This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/muAi3ZD6yvK8XHN26KhM5QUeiWo.cer
File:                     muAi3ZD6yvK8XHN26KhM5QUeiWo.cer (raw, json)
Hash identifier:          uHPJfN0Q1xLv73ZlHOAz8l7lIMUEpMYqrdf7AIwq8GM=
Subject key identifier:   9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02863B
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 14 Jan 2026 13:41:29 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 134489
                          IP: 103.161.48.0/23
                          IP: 2407:1b40::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165435 (0x2863b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 14 13:41:29 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A919271C, serialNumber=9AE022DD90FACAF2BC5C7376E8A84CE5051E896A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0a:5a:5b:8f:da:51:a4:9d:95:95:72:3a:b5:
                    e9:44:77:91:a6:99:57:7b:7f:0d:c0:e8:66:ba:78:
                    db:c4:ea:d2:01:f8:7f:54:42:8b:20:b0:1c:fb:1b:
                    cf:06:03:af:60:fc:66:e9:d3:de:d4:46:2c:50:31:
                    83:50:59:32:62:25:14:18:be:b5:87:fb:98:4a:01:
                    53:21:2c:09:62:55:29:40:93:21:08:1f:a9:09:68:
                    64:98:0c:9a:62:9b:e9:f7:67:38:e0:ce:50:6c:3c:
                    7c:71:27:49:ce:eb:f1:84:a6:83:dd:15:f6:3a:38:
                    f8:1a:fc:fb:28:86:35:a7:d8:38:48:66:a4:d7:89:
                    69:f6:71:a3:b3:3b:88:f8:9d:d3:e4:f6:fa:ea:3c:
                    19:41:3d:82:c5:bf:0c:e7:67:bf:72:02:81:91:c5:
                    82:83:4f:22:59:1d:24:91:c8:4e:8e:3a:63:1b:fe:
                    56:e3:15:70:b7:81:68:0b:1b:70:54:43:b9:89:b2:
                    cb:4a:08:9c:95:80:2b:8e:cf:46:a5:75:87:c8:af:
                    b7:59:00:73:8a:06:4b:97:23:34:cd:ce:c8:8a:15:
                    e3:38:30:7b:0f:f5:d6:b0:94:09:b1:1b:ef:02:44:
                    20:03:a9:d8:a1:d9:56:92:fc:90:cc:1d:8a:6d:f0:
                    6d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E0:22:DD:90:FA:CA:F2:BC:5C:73:76:E8:A8:4C:E5:05:1E:89:6A
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919271C/EDF13C60503C11EBA2DF325FC4F9AE02/muAi3ZD6yvK8XHN26KhM5QUeiWo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134489

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.48.0/23
                IPv6:
                  2407:1b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:b2:29:8b:19:f8:3c:1f:2d:5c:92:af:22:7b:2a:58:71:e8:
         c6:3b:25:f0:a2:15:b5:08:8b:73:a9:cb:e4:f3:2e:7a:12:88:
         86:ec:02:31:f3:b7:17:27:cd:cb:aa:44:69:78:7a:3e:a8:95:
         19:75:d1:8e:c1:73:c8:2e:fc:69:6d:72:8a:95:16:e0:7d:8e:
         9f:4a:4d:09:a7:19:ba:a1:42:65:fa:f3:f7:2a:26:3e:4d:33:
         fc:81:a5:1f:ec:39:c6:36:ab:b6:8f:39:24:96:81:dc:cb:c6:
         c3:ec:38:5d:e3:6e:4a:36:cd:dc:09:b3:24:90:9b:2d:a8:f8:
         f5:b7:11:db:75:e5:9b:45:85:92:d1:3a:f6:fe:ff:b3:2c:06:
         4c:a3:6a:24:22:3c:66:cc:e4:27:47:db:52:09:28:2d:d1:cb:
         4f:f8:b4:ea:73:b1:f3:47:0b:49:a1:0b:22:b2:8c:3a:e7:3c:
         6b:37:0d:e8:2b:38:40:a0:3f:7f:d5:3a:55:86:c0:5f:8a:05:
         af:9f:72:a6:0d:e7:40:3c:7c:e6:4a:b2:e6:cb:2b:6f:ae:90:
         07:d8:09:5b:e1:da:67:ef:ef:bc:37:ef:45:fb:59:59:81:2c:
         da:7b:27:5d:77:63:83:e3:05:71:d6:e0:49:d3:45:7d:c5:d0:
         22:91:64:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:09:29 2026 by rpki-client