This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer
File:                     wlVOkccHDswx5jeOpDvPrzyCE8A.cer (raw, json)
Hash identifier:          I0J7VWENvxa0q+aXwcRzmufgrIX8QWOy6HB7L1gVHu4=
Subject key identifier:   C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0287C1
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 21 Jan 2026 13:39:26 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    AS: 153525
                          IP: 2001:df4:e9c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165825 (0x287c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 21 13:39:26 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9198553, serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:06:86:e0:66:a3:00:58:92:af:21:d7:f2:ef:
                    89:b8:ca:38:dc:63:2d:18:74:78:6e:e7:76:be:91:
                    e8:7d:4c:e4:cc:e0:d6:de:3c:22:18:6a:89:50:79:
                    6f:3d:57:5f:4b:23:3a:32:e6:6c:cd:a8:de:c8:fd:
                    9e:0d:56:7c:3c:7d:6f:1b:61:a6:5c:a1:96:f2:d1:
                    9a:f6:8e:1e:40:e8:75:8d:79:38:a4:1e:5c:3a:e0:
                    63:fd:fb:25:6c:2d:39:14:bc:bf:5b:b9:44:04:49:
                    ed:e1:fa:6f:fe:19:0a:12:75:ad:09:5e:8d:d0:dc:
                    28:f0:29:13:e2:7c:63:b3:f2:05:df:8f:c6:f2:8b:
                    30:69:bf:95:2f:d9:2f:cf:9f:63:ec:4b:97:d0:03:
                    a2:b6:1b:fd:01:90:68:bf:fb:4d:4f:06:43:8d:7b:
                    8d:5d:99:ba:0f:86:65:00:c7:ca:29:98:8d:4e:65:
                    43:ef:f9:56:21:12:57:2c:a4:2f:53:a9:73:36:a8:
                    2f:3a:78:45:b5:8a:2b:c1:d8:90:9b:72:1f:06:b1:
                    02:d7:d6:6e:b4:92:d7:72:eb:ec:98:5a:ff:6f:76:
                    57:bf:08:7a:82:74:04:19:67:8d:ea:e3:a7:d4:4c:
                    3d:69:65:f3:64:db:76:42:c3:47:01:d6:fe:df:73:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153525

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:e9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:0c:f3:15:13:10:19:17:38:ea:75:25:a2:cd:0d:2e:c2:e7:
         e0:ec:78:06:c0:b5:3e:74:ae:ea:c8:50:32:1b:49:87:06:1b:
         2a:e9:21:3b:bc:49:8b:3c:20:06:e0:96:e6:95:01:5c:cc:a0:
         80:7d:94:ac:74:fa:6c:23:70:1c:89:38:8e:68:06:69:16:99:
         e6:d5:bd:c6:48:18:94:05:1e:fa:fe:55:e6:f8:26:71:9c:93:
         b4:7a:43:6b:77:8a:47:fa:5c:ff:a4:ac:0a:c7:fa:16:52:20:
         54:a3:1b:b5:1f:f1:1b:8c:1d:19:52:9f:a4:16:95:9e:f1:80:
         3b:b9:24:1b:0b:b8:b4:f5:c9:de:09:a0:81:2b:88:2d:50:cf:
         74:9d:49:5e:fe:18:f5:09:5e:9f:96:8a:b0:5c:0d:6c:ae:63:
         25:4a:79:2d:f4:d7:b4:c1:19:1f:75:fd:15:fd:46:c3:cc:47:
         27:64:ef:31:eb:01:b2:c3:9c:b3:7a:26:98:d1:8e:ca:02:4a:
         ca:3e:b8:08:b5:62:77:d6:b5:85:64:c1:0c:1f:74:81:ce:1e:
         d6:eb:d4:93:74:06:15:dd:af:b2:58:77:17:f6:07:1a:a1:ef:
         13:74:a6:9a:eb:b1:a0:2a:59:2e:cf:35:32:0a:89:ec:4c:f7:
         ef:10:3b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:49:36 2026 by rpki-client