This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
File:                     qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer (raw, json)
Hash identifier:          dgXzFDGv8TEMHJoQzLlLpd76m+Jx3wof4VVsTdGLO88=
Subject key identifier:   A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0277E2
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 25 Nov 2025 14:58:15 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 139831
                          IP: 103.145.206.0/23
                          IP: 2405:8d40::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 15:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161762 (0x277e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 25 14:58:15 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A9145456, serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4f:0e:4f:90:8b:13:d7:b4:5c:10:fa:09:03:
                    de:b4:ce:d7:d1:1e:b8:c8:c1:24:66:1c:28:b2:d3:
                    70:20:80:5d:ed:7c:9b:cc:62:c7:47:d5:52:47:e8:
                    68:e0:49:60:c3:c2:1e:25:76:db:75:5d:7d:9c:8c:
                    20:2f:eb:8f:a0:c3:e7:10:c8:b0:13:07:17:f2:82:
                    23:dd:30:a8:4c:85:86:48:ae:46:3e:f3:2c:27:e2:
                    7f:0c:3f:cc:5d:be:50:66:e7:2f:3f:50:44:e0:ac:
                    68:46:b5:99:54:49:e2:22:9c:cd:ed:b3:95:0c:9a:
                    28:16:60:f2:58:a1:19:85:b9:c8:01:84:40:10:39:
                    30:41:72:5c:83:29:86:07:80:61:49:20:ac:a9:ce:
                    84:2f:0d:89:e1:c7:4c:6b:70:48:ca:2c:ad:13:d9:
                    0b:c2:69:31:ef:d9:06:e3:b3:82:d3:37:56:25:97:
                    3e:cf:99:68:d8:04:b6:63:09:9b:47:db:36:a8:9c:
                    e5:5a:9f:57:d8:7a:a5:59:ca:63:12:d1:ed:74:05:
                    18:1d:cb:d8:41:73:7a:d6:ad:8b:e2:55:21:9b:82:
                    a1:f1:0e:3e:ce:e2:36:30:ff:23:08:22:56:b3:e0:
                    92:64:62:16:cc:06:94:b3:6c:26:1c:7a:bb:60:6b:
                    63:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139831

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.206.0/23
                IPv6:
                  2405:8d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:46:cf:13:61:0a:46:a4:a5:ed:0d:94:5d:9b:8e:29:fd:53:
         45:5c:a3:85:6a:c7:f0:8a:61:2d:83:8b:73:50:6c:ac:8a:aa:
         fb:6f:c6:6c:0a:3d:2f:01:cb:b6:5b:5d:50:52:70:f3:7a:c5:
         59:a0:16:ec:93:48:5f:b8:e5:35:de:01:28:b4:84:65:f4:b5:
         89:14:67:44:23:49:a9:35:05:81:34:57:7f:cf:49:bd:15:84:
         85:fc:07:cd:94:e1:ab:93:e6:cd:75:8f:b4:18:e5:b5:e0:4d:
         d8:16:46:0a:f6:47:d5:b6:15:24:a3:5d:d6:e9:f4:91:24:d5:
         34:6c:66:04:06:ce:2c:1f:98:70:12:78:fb:a2:b8:20:72:09:
         8c:64:3b:31:02:a7:90:33:89:be:ef:c7:ee:7d:c5:2d:eb:fe:
         ee:34:20:65:cf:53:68:c8:87:78:6c:bd:4d:e3:52:d9:62:01:
         27:a4:dc:b9:97:86:fc:63:5f:49:d8:38:4a:b5:e4:75:53:7a:
         f2:d8:46:ff:b8:3e:fe:f3:5f:28:a5:21:cb:9a:9f:ad:61:f7:
         d6:67:a1:a1:51:0b:21:64:a6:2e:47:b0:f4:44:56:13:f7:56:
         45:c1:4d:2f:ec:fa:5a:e5:bb:97:60:19:bc:4e:b7:46:cf:7c:
         49:dc:c6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 17:22:27 2025 by rpki-client