This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
File:                     vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer (raw, json)
Hash identifier:          B+s/OZkh4Z9apb30fSzfZsCp8yCStqoQMuPstWYaOM4=
Subject key identifier:   BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027B79
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 Dec 2025 20:26:11 +0000
Certificate not after:    Thu 28 May 2026 00:00:00 +0000
Subordinate resources:    AS: 138614
                          IP: 2404:67c0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 08:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162681 (0x27b79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  3 20:26:11 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=A9184569, serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:40:8c:e5:e5:12:cc:4d:db:b3:0f:cd:70:
                    bb:d1:82:eb:1a:7d:2d:16:4c:4a:84:c9:cb:ee:b0:
                    b9:7f:3a:8a:c9:e7:1d:c7:60:33:10:16:fd:15:1d:
                    52:be:35:de:6b:03:05:29:b4:ad:b9:d1:3d:db:ea:
                    01:51:f2:ca:dc:0b:40:2d:be:fb:a7:09:9f:d1:17:
                    85:48:ca:06:16:93:41:39:62:74:b1:7c:77:d7:86:
                    9f:5d:de:8a:19:99:f1:2d:e4:a3:d7:ed:7d:98:c5:
                    4d:10:25:56:50:5c:55:0d:e9:9e:ff:df:77:3c:8d:
                    63:0b:a0:29:83:1a:cd:08:60:ca:c8:4b:22:4e:74:
                    d5:9f:22:99:a5:a1:e5:53:c5:d1:3a:a7:59:eb:ea:
                    ff:ce:2d:a7:fc:54:da:b1:22:1c:54:ff:10:10:b6:
                    ec:0d:0a:ff:f1:20:82:45:68:16:32:97:21:b8:29:
                    22:95:eb:a9:20:44:fd:3e:30:e7:45:88:45:52:16:
                    70:02:92:10:a5:34:06:6e:d9:29:14:cc:bc:c9:9b:
                    09:fb:3a:94:7b:ea:df:ef:db:de:88:39:34:e8:9d:
                    5a:05:ee:6d:e0:21:34:4b:52:ea:7f:38:ed:1f:44:
                    bb:86:03:78:37:7b:5c:f7:76:f0:6d:96:52:2f:dc:
                    c0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  138614

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:67c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:2e:fd:18:bb:2e:43:19:b2:2a:ea:fa:a9:aa:17:ca:fd:9d:
         3f:31:50:36:33:00:8c:b6:b0:6d:98:ce:81:3c:a9:36:d8:35:
         5f:58:b0:b2:99:ce:86:69:74:75:6d:ce:44:38:78:e3:6a:98:
         81:1e:5b:23:16:e5:27:73:e7:2f:ce:11:f5:98:17:13:2b:c1:
         a9:c9:08:a5:e6:b1:bf:b2:b3:b9:b1:a9:1a:3f:62:80:28:5e:
         12:50:dc:d6:27:53:b5:75:53:03:78:76:f0:8d:9e:93:5c:aa:
         78:07:43:f2:fc:7b:4c:c4:cf:bf:f5:a0:ed:f5:93:3a:1c:f9:
         08:ca:c8:8c:5a:dd:cc:2c:b9:5c:56:36:91:af:da:1a:7f:72:
         73:1f:d1:65:0b:83:ab:ab:4c:b5:8a:ee:f2:4b:78:25:06:35:
         e7:53:7d:65:28:68:d4:6b:18:f5:25:58:81:c4:f2:2b:bd:5d:
         77:ab:42:72:84:d3:23:65:90:f2:f4:44:50:0a:70:19:04:45:
         cb:96:8f:bf:1f:49:51:90:0c:19:e2:aa:07:2a:2e:07:fa:7d:
         2f:08:d0:41:e5:a4:6a:f5:c8:2f:44:81:5c:e2:43:30:d0:65:
         44:5a:1a:f6:80:ec:a7:b4:e1:24:0c:7f:9d:33:25:d0:56:9b:
         c2:e3:bd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:36:11 2025 by rpki-client