This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vp-1bt2xandk-zENNy4XiFSCg5k.cer
File:                     Vp-1bt2xandk-zENNy4XiFSCg5k.cer (raw, json)
Hash identifier:          gkESIhgKx594y5gP3iJxnJliqlcvf1brNOht1M++xkE=
Subject key identifier:   56:9F:B5:6E:DD:B1:6A:77:64:FB:31:0D:37:2E:17:88:54:82:83:99
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027CFB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 09 Dec 2025 05:16:08 +0000
Certificate not after:    Wed 30 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 154257
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 14:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163067 (0x27cfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  9 05:16:08 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=A91878B3, serialNumber=569FB56EDDB16A7764FB310D372E178854828399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:60:36:bb:95:04:97:db:9a:11:10:fc:5f:
                    f8:76:b8:d3:c2:85:eb:14:f3:1f:23:00:e1:a8:10:
                    e2:ed:f9:cf:50:aa:a6:47:40:69:59:4d:43:28:5a:
                    f2:ed:d1:0f:59:14:47:97:13:6a:d3:b1:ce:2b:b5:
                    c8:2c:81:e4:0c:c5:1b:8d:92:76:df:d2:10:0d:01:
                    e0:fe:14:59:86:dd:37:64:1c:ac:ae:4a:c9:c8:e6:
                    88:e5:fb:3f:00:22:25:f9:57:1f:aa:dd:a2:55:fd:
                    48:30:38:ef:15:d2:8b:35:7a:2e:ca:d3:18:40:b7:
                    80:4b:b2:b7:3b:0b:f5:5e:f6:3f:0d:05:fb:4e:1b:
                    7e:2d:af:b4:50:e9:d2:6c:b0:33:44:88:b5:24:20:
                    d7:60:8f:6e:63:e8:12:9f:dd:55:b5:1b:c2:a1:2a:
                    a4:eb:df:9a:0a:42:99:98:86:62:4f:38:6a:71:84:
                    fa:a0:cf:b5:a9:81:01:2f:b2:1b:63:5f:e1:75:2e:
                    a7:f5:30:f5:a1:30:8d:38:9a:b4:9a:69:f0:dd:a8:
                    84:81:7b:94:56:82:f7:fd:19:54:68:2a:6e:b2:1f:
                    f8:0c:30:18:60:af:9e:d6:b2:b6:54:f2:10:2f:b1:
                    62:16:25:eb:53:af:0d:41:72:42:6c:4f:26:c8:45:
                    97:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9F:B5:6E:DD:B1:6A:77:64:FB:31:0D:37:2E:17:88:54:82:83:99
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91878B3/28355950D4BE11F0A3DEE216C4F9AE02/Vp-1bt2xandk-zENNy4XiFSCg5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  154257

    Signature Algorithm: sha256WithRSAEncryption
         52:b0:7e:40:78:f6:27:05:4d:46:03:8b:3d:fa:d4:c5:6a:67:
         22:ad:cd:8e:a4:bb:d5:85:54:ec:2d:97:c0:4a:9f:4a:a0:5a:
         e7:a4:01:8f:a0:82:74:6b:18:7a:26:fe:e9:1b:44:1f:59:53:
         92:6a:09:0b:18:d9:62:12:09:bf:0d:16:62:a6:bc:8e:53:07:
         74:fd:c7:7c:ff:76:10:73:56:ff:1e:de:12:bc:3f:17:09:52:
         f2:d4:a6:9f:e0:e1:a7:a5:e4:aa:e4:01:74:78:fd:9e:62:38:
         d9:f0:88:bf:fe:b3:5c:5e:1f:22:e3:6b:99:bc:81:79:96:83:
         bf:ec:ff:14:07:20:b9:df:ee:2a:c7:2f:1c:7c:3c:3c:5b:cb:
         f3:16:17:cb:f5:3b:98:7a:ff:e4:75:85:71:77:ca:f5:35:2f:
         34:51:19:04:ac:88:c4:70:56:bb:8e:6f:34:4a:27:78:e1:36:
         c5:0e:2f:b0:05:a6:7a:06:49:1b:fe:5f:b7:3f:11:35:4e:24:
         ea:f7:37:a3:19:71:15:ac:b7:27:0d:90:98:a7:1a:cb:c3:bd:
         b6:e3:1b:d6:94:51:70:c3:a9:6e:5c:0e:f0:b2:66:c0:0e:ce:
         1a:60:6d:29:97:b4:bd:47:4d:d1:54:75:a9:26:27:fd:6a:56:
         39:83:fe:3d
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAnz7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTIwOTA1MTYwOFoXDTI2MTIzMDAwMDAwMFowRjERMA8G
A1UEAxMIQTkxODc4QjMxMTAvBgNVBAUTKDU2OUZCNTZFRERCMTZBNzc2NEZCMzEw
RDM3MkUxNzg4NTQ4MjgzOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4QGA2u5UEl9uaERD8X/h2uNPChesU8x8jAOGoEOLt+c9QqqZHQGlZTUMoWvLt
0Q9ZFEeXE2rTsc4rtcgsgeQMxRuNknbf0hANAeD+FFmG3TdkHKyuSsnI5ojl+z8A
IiX5Vx+q3aJV/UgwOO8V0os1ei7K0xhAt4BLsrc7C/Ve9j8NBftOG34tr7RQ6dJs
sDNEiLUkINdgj25j6BKf3VW1G8KhKqTr35oKQpmYhmJPOGpxhPqgz7WpgQEvshtj
X+F1Lqf1MPWhMI04mrSaafDdqISBe5RWgvf9GVRoKm6yH/gMMBhgr57WsrZU8hAv
sWIWJetTrw1BckJsTybIRZffAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUVp+1bt2x
andk+zENNy4XiFSCg5kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTg3OEIzLzI4MzU1OTUwRDRCRTExRjBBM0RFRTIxNkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE4NzhCMy8yODM1NTk1MEQ0QkUxMUYwQTNERUUyMTZDNEY5QUUwMi9WcC0xYnQy
eGFuZGstekVOTnk0WGlGU0NnNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlqRMA0GCSqGSIb3DQEBCwUAA4IBAQBSsH5AePYnBU1GA4s9+tTFamci
rc2OpLvVhVTsLZfASp9KoFrnpAGPoIJ0axh6Jv7pG0QfWVOSagkLGNliEgm/DRZi
pryOUwd0/cd8/3YQc1b/Ht4SvD8XCVLy1Kaf4OGnpeSq5AF0eP2eYjjZ8Ii//rNc
Xh8i42uZvIF5loO/7P8UByC53+4qxy8cfDw8W8vzFhfL9TuYev/kdYVxd8r1NS80
URkErIjEcFa7jm80Sid44TbFDi+wBaZ6Bkkb/l+3PxE1TiTq9zejGXEVrLcnDZCY
pxrLw7224xvWlFFww6luXA7wsmbADs4aYG0pl7S9R03RVHWpJif9alY5g/49
-----END CERTIFICATE-----
Generated at Fri Dec 19 16:06:40 2025 by rpki-client