This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer
File:                     UyhhbneUVH65zpK0qPBF5LLMwPw.cer (raw, json)
Hash identifier:          W4EX76ckPbtfX65gGFcCDKduT04XfODztmGGj3UVwAc=
Subject key identifier:   53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027393
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 06 Nov 2025 15:03:41 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 134976
                          IP: 103.204.100.0/22
                          IP: 202.53.156.0/22
                          IP: 2400:6440::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 10:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160659 (0x27393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  6 15:03:41 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A91847A0, serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:16:eb:f2:b5:ff:93:b9:29:cf:ea:82:3b:
                    9c:25:68:ff:9f:6a:6b:cb:d5:56:09:39:a6:73:11:
                    37:b5:72:12:ec:13:4c:01:c8:93:2a:f5:9d:19:1a:
                    75:df:d3:f7:8f:9b:72:09:cd:9a:81:2f:00:0c:39:
                    cc:36:02:d1:dc:7e:03:dd:90:85:df:3b:17:aa:33:
                    5c:ed:03:e1:b7:a2:6e:e3:3a:1b:24:fb:9c:21:d4:
                    a5:e6:75:86:f9:36:7d:78:b1:66:74:50:5c:cb:7d:
                    30:6a:68:dd:e5:f4:d4:9d:be:2d:57:28:46:c6:58:
                    35:56:48:ed:ca:9b:98:8a:5f:7c:e0:69:d5:d6:c0:
                    0b:b3:da:1a:62:28:37:5c:9c:55:1f:ec:07:09:d8:
                    a8:df:97:55:e3:20:ca:74:1e:b4:c2:94:73:2b:06:
                    7e:6e:2e:95:82:40:58:ee:1c:dc:37:da:77:79:37:
                    21:97:0f:10:76:7a:20:6c:78:99:62:44:60:73:56:
                    27:89:aa:03:ad:56:75:51:59:c9:79:c8:c0:2d:5f:
                    89:7f:29:1a:28:57:84:44:18:49:95:b3:42:eb:81:
                    d8:24:d2:57:e7:fb:00:aa:c6:cd:4f:da:8f:77:d8:
                    1d:9c:92:7f:10:34:13:2a:bf:67:b7:9a:38:6b:e4:
                    3e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134976

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.100.0/22
                  202.53.156.0/22
                IPv6:
                  2400:6440::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:db:7b:43:f1:e0:2c:c4:4a:7c:8b:1d:fc:f7:56:07:b5:68:
         cb:ed:36:e3:9b:d8:bd:d2:3d:0e:52:ee:e7:4e:29:6a:52:bc:
         51:20:26:47:0c:e7:d6:fe:28:5b:1e:32:05:88:63:b0:75:e8:
         0f:36:4d:14:ae:d8:29:6b:0d:76:f9:e2:ec:4c:5f:6e:43:c8:
         dd:14:2c:25:7a:c0:90:78:c4:9c:d9:ca:4a:20:a9:74:b4:47:
         af:67:43:fc:16:5a:eb:f1:2d:29:56:a2:74:41:8d:55:04:9e:
         df:13:6f:f1:6c:76:95:a4:02:2b:f3:12:1a:36:18:00:a3:82:
         0c:7c:fc:76:6d:71:00:ed:10:59:e6:7d:ca:5e:cd:c5:16:af:
         2c:0c:fe:1f:cf:e8:ce:97:1f:d1:ea:01:3f:b8:32:b8:aa:af:
         d2:fd:61:0f:a8:a1:26:fe:62:f0:05:86:7c:3e:6c:aa:6e:75:
         ed:33:48:af:02:ee:27:ec:cd:67:9d:2b:40:22:9c:61:e7:10:
         cf:6f:03:c7:2e:90:3d:19:ca:7e:ef:28:a1:df:68:b6:0b:01:
         34:ff:fb:ce:8b:fe:19:9a:07:01:73:8c:23:28:c4:69:77:4b:
         29:cf:f2:97:fe:9e:34:f1:8f:03:e9:98:ab:db:aa:d7:60:c8:
         24:d7:7f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:24:24 2025 by rpki-client