This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer
File:                     y1LRcue7pSl4xAN0AnpNpseRZ9g.cer (raw, json)
Hash identifier:          AKHzxfx8j8wqB7e6pyp+HoZcEvm1d7rOHYFfCAP/ykQ=
Subject key identifier:   CB:52:D1:72:E7:BB:A5:29:78:C4:03:74:02:7A:4D:A6:C7:91:67:D8
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02844E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 07 Jan 2026 10:09:53 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 134478
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164942 (0x2844e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  7 10:09:53 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A9199606, serialNumber=CB52D172E7BBA52978C40374027A4DA6C79167D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ae:c3:c7:c0:c2:ee:70:e7:76:55:18:8c:26:
                    8b:3d:5c:7f:e5:ea:bd:32:88:2f:4c:7c:60:a1:2c:
                    03:fb:b5:a4:3b:c4:66:4d:a5:83:d1:5c:2c:ab:61:
                    97:75:a3:20:33:6f:3a:41:a0:35:bd:52:da:c8:99:
                    36:46:24:03:93:83:4d:f6:3f:28:2a:d7:15:94:91:
                    ba:20:a6:bb:37:d7:04:54:7a:95:c2:65:e5:b5:0b:
                    b2:cd:0a:c5:1f:d0:04:bf:7a:76:79:f9:35:e6:88:
                    34:f4:7d:f0:f3:85:52:2f:8a:f7:b6:67:e8:49:e0:
                    0e:7f:4b:d6:7f:3a:f3:fd:35:04:0d:ee:f7:12:fd:
                    9b:b9:04:78:94:61:df:19:86:ff:51:7c:56:3d:bd:
                    49:4e:36:c3:d7:dd:7c:48:9d:ab:5e:03:ec:2e:ba:
                    0a:f6:46:43:06:3c:86:34:86:42:06:ba:1c:1e:7f:
                    4b:87:74:11:d3:00:c3:b6:10:26:b2:43:01:8d:7a:
                    44:1c:b0:f0:1b:0c:e3:15:dc:cf:24:45:84:dc:95:
                    cc:e9:34:0f:76:90:25:42:c2:fe:8c:01:14:d4:98:
                    01:85:88:74:97:62:01:2d:4e:eb:1b:c3:1f:ed:5b:
                    06:8b:b4:0d:40:d9:f2:91:d4:b5:ce:81:48:f6:24:
                    a1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:52:D1:72:E7:BB:A5:29:78:C4:03:74:02:7A:4D:A6:C7:91:67:D8
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134478

    Signature Algorithm: sha256WithRSAEncryption
         9d:f5:70:64:14:57:1f:d2:f4:bd:aa:c5:8d:f2:da:af:ae:b4:
         96:29:91:6e:eb:10:a2:31:d5:68:29:be:2c:5e:14:18:73:dd:
         3c:76:b4:09:17:f0:e2:27:1b:bb:ca:95:4e:40:c8:cb:9d:25:
         20:0b:1a:f9:df:ca:ef:56:15:b2:a8:41:24:7a:32:25:0b:62:
         2c:57:e1:4d:60:35:bc:f1:ca:cd:b0:20:57:e1:1e:9b:87:81:
         4e:53:c8:5c:c2:f2:af:37:33:91:15:89:4d:9c:e9:5f:4c:48:
         01:10:ba:d2:d9:69:69:d0:c8:ca:ab:e1:b1:93:a3:e2:18:af:
         a6:6c:2c:b6:26:64:d7:1f:c9:6e:bf:a6:75:76:76:51:d4:28:
         3d:47:64:87:82:f9:ec:e9:5d:66:d8:f2:22:e0:02:4c:00:4d:
         f9:33:db:a9:f4:b7:e3:58:9d:e2:5e:b4:25:20:9a:79:78:4f:
         7b:f3:61:b0:72:47:42:42:7d:27:44:3e:46:cd:b9:12:38:1d:
         57:0e:48:90:af:0b:4d:27:dc:00:1f:ba:d0:19:99:d5:e1:e6:
         ff:2f:e5:36:55:5e:5d:46:69:5f:93:63:bf:66:c5:3e:dd:0c:
         7b:e1:2b:87:c9:ad:32:8c:4a:4b:64:e1:08:04:fa:2f:0d:3a:
         56:74:4e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:16:07 2026 by rpki-client