This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer
File:                     6zLfknQ0rG06hoR937o9LoEAETE.cer (raw, json)
Hash identifier:          sT4cRVfIWMj9zxM29KL2bClgKRZONEHJCX7TRA2HIH0=
Subject key identifier:   EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027F4C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 19 Dec 2025 03:10:23 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 55776
                          IP: 203.2.32.0/19
                          IP: 203.15.154.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163660 (0x27f4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 19 03:10:23 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A911945B, serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:ea:7d:5e:e9:4c:07:c4:b1:62:9b:ef:a9:
                    33:86:64:6a:2e:bb:4e:ce:61:37:64:04:a9:4e:ef:
                    33:b5:38:0b:68:3f:98:8a:0f:74:b4:d5:cc:7e:2a:
                    f3:c2:a5:23:8a:04:8e:87:b1:d9:dd:17:19:96:75:
                    05:13:b9:b0:23:86:a4:2f:b7:f7:23:0c:19:14:82:
                    ad:0c:ef:2e:11:5d:c5:dc:2b:5b:18:d0:e4:a3:f1:
                    cf:d0:1d:6c:bf:0f:b2:f7:4b:4a:74:f3:57:46:68:
                    e8:33:b9:0e:39:38:c2:5f:a0:7f:fa:45:2c:78:99:
                    1c:ad:d5:b2:91:50:0b:78:b4:04:cc:cf:ab:49:04:
                    1b:a6:b7:a8:81:79:80:f7:e9:e6:e7:5e:ca:47:ae:
                    0e:ea:41:76:bf:21:85:8f:df:e3:25:09:13:61:20:
                    64:76:6d:58:d3:12:ea:6e:45:9d:cd:67:47:c9:48:
                    0d:5d:9c:8e:cd:56:7c:51:09:a4:1d:5f:fa:2c:b1:
                    31:73:c5:bf:71:c2:4d:c1:6d:8a:bf:76:0c:1b:23:
                    a3:93:48:a0:32:d1:39:d6:c0:8b:2d:23:37:22:d6:
                    19:39:56:be:12:5c:df:12:2b:c2:14:30:eb:69:72:
                    7e:47:a1:6e:99:ae:bc:13:7f:59:44:63:f9:bc:21:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55776

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.2.32.0/19
                  203.15.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:75:a5:b6:93:8a:b2:db:82:97:c4:da:7b:f7:5b:ba:89:4e:
         35:1c:96:1c:e4:48:be:e2:d8:5f:81:30:a6:8d:3c:af:4e:26:
         44:7f:8e:5d:3c:62:0b:f0:d8:fd:41:ba:93:c7:99:cb:93:15:
         25:d1:11:1f:14:b5:07:fd:b5:8e:2c:c9:29:c0:b4:f1:a1:be:
         ea:6e:04:4c:1f:87:0d:a2:be:13:df:8e:ef:12:f3:b8:fb:d6:
         c9:a3:4f:b3:40:97:33:70:d6:24:a6:71:f9:b0:36:f8:d6:f5:
         25:8b:5d:9f:2b:7b:7c:a6:32:2a:2f:70:72:31:0d:15:85:2e:
         77:27:bb:5d:e0:72:70:55:42:52:25:58:51:2f:6f:69:0c:83:
         bb:5f:af:25:ac:51:78:af:06:fa:d6:4d:e9:e5:7a:fd:4c:36:
         d7:5d:3c:15:6d:d8:7c:df:aa:7c:4c:11:9a:89:69:8d:25:12:
         dc:58:14:13:e9:52:21:cb:38:9d:b1:42:e8:03:94:4d:e5:9f:
         14:3f:37:b3:ca:c0:1c:fc:78:e3:da:71:7d:a2:12:cf:4e:56:
         88:8d:48:49:12:e0:40:eb:4f:a9:7c:0d:89:e4:30:58:7f:9d:
         13:f2:5a:7a:60:c0:fa:f1:0a:26:ad:01:fd:7a:e2:c6:65:db:
         fa:58:3c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:27:13 2025 by rpki-client