This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
File:                     z7b2KJfnSw0H75YAuncJOQXLh1s.cer (raw, json)
Hash identifier:          bfmU1rDmnR8nQWfwbYNbE+rfGMa8fBC7xuOFfw4Bj2Y=
Subject key identifier:   CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0287EE
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 22 Jan 2026 12:55:06 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 151484
                          IP: 103.230.244.0/23
                          IP: 2001:df2:a340::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165870 (0x287ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 22 12:55:06 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:3d:6f:24:e3:fc:d5:34:97:5c:70:c9:04:
                    df:52:6b:1d:7b:68:f4:bc:b9:52:f2:e3:68:b1:09:
                    cd:d1:40:8a:22:a2:01:08:58:51:07:ba:76:c9:a5:
                    1b:ab:6c:08:d7:d9:8e:d5:c5:7b:cc:8d:88:76:3a:
                    de:91:b0:9a:88:69:87:6b:ec:82:73:69:e6:b7:e9:
                    38:f4:bc:3b:5a:ab:92:57:73:01:3f:7b:8f:17:19:
                    f8:1d:26:aa:dd:e2:6c:e3:95:cc:89:79:b1:74:d6:
                    68:17:b0:d7:a9:d9:11:fb:7b:ce:4d:92:30:ab:f2:
                    18:c8:0a:bf:d1:35:ff:c1:72:a9:1e:fe:1f:38:a9:
                    93:36:f7:df:c3:4f:9f:6d:4f:a7:b3:8d:ca:58:1d:
                    3b:2a:3a:75:15:e1:e6:b7:c1:b6:ba:8c:55:1f:49:
                    8a:fe:bb:02:ff:21:5e:5f:74:40:33:45:7d:94:b3:
                    a3:2d:a8:ad:21:36:dc:32:9a:b4:37:4c:01:fb:e5:
                    3a:77:7f:3e:2a:1a:a2:8f:54:43:99:7e:69:e2:76:
                    29:fd:b4:67:ac:27:c4:a0:d1:71:64:d3:f3:f4:2f:
                    07:31:57:ab:6c:d7:c0:ca:ba:95:cf:7b:b3:7e:aa:
                    0d:ae:5a:29:ec:cc:2a:80:84:4c:ae:ef:15:f4:0f:
                    af:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151484

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.244.0/23
                IPv6:
                  2001:df2:a340::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:55:20:4d:5f:c7:8c:49:e1:59:b5:55:d3:f9:91:e7:e1:3e:
         58:87:a2:5e:b3:fc:3d:2e:b2:59:2f:06:f0:93:a4:2f:f4:50:
         52:2a:bb:80:62:aa:85:8f:d5:7f:6a:03:1b:96:14:f5:aa:9d:
         2b:46:b6:58:32:5c:7a:80:3f:5d:04:d9:6c:a2:87:d3:fb:e9:
         11:17:b8:c8:57:3b:e7:e1:de:ed:22:6b:8a:d6:f0:aa:65:67:
         0b:8d:0a:ce:89:2a:56:08:1c:55:cf:e2:11:de:19:a7:c5:4e:
         05:4a:6c:de:78:ad:d9:76:5d:dd:c3:b4:87:ba:54:11:65:32:
         97:f1:42:c2:c5:89:32:47:21:13:a3:1e:65:d8:cf:1f:fb:0f:
         b9:fc:a5:85:bc:3a:0c:f0:fb:70:ef:6e:ae:04:3b:66:25:7c:
         60:bd:99:43:0b:b5:39:ad:c8:94:41:52:87:8e:d7:b1:a2:b4:
         50:b0:d9:b9:c9:a3:d5:55:db:db:f8:d1:a1:30:9a:9c:ab:d1:
         fc:01:33:91:a3:5a:f7:d9:96:b3:1c:9b:50:92:3a:01:ad:39:
         ad:24:8e:0f:72:81:ad:2b:52:d1:33:61:e3:c7:39:96:07:96:
         93:9e:d3:e2:d8:6e:69:76:b7:29:13:cc:51:97:64:a2:2a:f2:
         0c:43:88:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:28:59 2026 by rpki-client