This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer
File:                     f30yDyoH5DPdvf4oV_XTGTVFF7k.cer (raw, json)
Hash identifier:          SiBtN+5zmIwgefOKEhn+gAnzeVKYxEbwRLXI3iu6AYU=
Subject key identifier:   7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02769B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 20 Nov 2025 14:02:05 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    AS: 55854
                          IP: 103.237.132.0/23
                          IP: 103.241.105.0/24
                          IP: 202.74.37.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 06:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161435 (0x2769b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 20 14:02:05 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A914877B, serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:28:fb:e2:3e:29:df:7e:67:06:a6:9e:05:
                    4b:7b:95:1d:26:de:6d:2d:f1:03:39:bc:51:46:94:
                    f0:34:90:f7:35:55:78:df:24:63:f7:14:7a:fe:72:
                    4e:ea:3c:e3:12:b7:bc:67:13:f0:9e:ac:ae:11:47:
                    ff:09:66:aa:7c:b4:9f:46:bf:a3:ab:ed:fb:f2:cb:
                    fd:0a:f8:77:1d:d7:24:a7:a6:89:28:3f:00:05:71:
                    67:25:e8:d8:a4:56:16:fb:69:e7:d1:20:8b:06:7e:
                    ae:ee:63:5d:a4:56:30:8b:82:74:09:29:ff:4d:d3:
                    d0:5a:8e:15:69:5c:ce:84:1e:54:d7:49:74:4f:b3:
                    e8:33:3a:b9:db:bf:f9:1d:fc:94:c3:6c:dd:05:74:
                    6e:0a:e6:c6:fb:7e:40:8b:45:eb:61:6b:a9:28:3b:
                    36:79:1a:b6:a4:98:d1:d6:ae:8f:8f:1c:c5:c6:94:
                    0f:2e:90:29:12:1a:d2:e8:2c:35:66:24:d0:03:c0:
                    84:07:b8:a3:34:ad:7f:91:73:07:8e:13:ad:98:89:
                    f3:74:b4:fd:30:0b:f5:b5:fe:ba:de:69:be:7d:26:
                    67:62:a1:c0:c8:85:8c:c9:42:e4:0e:32:85:cf:48:
                    90:b8:a5:b2:01:e5:6f:f3:dc:7a:d8:1e:93:88:6a:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55854

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.132.0/23
                  103.241.105.0/24
                  202.74.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:3c:f2:64:eb:33:45:66:ea:a1:37:aa:67:5a:61:66:2d:fa:
         2f:83:f2:ac:f7:f4:54:84:14:0d:f1:68:5d:fa:c7:d3:42:43:
         af:d6:8b:ef:7a:63:0d:d2:ca:fe:62:d0:c8:9a:da:82:e9:f8:
         14:ca:64:f5:06:c1:85:47:e8:68:e2:cf:d0:07:8b:f9:97:d8:
         84:00:27:3e:81:e3:29:be:b8:10:ec:97:47:19:b0:f5:17:69:
         67:f2:2e:82:93:cf:24:75:c3:a0:6e:97:d2:3f:fd:82:95:d3:
         c4:f5:1c:80:60:6e:c5:a7:db:96:0a:cc:49:be:f1:72:f7:25:
         b5:48:77:6c:e5:b8:85:d8:fe:e2:dd:d1:6a:ac:b9:e4:c7:4f:
         8a:4c:21:8f:c8:10:6b:63:e9:38:39:09:4f:51:67:39:69:96:
         a6:61:c8:76:e7:de:81:d8:cf:60:05:3f:66:8b:a0:6d:96:55:
         05:d8:b2:c8:b1:0f:0d:c9:0b:ed:9c:c8:45:00:c5:17:9d:7a:
         f1:91:9f:e9:59:8f:08:02:99:d7:4e:9b:9a:ac:ba:ea:4d:a0:
         36:5c:4e:61:e9:91:1d:e7:19:7f:d3:35:52:69:19:20:bd:7a:
         16:10:51:70:27:94:91:57:72:73:2b:a2:30:42:06:02:b2:0e:
         4b:fa:f5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:33:33 2025 by rpki-client