This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/isQ8i2LLoieYw56lRmt0xBihqQc.cer
File:                     isQ8i2LLoieYw56lRmt0xBihqQc.cer (raw, json)
Hash identifier:          8hqbImzKFr65E3NbL+dr64CqogY89uzgmEFmXFY6XY8=
Subject key identifier:   8A:C4:3C:8B:62:CB:A2:27:98:C3:9E:A5:46:6B:74:C4:18:A1:A9:07
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0284D8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 08 Jan 2026 22:32:38 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 140268
                          IP: 103.149.117.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165080 (0x284d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  8 22:32:38 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=A9147A12, serialNumber=8AC43C8B62CBA22798C39EA5466B74C418A1A907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:1b:dc:23:4e:a6:01:9a:34:aa:62:49:24:
                    32:6d:11:d5:ac:63:c0:59:8a:99:3d:db:87:8c:49:
                    4e:40:77:d2:f0:ff:e3:96:f6:7d:20:97:49:ed:51:
                    9b:83:e9:9a:d4:23:f8:a0:28:e7:e7:a5:67:b6:62:
                    54:20:c0:5d:78:f5:6f:ad:80:cb:bc:bf:2d:3e:be:
                    25:10:8e:cc:8d:99:60:89:60:8a:d5:14:cf:c9:97:
                    b0:43:95:8b:a0:d5:a0:8d:6a:4e:28:53:9b:3b:02:
                    b3:4e:35:ce:3f:28:4e:a5:b7:c5:44:97:ab:53:63:
                    26:6d:88:df:a3:1f:c8:9b:f2:dc:52:79:5b:e2:0f:
                    1f:83:78:a6:79:39:cc:8b:e9:6c:0e:d1:2e:a4:7f:
                    c1:a8:ea:94:b5:cf:b1:52:ef:c8:6a:d2:a6:02:1d:
                    af:be:71:db:f7:cc:41:2b:ba:6f:17:1f:21:53:6d:
                    1f:8e:fb:7d:89:c3:ec:12:92:97:ea:8f:ac:46:dd:
                    e7:ce:63:e7:f5:9e:5c:ff:58:3d:63:9e:c4:25:79:
                    b5:d6:7d:42:47:d0:4a:b3:3b:59:d1:87:46:bc:15:
                    67:b7:d9:49:7f:23:58:96:76:a3:1e:41:f5:c9:36:
                    ba:b7:fb:db:c8:b7:be:2a:4a:1c:ef:1a:dc:37:63:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C4:3C:8B:62:CB:A2:27:98:C3:9E:A5:46:6B:74:C4:18:A1:A9:07
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9147A12/ED98DD6CECE111F0B538BA9C716F56BC/isQ8i2LLoieYw56lRmt0xBihqQc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  140268

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ef:de:ce:e3:3b:50:37:01:a9:de:0c:65:13:a2:13:33:b3:
         ac:e1:31:44:0b:59:f9:b3:bd:97:76:6f:a9:c8:2e:b2:22:92:
         7e:3c:3b:2d:b3:74:07:7c:30:e7:4e:45:73:54:24:8c:de:25:
         9b:c0:9a:7a:a7:52:69:6d:03:54:6c:b0:39:62:12:84:88:08:
         9b:39:5f:72:3e:b5:4a:67:09:47:4c:21:10:6d:47:06:50:34:
         0f:e8:92:a3:5c:a6:85:cf:7b:f7:dd:56:7c:6b:9d:1c:f8:1a:
         56:b8:45:93:de:2f:c5:8f:31:d6:ed:e2:2e:83:f0:68:2f:fb:
         06:2b:cb:f8:7f:14:fd:6e:78:7f:a3:0e:61:3a:06:37:d1:c4:
         43:ab:20:8c:12:07:5a:01:10:f7:8d:a5:f0:e2:80:4e:e0:89:
         da:f4:0f:77:91:c1:c6:72:43:bc:e2:b5:30:51:18:22:97:3e:
         31:ba:52:fd:0b:32:70:24:d2:68:14:b2:23:1a:ef:21:e9:36:
         3f:3b:fc:13:15:21:18:a7:89:54:f1:10:9b:f3:02:c2:eb:23:
         79:c2:5b:cd:3c:74:8b:34:e5:3c:fa:c4:29:26:b1:20:1d:48:
         65:b7:ff:12:a1:e4:a1:fc:f6:68:e4:63:5c:a5:28:06:02:58:
         05:d3:18:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 01:11:53 2026 by rpki-client