This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer
File:                     bG1HsRFPLVgaghKAXxLDdH80r4M.cer (raw, json)
Hash identifier:          PG4wCElLnSF4N2qeTmqmupcMXdsFd6/2gJIyuQlUnEo=
Subject key identifier:   6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02826E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 31 Dec 2025 16:02:06 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 135882
                          IP: 103.78.252.0/22
                          IP: 2400:1140::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164462 (0x2826e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 31 16:02:06 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:71:83:22:b1:df:8b:91:2d:64:48:99:aa:
                    ef:12:54:e0:ae:eb:ab:8f:5e:69:6b:34:32:f7:e5:
                    05:ac:8d:75:fa:94:a4:26:7e:0a:88:97:04:e2:c8:
                    81:a8:18:a3:d8:78:3c:33:e0:0b:ec:15:c5:6b:70:
                    32:2e:e6:fa:34:0c:43:65:e9:57:85:27:1d:c3:ee:
                    59:78:d2:a9:5c:bd:c1:24:0f:ff:db:78:32:f9:12:
                    5e:dd:22:65:cb:42:06:25:da:4a:10:fd:98:2b:34:
                    7b:40:84:3b:53:9f:fc:28:30:6e:5b:86:f0:07:f3:
                    93:16:f0:a5:c6:22:c8:ab:b7:07:17:26:cf:81:7b:
                    81:76:03:a1:67:26:72:7d:7a:f0:a2:f0:7a:91:39:
                    08:74:6a:d0:7e:73:72:b1:fc:6d:e5:f5:e1:4f:68:
                    33:16:3e:f1:33:bb:0b:33:c0:75:5a:f2:f8:ed:79:
                    be:18:74:71:39:17:46:af:62:b5:11:2c:a9:bd:6e:
                    69:33:25:5c:96:3f:45:a6:25:41:18:b0:c8:af:5b:
                    2a:da:12:62:fd:fe:5b:1b:b3:42:e8:8d:1a:d8:a8:
                    0d:74:ac:41:08:eb:7d:1f:02:8a:cc:d2:b2:e4:60:
                    4f:fa:a2:f2:d0:12:05:fc:29:f6:4e:b1:84:69:16:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  135882

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.252.0/22
                IPv6:
                  2400:1140::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:4a:82:8d:da:62:9d:c9:39:a6:07:48:9c:13:14:cc:1b:1a:
         6e:6b:3d:b6:fd:99:8d:4e:60:6e:78:80:fb:f0:cc:41:10:14:
         38:c0:30:32:cd:f4:3f:ca:f3:fd:c2:39:6a:73:47:9e:3d:e8:
         12:b7:03:d0:9f:a0:49:77:58:2e:09:e2:99:af:25:e6:72:fc:
         fe:21:c8:99:41:3f:36:a2:08:a9:11:9e:93:94:76:bb:bd:03:
         5e:bd:58:a4:44:7f:66:9c:e7:9d:ee:9a:79:0d:02:a6:a9:63:
         43:a9:df:fb:05:48:19:2b:6e:02:be:9d:15:74:82:17:f3:6f:
         b8:73:bd:a9:c4:42:7c:ed:3c:f5:6a:9c:31:43:c9:70:2b:d4:
         0b:ee:dd:84:c0:4e:3a:21:85:d0:cb:52:2e:b9:b9:e3:03:b8:
         f5:8f:87:99:24:05:0c:ad:39:32:9b:78:4c:c0:e4:ea:e8:20:
         95:ff:c4:45:78:07:fd:42:b3:37:4c:1a:e5:cd:47:1f:1f:cc:
         41:c0:4a:14:ae:4e:6e:24:c8:c6:9e:d8:46:e4:a5:1f:0a:3a:
         fc:e4:67:09:9b:86:9e:76:95:1e:d8:52:0f:1f:e1:bf:f6:b7:
         63:06:86:00:40:48:61:e0:f8:a6:26:14:c0:3d:4e:38:9d:21:
         5e:7d:39:b6
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAoJuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTIzMTE2MDIwNloXDTI3MDMwMjAwMDAwMFowRjERMA8G
A1UEAwwIQTkxQzc2NzIxMTAvBgNVBAUTKDZDNkQ0N0IxMTE0RjJENTgxQTgyMTI4
MDVGMTJDMzc0N0YzNEFGODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDNHGDIrHfi5EtZEiZqu8SVOCu66uPXmlrNDL35QWsjXX6lKQmfgqIlwTiyIGo
GKPYeDwz4AvsFcVrcDIu5vo0DENl6VeFJx3D7ll40qlcvcEkD//beDL5El7dImXL
QgYl2koQ/ZgrNHtAhDtTn/woMG5bhvAH85MW8KXGIsirtwcXJs+Be4F2A6FnJnJ9
evCi8HqROQh0atB+c3Kx/G3l9eFPaDMWPvEzuwszwHVa8vjteb4YdHE5F0avYrUR
LKm9bmkzJVyWP0WmJUEYsMivWyraEmL9/lsbs0LojRrYqA10rEEI630fAorM0rLk
YE/6ovLQEgX8KfZOsYRpFtPhAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUbG1HsRFP
LVgaghKAXxLDdH80r4MwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUM3NjcyLzQzNzY0QkVDRjcyNDExRTZBQkYwMkIzQ0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDNzY3Mi80Mzc2NEJFQ0Y3MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9iRzFIc1JG
UExWZ2FnaEtBWHhMRGRIODByNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAhLKMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCZ078MA0EAgAC
MAcDBQAkABFAMA0GCSqGSIb3DQEBCwUAA4IBAQCpSoKN2mKdyTmmB0icExTMGxpu
az22/ZmNTmBueID78MxBEBQ4wDAyzfQ/yvP9wjlqc0eePegStwPQn6BJd1guCeKZ
ryXmcvz+IciZQT82ogipEZ6TlHa7vQNevVikRH9mnOed7pp5DQKmqWNDqd/7BUgZ
K24Cvp0VdIIX82+4c72pxEJ87Tz1apwxQ8lwK9QL7t2EwE46IYXQy1IuubnjA7j1
j4eZJAUMrTkym3hMwOTq6CCV/8RFeAf9QrM3TBrlzUcfH8xBwEoUrk5uJMjGnthG
5KUfCjr85GcJm4aedpUe2FIPH+G/9rdjBoYAQEhh4PimJhTAPU44nSFefTm2
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:49:40 2026 by rpki-client