This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gL6TDjBkmxKs7o3EC1dat93mSUU.cer
File:                     gL6TDjBkmxKs7o3EC1dat93mSUU.cer (raw, json)
Hash identifier:          ECVroXIzFLjPIOBG4TRSKktP6W66YHYCKqLKOhC7Ino=
Subject key identifier:   80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027930
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 29 Nov 2025 01:46:23 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    AS: 151844
                          IP: 103.249.114.0/23
                          IP: 2001:df2:ff40::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 06:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162096 (0x27930)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 29 01:46:23 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A91E0C33, serialNumber=80BE930E30649B12ACEE8DC40B575AB7DDE64945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:04:45:c4:e4:e4:40:e1:1d:2c:e9:60:90:
                    d8:09:22:5a:0c:fc:05:c5:03:df:34:e1:19:58:d5:
                    f2:a8:e2:ac:d6:19:b6:b3:02:3f:80:e1:91:8d:d3:
                    27:53:dc:5d:17:9d:cd:df:38:4e:ea:ab:52:33:47:
                    b6:8e:fd:b1:5a:4d:b7:5a:32:69:12:49:e1:30:16:
                    44:c4:0d:e2:31:be:1f:2e:c5:a6:35:48:ac:64:22:
                    f5:4f:5b:b3:ff:e6:de:e9:ef:23:cd:aa:de:e2:71:
                    9b:87:4d:ec:99:89:0a:6e:8a:4b:33:1c:0d:dd:97:
                    7b:1d:50:0a:67:06:5f:fc:d7:b4:be:1a:78:14:49:
                    94:30:45:59:f1:9b:f1:07:91:c1:63:68:e5:81:9b:
                    7b:8a:f4:84:a1:f4:66:8e:89:19:a3:ab:de:1d:dd:
                    99:35:75:09:bd:91:5e:08:9a:bc:55:30:ea:c1:ea:
                    99:2a:fa:f5:9d:2a:a5:f8:3d:4d:30:64:2e:a8:4a:
                    3f:5e:8f:1b:d0:59:e0:74:b1:6d:54:a2:ad:31:80:
                    7a:5d:46:1b:69:38:fb:1f:94:76:ed:df:3c:5d:2e:
                    ff:91:b3:ea:8e:72:6a:43:e4:0b:29:b7:d0:bd:48:
                    f1:97:e8:a4:8e:b6:66:06:72:07:92:06:ed:a8:7f:
                    06:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BE:93:0E:30:64:9B:12:AC:EE:8D:C4:0B:57:5A:B7:DD:E6:49:45
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E0C33/54265F34668711EEB93D3F6CC4F9AE02/gL6TDjBkmxKs7o3EC1dat93mSUU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151844

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.249.114.0/23
                IPv6:
                  2001:df2:ff40::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:bb:90:cd:63:a1:65:7f:34:22:cb:86:db:04:f3:2e:7b:9c:
         cd:28:64:45:81:ae:b9:82:9e:dc:61:b4:16:81:3d:93:7c:fd:
         fd:19:21:eb:e4:34:69:5b:5e:92:2f:e4:17:65:d1:f2:e2:ff:
         d6:e6:f7:6e:bf:8f:5f:f2:0c:5d:39:e6:47:b6:d1:17:76:b3:
         df:6e:96:39:44:ff:d5:7e:e2:fc:8a:56:0c:fb:2f:f0:0b:76:
         c2:a7:8c:ef:fe:9a:f0:35:23:de:3a:08:fd:ae:89:ec:2a:8d:
         94:89:42:ca:72:be:fb:dd:29:7d:b5:f9:ff:23:03:42:e1:79:
         e0:13:4c:e9:69:9f:5e:d3:2b:ee:ec:22:cf:84:2b:2a:e8:f9:
         62:15:ab:5e:da:3e:d8:bb:46:9f:24:da:a0:c8:15:7a:21:56:
         02:40:90:07:a1:7e:99:91:ff:85:19:1e:3c:39:6b:1b:02:2c:
         13:9b:6d:a4:d5:ed:f9:51:dc:43:b7:ca:c2:69:32:7f:4c:23:
         4b:3d:29:44:25:e6:32:30:de:53:ca:0b:ae:7d:d7:32:60:76:
         3d:15:d6:86:59:92:b5:e9:94:23:11:bb:ff:44:16:a9:38:55:
         f2:73:fd:70:01:a6:15:62:56:15:d8:cc:d9:42:6e:2e:a1:f4:
         8f:75:4f:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:32:40 2025 by rpki-client