This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
File:                     hYu8kCwHf24DE67cSds25v7yNLI.cer (raw, json)
Hash identifier:          00mO6RCOtWYMT5/HFtvxdsNTB4ar+IyP2lKxck7gF3E=
Subject key identifier:   85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0281BA
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 30 Dec 2025 12:19:24 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 142551
                          IP: 2001:df6:81c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164282 (0x281ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 30 12:19:24 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:63:c6:29:1d:52:e5:6e:4c:06:2c:72:96:
                    8d:1e:6d:25:5d:5f:1f:a6:48:ee:da:d4:71:54:2b:
                    4f:90:a5:10:94:6f:51:1b:d7:6f:b0:8d:90:c2:ab:
                    17:52:26:53:ba:53:b3:4d:8e:e8:fe:8a:67:eb:12:
                    41:aa:d3:6b:7d:84:62:68:79:03:5d:bf:0b:60:e9:
                    c8:ad:51:35:51:fc:8a:2f:e0:fa:7e:ae:fc:cb:c9:
                    e7:eb:5f:54:db:d3:4f:c4:48:f9:88:51:a7:d5:dd:
                    c3:d0:d9:0e:b6:84:a9:34:0d:ac:89:11:96:df:c4:
                    11:2b:2a:06:f7:23:06:91:b3:ca:21:d5:64:78:eb:
                    5d:e2:1f:77:30:12:c8:9f:25:17:38:bf:f3:b5:bf:
                    2c:53:89:3e:21:e3:6e:79:29:c2:24:44:05:da:3a:
                    7d:1b:08:27:b1:4e:95:13:c5:64:10:30:de:70:e6:
                    75:1a:f8:4d:8c:26:c9:23:3b:5b:db:98:4a:74:4c:
                    6b:a8:ff:e2:0c:29:62:a2:f6:6e:71:33:fd:52:a2:
                    c0:7d:5a:2c:1c:11:67:b0:11:bf:42:7b:46:06:21:
                    3e:98:1f:ba:52:ad:80:55:56:78:42:35:5b:c5:fb:
                    9b:57:d2:4f:ff:6e:14:c5:2a:49:cc:7e:c3:c5:53:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142551

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:81c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:7a:e4:56:3e:29:0d:2d:af:13:3a:6d:8b:ab:0c:92:bd:e7:
         0c:a0:29:1d:ad:8c:10:87:14:bf:18:a4:a8:ef:6e:c0:39:1a:
         4a:d1:f0:6a:35:47:f5:04:90:42:06:a0:c9:15:50:f8:34:d4:
         00:83:d5:03:6d:5e:41:52:bb:5f:5b:92:92:b0:a9:fa:f1:04:
         e5:ac:10:32:ab:9a:6c:36:2a:94:45:97:0b:50:e5:8b:36:5b:
         92:6a:bf:7a:53:3c:ff:21:55:f9:85:59:c6:8f:5e:1f:c9:03:
         b9:ff:6a:26:6d:bf:35:14:51:1e:21:b4:7f:86:0c:c8:d2:b3:
         ae:da:06:f9:1b:24:fb:e3:88:1d:91:10:6f:69:51:4c:d7:af:
         83:1b:bd:8e:11:77:e4:c3:cb:97:b2:7a:5a:cd:2d:b3:df:f0:
         9e:e0:0c:bd:70:57:92:dc:d4:68:f8:60:ec:80:fc:44:33:6c:
         54:04:0b:42:88:59:3b:2e:f0:44:36:46:9e:a6:74:51:a2:8e:
         df:51:3a:1b:d0:a1:98:55:a4:f6:26:91:a7:c4:ca:50:60:b2:
         e8:7e:02:ca:f4:38:c7:e5:97:5f:73:ed:62:9e:ae:3a:f8:97:
         b4:cb:0d:08:76:8d:ab:e3:bd:a5:7a:e3:e0:89:c4:7f:b9:e3:
         24:0b:95:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 01:12:08 2026 by rpki-client