b4:43:
                    27:1e:9a:d7:79:4d:e5:ee:27:74:76:5a:c2:be:14:
                    a3:b7:44:bc:04:01:cb:ac:ae:d8:1e:e1:8a:69:02:
                    a5:3e:64:d8:cf:c3:81:88:5e:18:19:ba:ee:e2:3e:
                    82:f9:1a:73:22:93:8b:bd:06:22:52:81:89:5a:a6:
                    e7:04:c9:ab:ec:cc:e6:f4:85:f6:92:83:57:d8:f1:
                    2e:15:0f:4f:f4:38:d0:e2:6b:ed:c4:25:40:41:01:
                    f8:98:6e:b1:03:38:6a:ff:18:94:3c:94:d5:a8:c2:
                    98:78:af:1a:f8:71:ae:5d:12:31:79:07:fb:05:7b:
                    7e:ba:ab:b7:da:69:0c:64:d1:2a:a0:7c:7c:16:b0:
                    dd:a8:58:9f:5f:d9:db:f4:a8:bf:9c:e2:fb:2a:ea:
                    62:9a:e8:c6:e1:0e:cc:84:99:ca:e8:4d:dc:d8:8d:
                    2a:d6:e5:41:b6:dd:90:da:f6:32:0e:d3:96:d0:1b:
                    62:26:24:d3:a3:32:ee:f6:4c:78:72:53:04:9b:2e:
                    01:97:8e:1d:2a:32:ba:ec:91:4f:6b:27:a0:6c:b8:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139038

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24
                  103.178.52.0/24
                IPv6:
                  2001:df0:5580::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:94:b0:a3:1f:47:a5:01:a9:15:d2:e7:43:b1:9b:81:45:97:
         82:3c:23:5e:2e:f2:67:d7:da:cb:5c:0d:8d:4b:0d:41:98:35:
         31:f2:42:dc:c9:3f:cf:46:53:17:ac:7b:d7:21:cb:61:4c:c7:
         0b:95:e0:d2:1a:8c:cf:43:ba:94:e6:8f:24:43:71:07:1b:9a:
         93:7d:d7:57:1a:a2:58:02:08:fd:62:34:80:87:43:67:5a:26:
         42:d5:ba:6f:0f:4a:38:c3:0c:e3:ad:f5:b1:cc:94:62:8f:9e:
         4d:cf:2d:0f:64:1e:b7:c5:90:2e:44:2f:c5:0c:5a:74:d5:d0:
         d4:32:c8:df:d2:a6:84:78:3d:43:fa:73:80:49:cd:36:36:ec:
         cd:99:46:59:a9:01:64:88:a2:d2:51:1a:5d:18:fb:2f:a1:5b:
         a8:35:12:74:a2:67:18:3b:5e:8d:19:88:86:9e:0a:91:1f:48:
         a1:7a:d0:71:e8:a1:0b:d5:c4:2e:2c:fb:bf:8e:bc:2e:0f:6a:
         37:41:1f:66:12:6b:d1:df:1a:cd:77:26:49:a7:4e:b5:ba:cb:
         52:94:22:de:74:8e:af:5b:f2:a2:36:cd:8a:45:15:eb:bf:3b:
         ce:3d:29:2f:e9:98:b7:73:83:59:db:96:03:5d:10:e3:3e:c3:
         72:65:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:53:24 2026 by rpki-client