This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
File:                     VU9dfGbsUOhKiru6mWgXfkcp02Y.cer (raw, json)
Hash identifier:          STtIGdptg3FOp68Tgk0eYQ3t1GFOf3UU2FY3bGh8EU0=
Subject key identifier:   55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028709
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 18 Jan 2026 14:11:41 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 135608
                          IP: 2001:df4:ccc0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165641 (0x28709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 18 14:11:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91E8BE3, serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:3f:2c:48:0a:c4:b0:75:9a:f4:e2:c0:02:
                    e2:21:9d:4f:d3:4c:8f:0a:df:60:9c:c0:cc:a6:c2:
                    91:a7:d1:a8:1b:71:cb:78:36:84:26:8c:40:9b:cd:
                    7a:2f:c3:27:d0:5b:af:f7:89:b9:99:f1:a4:c1:83:
                    18:55:76:75:c1:7c:8d:8a:d4:45:05:ed:a9:8c:ae:
                    e7:a1:06:ae:af:71:b6:f1:60:91:d1:0f:d2:7f:d7:
                    ee:39:78:67:a8:02:33:39:a4:bd:2d:29:ae:8f:25:
                    75:90:3c:4c:eb:76:15:ef:7a:6e:18:02:1e:89:30:
                    83:75:1d:c5:d0:d5:e9:f0:0c:95:2c:7b:6e:9b:3b:
                    76:25:77:d1:b1:01:25:2c:2d:50:3d:3f:00:e6:f3:
                    99:af:8c:37:7a:91:4f:d7:e8:98:b7:da:69:23:dc:
                    dd:53:22:2c:0a:a8:3b:9e:c7:4d:c8:89:5e:0d:20:
                    a2:1f:a3:e6:a3:e4:dd:e9:c4:5c:e9:35:45:c6:a0:
                    cb:f4:62:f9:89:17:fd:e8:1b:b9:cd:13:05:fd:d3:
                    78:97:58:a8:62:ed:87:fd:44:60:dd:26:d6:62:de:
                    c9:90:e1:1e:ba:b5:d3:5f:59:c2:71:0f:a2:19:61:
                    41:65:c4:8a:3a:87:53:a3:60:af:ea:15:65:25:5a:
                    22:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135608

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:ccc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:7d:e7:55:04:ea:eb:7a:c8:92:d4:6a:89:00:3b:d8:63:11:
         16:cb:38:0c:ea:94:af:50:4a:93:c5:b2:4e:0e:b8:b6:ff:e1:
         b7:f3:d5:2b:0e:c7:bb:6d:6d:28:1f:70:2e:9b:59:d5:73:48:
         6e:35:dd:d4:3d:b9:df:b6:68:07:40:dd:9e:5b:34:2d:5f:84:
         c8:8b:a6:13:5f:17:70:6c:6d:1d:b6:23:a2:18:8a:64:b2:20:
         7f:01:02:08:c1:53:08:ca:e7:00:7f:7d:60:62:5f:2a:4f:64:
         51:0d:12:d7:a4:b8:26:41:67:64:96:35:ed:fc:51:23:af:45:
         fc:8a:03:af:7f:ff:0c:6f:ca:ec:df:16:2c:e1:d0:67:ac:eb:
         1b:85:cb:b0:c8:0c:83:e8:e3:e3:05:95:82:d2:ef:92:b3:a7:
         4e:41:81:93:90:3e:0d:d1:56:29:09:33:8d:52:e2:aa:f6:af:
         7b:f0:44:de:d7:76:bc:ff:15:24:f5:6a:f0:3d:1a:25:9f:4e:
         70:72:61:da:5e:ef:66:0f:9a:25:4f:aa:da:e9:eb:d6:c2:6c:
         4c:07:4b:00:a4:4f:e5:04:92:c0:4d:5a:11:72:e2:07:f0:b9:
         36:7a:27:06:a7:d5:93:88:b2:4d:eb:99:b8:ba:e3:bd:9f:71:
         d8:86:38:ea
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAocJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDExODE0MTE0MVoXDTI3MDMzMTAwMDAwMFowRjERMA8G
A1UEAwwIQTkxRThCRTMxMTAvBgNVBAUTKDU1NEY1RDdDNjZFQzUwRTg0QThBQkJC
QTk5NjgxNzdFNDcyOUQzNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2kz8sSArEsHWa9OLAAuIhnU/TTI8K32CcwMymwpGn0agbcct4NoQmjECbzXov
wyfQW6/3ibmZ8aTBgxhVdnXBfI2K1EUF7amMruehBq6vcbbxYJHRD9J/1+45eGeo
AjM5pL0tKa6PJXWQPEzrdhXvem4YAh6JMIN1HcXQ1enwDJUse26bO3Yld9GxASUs
LVA9PwDm85mvjDd6kU/X6Ji32mkj3N1TIiwKqDuex03IiV4NIKIfo+aj5N3pxFzp
NUXGoMv0YvmJF/3oG7nNEwX903iXWKhi7Yf9RGDdJtZi3smQ4R66tdNfWcJxD6IZ
YUFlxIo6h1OjYK/qFWUlWiJlAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUVU9dfGbs
UOhKiru6mWgXfkcp02YwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUU4QkUzL0VFRUY3RkVBQkY5QzExRUY5REE4ODI4MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFFOEJFMy9FRUVGN0ZFQUJGOUMxMUVGOURBODgyODJDNEY5QUUwMi9WVTlkZkdi
c1VPaEtpcnU2bVdnWGZrY3AwMlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhG4MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9MzAMA0G
CSqGSIb3DQEBCwUAA4IBAQBrfedVBOrresiS1GqJADvYYxEWyzgM6pSvUEqTxbJO
Dri2/+G389UrDse7bW0oH3Aum1nVc0huNd3UPbnftmgHQN2eWzQtX4TIi6YTXxdw
bG0dtiOiGIpksiB/AQIIwVMIyucAf31gYl8qT2RRDRLXpLgmQWdkljXt/FEjr0X8
igOvf/8Mb8rs3xYs4dBnrOsbhcuwyAyD6OPjBZWC0u+Ss6dOQYGTkD4N0VYpCTON
UuKq9q978ETe13a8/xUk9WrwPRoln05wcmHaXu9mD5olT6ra6evWwmxMB0sApE/l
BJLATVoRcuIH8Lk2eicGp9WTiLJN65m4uuO9n3HYhjjq
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:28:15 2026 by rpki-client