This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
File:                     eDj_-XHbpCvN2NjzdFXwsoSbedc.cer (raw, json)
Hash identifier:          9scw0tTbVkeyoj4XAwCsfeHG2/FbfsfXb7OedAQ3fM8=
Subject key identifier:   78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028338
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 13:52:40 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 152152
                          IP: 210.79.170.0/23
                          IP: 2001:df3:38c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 09:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164664 (0x28338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  2 13:52:40 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A919A9C8, serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:5b:56:2f:2f:38:9c:2a:4a:b0:41:13:53:
                    df:f7:2f:d0:1f:e8:85:67:88:d3:0a:60:e8:60:fe:
                    c6:2d:cb:b9:e7:f4:81:f1:d9:ff:cc:ef:8f:65:12:
                    31:55:41:f3:cb:b5:97:16:0b:bf:4a:a6:dd:8c:b3:
                    91:56:99:e0:be:7f:8f:c5:7b:20:36:a9:76:d8:1d:
                    44:18:44:a2:30:1d:e7:b7:6a:9b:76:d5:1b:79:1d:
                    55:dc:0c:26:01:b2:9b:ea:f2:c2:39:38:81:a2:50:
                    6b:a2:dd:da:27:52:81:d6:6e:84:a4:97:4e:f5:28:
                    42:51:22:90:49:10:ee:f9:28:7d:f3:7c:cf:61:cb:
                    95:15:29:66:b4:44:76:8f:78:f6:f9:3f:bd:45:3c:
                    33:62:b2:48:2b:fb:9a:e4:1d:69:39:d7:ea:5f:cc:
                    60:0f:f5:57:d9:16:e9:a2:0c:47:fa:3d:84:7a:f6:
                    d7:df:cc:46:78:36:44:ec:73:0f:3d:45:9e:85:ce:
                    61:9b:df:34:d7:bd:a8:ac:7a:83:03:4e:c2:11:df:
                    be:dd:64:c9:0f:6f:9e:9d:5a:8a:2d:5c:9e:5f:15:
                    79:22:61:85:e3:17:e2:58:7f:e7:7c:f9:20:25:ac:
                    2d:e6:73:a0:8e:37:c6:7d:09:f0:eb:cb:ce:6b:a9:
                    b9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  152152

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.170.0/23
                IPv6:
                  2001:df3:38c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:b3:09:6b:35:02:11:8b:68:37:dc:5b:25:aa:67:ff:69:ea:
         11:23:7c:ae:b0:e8:6a:a5:a6:d2:ee:a3:88:32:c4:b5:47:ca:
         16:9f:ab:47:9e:dd:90:7f:b0:96:c2:7d:b5:0a:b3:27:22:4f:
         21:2d:e9:44:f1:de:cf:7a:46:ad:9c:c7:ab:5d:e8:1d:13:2f:
         a1:19:94:ca:92:a4:eb:67:ef:01:b7:6c:2c:b7:fa:56:ea:88:
         3d:71:b4:fb:d0:a1:aa:8a:33:e7:27:a5:60:55:99:37:60:50:
         77:0a:6b:d5:b7:8d:05:99:db:47:dc:89:59:be:80:e2:61:32:
         bc:cf:e6:03:83:e7:f8:5c:30:38:f6:60:b4:6f:01:6d:c6:27:
         c7:c1:d6:ea:e6:c7:75:8e:a6:9e:4d:70:40:c0:be:bb:4a:9c:
         7a:3d:ea:e6:8c:53:e7:17:6d:b3:d6:30:64:de:3d:fb:5d:09:
         a3:9b:15:43:af:da:b5:64:03:1a:9a:c2:76:9b:fc:f8:0a:ba:
         88:ab:9c:72:53:12:9d:41:79:f4:2d:8d:ab:4e:3f:9a:ce:88:
         03:ef:6c:a2:2b:ba:e8:9f:1e:96:b7:73:a1:db:00:49:e3:99:
         57:d8:a3:b8:6c:39:71:39:bb:73:8a:ff:1f:75:b4:3c:1d:a5:
         4e:3f:99:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:19:20 2026 by rpki-client