This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer
File:                     Wr7NjqrTfqV665OfLAsUKXSEH4o.cer (raw, json)
Hash identifier:          NDRsyqLCAABAP9xx3t8gLwpUuT8o/f44DL9pfEaTzv4=
Subject key identifier:   5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028393
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 04 Jan 2026 13:42:40 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 153598
                          IP: 203.24.49.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 09:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164755 (0x28393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  4 13:42:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:db:49:39:17:7d:7d:2e:ff:b9:bd:8e:53:a3:
                    87:90:f3:3a:fe:1e:c1:66:d7:c5:40:7b:97:0b:b9:
                    ec:cc:45:72:5d:51:a2:9c:a5:c7:14:4f:a8:f1:eb:
                    9d:f7:0a:90:af:09:7a:2e:1a:e9:ec:70:48:6c:52:
                    92:8b:3f:9c:6a:06:2c:de:b4:58:a8:c0:79:6a:29:
                    e7:dd:e7:39:69:30:1a:3b:cb:3c:29:10:fd:5a:18:
                    33:10:03:83:3b:e5:23:f7:17:56:a1:69:de:55:7b:
                    bb:0b:58:aa:b7:e4:ed:92:06:94:ec:3f:a4:7f:93:
                    16:35:8b:a7:34:f4:a9:08:3c:5f:ab:2e:fb:b6:1a:
                    26:d1:a3:13:bb:c2:95:a9:bb:4e:9d:55:c3:4c:a5:
                    96:bd:b3:7f:30:3f:b1:f6:70:fe:99:dc:d9:1f:5b:
                    41:7f:66:76:dc:08:24:50:b7:f7:9d:2d:cd:32:a3:
                    47:73:e5:72:59:10:8c:74:36:af:a5:8e:c2:d0:d3:
                    23:55:ac:69:02:20:86:14:5e:92:f0:9b:7f:3e:d5:
                    48:2d:af:68:38:36:1b:bc:45:0f:9a:f1:f2:5b:9b:
                    39:18:b2:87:c7:1f:3c:80:51:03:6c:20:da:7e:c2:
                    16:70:ec:8d:37:8e:33:01:7f:61:c9:88:6d:6b:17:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153598

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.24.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:69:1e:1d:8a:33:d1:04:9f:52:47:0b:e9:55:4b:46:ea:46:
         51:4a:da:64:05:c7:21:8c:78:e1:a9:24:30:08:40:2b:55:6e:
         f8:33:ab:da:59:53:07:c0:ef:ad:f9:47:4a:f1:ad:2d:10:c9:
         f6:b6:43:28:34:66:8b:c5:b2:00:ce:0e:72:6f:21:36:f6:6a:
         43:53:d8:fd:53:8f:82:e6:23:52:be:03:91:f3:28:cd:50:e5:
         ca:96:86:ce:5f:a1:02:46:5e:77:b3:c2:b3:e0:b0:3e:5e:54:
         06:ca:07:cf:b5:30:56:4c:96:f2:2a:1c:a5:ce:77:33:ec:fc:
         38:6c:1f:b3:f5:f9:25:ab:f8:59:27:03:4f:4a:d7:e4:ec:2d:
         14:d4:ef:26:8d:f4:59:fd:14:83:24:c8:07:8f:da:17:51:27:
         01:14:2f:40:e4:1f:be:85:d0:19:aa:5a:50:85:a0:11:4d:a0:
         c2:e8:7f:be:ec:4e:92:e3:04:3f:da:e9:0c:57:45:88:46:9b:
         41:7a:42:0a:83:f3:02:41:df:1f:d7:44:67:92:29:ff:09:ef:
         69:b9:c3:fc:1d:fa:91:44:bc:01:67:b1:01:5b:fb:19:84:47:
         34:a8:78:ea:fb:69:0f:6b:19:ef:5a:e3:8b:5c:fc:40:cd:6e:
         23:5a:4d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:24:25 2026 by rpki-client