This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer
File:                     ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer (raw, json)
Hash identifier:          aDGkckgexqR0tbuteGOSFK/VcG4DAIsNUPCGhRjk20o=
Subject key identifier:   7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027B89
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 Dec 2025 22:53:40 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    AS: 139730
                          IP: 103.144.68.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 12:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162697 (0x27b89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  3 22:53:40 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A919A285, serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:42:e7:b9:b4:89:cd:93:92:a0:2c:ba:85:68:
                    32:4d:40:6f:4b:f6:a1:39:d1:44:6a:3d:6e:74:3b:
                    4c:78:0f:26:1e:25:62:e9:29:10:03:f2:41:93:73:
                    b8:08:4a:3f:af:dc:b7:70:91:bd:68:d6:69:37:a7:
                    c9:82:3f:b1:b0:5d:fa:18:17:ec:17:8e:9f:31:dd:
                    b0:51:4a:72:d7:8a:fa:79:38:9f:d7:07:3f:68:23:
                    b5:ea:75:4a:cf:1b:1e:8c:14:09:ce:4f:64:7d:77:
                    a1:52:80:dc:95:59:4f:08:9c:d4:a2:2b:c3:f7:2b:
                    5a:5a:d9:83:fe:ad:e0:42:5c:e4:60:14:a1:c6:c0:
                    2c:2e:18:49:8b:93:16:08:2a:d6:9f:77:a3:0b:7f:
                    d4:58:84:fc:20:f2:78:2c:f3:12:d4:90:73:42:e3:
                    cd:6b:19:b2:fc:19:03:ac:06:72:b3:fe:cb:d4:ee:
                    68:b0:b4:f3:4d:f8:12:10:35:0b:31:8c:6c:ae:7b:
                    95:fe:5f:13:70:68:cd:68:df:7c:4e:7a:80:23:7d:
                    ac:8a:eb:d4:08:df:72:59:24:09:f3:0a:8b:89:e5:
                    28:25:42:88:ef:36:66:37:db:e2:94:d0:ab:26:09:
                    63:90:63:b6:0b:32:08:42:dd:8b:3a:b4:7e:00:a4:
                    8b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139730

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:d8:2b:0c:81:88:ae:c4:dc:a9:f7:7d:cb:c3:03:40:2b:40:
         6a:db:f5:24:e2:cc:91:4a:08:5d:66:6e:a3:0e:74:39:3f:55:
         a7:63:32:1e:78:91:8c:fe:88:0a:df:b0:c6:5f:b7:77:be:fd:
         54:90:66:a1:76:a7:e2:20:f0:71:45:5a:e8:96:79:b9:dc:ce:
         87:80:26:3d:f7:0d:cd:f8:ab:50:d6:74:84:f1:15:a6:b7:12:
         04:e5:60:3f:c8:9b:62:9b:ce:7d:82:02:5b:99:3e:a5:bd:3f:
         b2:e5:46:f6:bc:36:58:1d:74:09:ee:4f:7b:8b:86:e9:9b:e5:
         fd:d4:cd:a6:4b:48:79:2f:fb:c4:d6:9f:11:12:83:b3:c8:97:
         53:69:69:d0:8d:4e:2a:80:46:2f:0a:0e:4c:03:26:94:fa:a2:
         e1:b1:07:6c:36:e2:73:63:25:da:7a:cd:86:f7:dd:a3:39:da:
         0e:84:e4:60:1e:1b:da:8a:c2:db:66:98:78:d9:6b:1b:44:36:
         b3:a1:36:cf:62:35:30:ab:25:91:18:81:ef:2d:cb:35:47:30:
         a5:5f:c9:1a:a0:6f:82:e8:05:53:70:35:1b:72:34:f9:e8:7a:
         91:59:9a:dd:b5:32:e0:31:f1:51:bb:5e:5e:0b:94:91:60:09:
         36:c4:a2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:38 2025 by rpki-client