This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
File:                     vpuQTrdssFxgw-LDeeL6SJoOF3I.cer (raw, json)
Hash identifier:          gjd/EH/90Xuc2HHktkcTv0/77MKrEBK3PY8KpN+3PBM=
Subject key identifier:   BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027555
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 14 Nov 2025 18:27:00 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    AS: 132714
                          IP: 2001:df4:7140::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 12:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161109 (0x27555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 14 18:27:00 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d9:8d:ee:d6:a1:67:cb:d8:1e:9b:35:a6:dc:
                    f2:a9:0f:08:31:a4:20:bf:4f:de:2a:58:6f:52:81:
                    c0:78:9b:4d:e2:93:2f:c5:f7:a0:a3:69:0a:a9:eb:
                    e0:88:d5:3d:4e:2e:6f:61:63:2f:f6:af:a7:3e:20:
                    6d:45:a9:f0:9f:72:84:ce:2e:6e:a3:b7:00:cd:ab:
                    ea:fd:e1:fe:24:28:f7:59:55:af:db:45:23:c9:8c:
                    d4:2c:5a:ad:0e:be:93:bb:29:2f:ed:ff:d4:be:29:
                    cd:f4:4c:0f:ab:d1:07:64:9e:25:02:97:77:a5:c7:
                    4b:99:6c:e7:ef:3a:22:f3:a9:de:6a:c9:1b:f8:2c:
                    96:76:ce:59:59:8d:dd:88:9a:9d:c7:62:c7:e2:e0:
                    e6:33:5f:df:79:cf:2c:6a:3a:ea:c6:c5:5d:35:5f:
                    9c:1d:e6:0b:ea:89:39:d0:60:68:e6:1b:ed:a9:cf:
                    06:12:6f:06:73:05:17:ed:c5:45:23:6c:dc:5a:0a:
                    5f:4d:bf:26:da:a8:2d:8e:88:51:01:47:96:97:7d:
                    f1:25:af:e0:39:b9:a1:4b:aa:fb:d0:77:1c:07:fd:
                    93:96:b5:a1:1b:54:61:db:b4:67:6d:3a:5d:64:61:
                    8b:f8:c2:dd:90:73:b9:35:8e:c3:ce:2f:17:00:67:
                    a2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132714

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:7140::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:ef:e1:f2:ac:74:ad:01:fe:63:f9:3a:36:e0:9e:1b:15:09:
         ec:ec:95:88:3e:21:b4:ca:6e:f9:62:a2:71:85:61:10:cf:e4:
         d8:9b:f2:91:9a:39:17:5f:b3:f5:99:27:b5:c0:9b:13:ff:bd:
         48:a1:86:a3:62:18:e1:ea:1a:3c:1b:a6:01:42:ab:06:d5:f6:
         4e:fa:ce:db:78:25:c9:75:dc:c7:24:1a:f4:dc:d4:aa:80:26:
         88:74:7f:89:98:4b:c6:07:52:f9:f8:d9:01:9b:69:51:d5:d4:
         9c:e6:5c:e1:ec:50:17:c9:6b:89:0d:9d:c3:ce:7e:35:b2:bd:
         b4:7e:cd:06:21:59:24:7f:aa:3d:a6:2a:f7:58:45:8c:42:90:
         76:fb:33:2e:01:6b:36:79:78:5f:21:d0:09:05:b1:52:d8:1d:
         22:84:40:d3:ac:cd:65:9c:98:65:c8:d2:f4:4f:f0:82:fc:b9:
         8f:d3:4b:44:99:5e:7b:87:4a:8f:eb:81:b6:40:9d:73:2e:34:
         34:93:5e:ac:3a:31:4e:f7:12:57:e6:b7:50:91:f4:a2:b4:89:
         b0:bc:a3:2f:90:04:f5:62:c7:9c:61:6a:6d:61:71:53:54:f0:
         ad:5c:98:ed:15:81:81:8a:c1:16:d8:ea:d2:9d:be:54:5f:84:
         27:11:48:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:20:58 2025 by rpki-client