This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
File:                     uHLzTVUlH6dw7MOT0mcSED1VBzc.cer (raw, json)
Hash identifier:          Id0LuqT3dL+SZmjJWwKT7PLGnPyR0AteQy2bgua87E8=
Subject key identifier:   B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027BFE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 04 Dec 2025 16:49:34 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 133544
                          IP: 103.176.206.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162814 (0x27bfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  4 16:49:34 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:be:89:99:ac:ae:b5:a4:06:0a:5f:d4:0a:
                    07:bc:ea:41:ee:0b:8f:ed:a4:9f:22:10:b8:44:44:
                    c9:57:55:e9:9e:a8:ac:b5:f2:03:c7:ab:7e:ac:f4:
                    b5:71:be:25:c4:cb:c5:15:ad:7f:5a:1d:cd:93:aa:
                    2d:b6:17:29:c2:78:3f:e0:60:aa:fc:db:9e:70:81:
                    1b:8a:5b:f5:a5:29:af:67:d6:0a:72:c7:ca:79:a3:
                    4e:1b:2c:db:b6:47:51:c7:7d:df:2d:7d:84:e5:04:
                    1c:e9:0f:66:ed:16:4c:a2:b1:d0:5f:0c:6f:01:71:
                    37:9e:d6:e5:76:14:5c:05:7d:4a:3c:1a:dc:b8:16:
                    53:65:e4:c4:51:84:86:4e:7b:8f:9e:a2:c7:0f:a7:
                    66:53:50:2d:85:26:be:1a:2f:c1:a3:de:c1:53:e8:
                    19:75:23:28:c6:91:00:63:7b:42:17:f5:7a:38:e6:
                    a5:21:27:1d:fb:16:12:bd:e9:ee:25:bf:8b:d7:5b:
                    91:30:41:a0:31:21:35:45:b2:36:86:db:5f:f0:ed:
                    ae:5d:de:93:33:6c:08:59:7c:cf:bd:d9:fb:1d:a9:
                    cb:b1:72:68:02:42:ba:d5:78:ac:4d:6f:15:26:d1:
                    8d:08:97:f3:de:bb:6c:28:85:e4:69:d0:9f:3b:2c:
                    39:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133544

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:19:d5:3e:01:d0:98:70:64:04:03:5c:fe:e3:0f:87:1c:8f:
         22:02:99:bb:e7:18:b3:2f:42:93:06:c4:f9:53:b6:c7:79:69:
         5a:ec:49:aa:ef:03:1d:86:d3:5b:c1:b0:a8:7e:d6:29:52:02:
         8c:c4:d6:10:5a:5d:c0:c2:c6:b7:74:9e:81:0a:6f:14:4e:b7:
         2f:5c:c9:d9:e8:15:be:85:b9:48:ec:47:10:cb:e8:83:13:c7:
         9b:05:24:7b:69:85:1f:4f:2c:de:57:13:bf:3d:8f:46:aa:59:
         a8:cc:b8:d4:a7:8a:6b:89:81:d6:16:c7:2d:43:83:92:2c:ef:
         a4:9f:f3:98:8b:2f:d8:7f:3f:a8:4b:1c:fd:d8:7b:10:26:a9:
         0e:20:1f:93:22:0a:b7:99:94:49:e7:03:ee:3f:95:25:4a:1a:
         a4:8c:fa:ea:fd:d6:41:10:2d:3e:34:e3:e6:d2:09:81:26:04:
         b7:54:8c:0c:62:bd:25:b4:1b:81:cb:e0:1f:b7:1a:07:3b:73:
         2a:f2:bb:59:53:2c:76:86:d7:b0:50:5d:6f:14:99:94:bf:bd:
         d8:84:c6:41:33:59:71:e5:67:cb:1b:4e:e4:8d:93:8e:9a:69:
         df:58:08:35:be:60:6e:4b:9a:91:c5:bc:0b:0d:a2:87:71:33:
         4e:e2:a0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:00:19 2025 by rpki-client