This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer
File:                     dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer (raw, json)
Hash identifier:          1mlNEvKGGqeaxHiZ+CGCsgHjzZznj4qNJtyz6NxdIkw=
Subject key identifier:   76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027D15
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 09 Dec 2025 15:33:12 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 139903
                          IP: 103.146.250.0/23
                          IP: 2001:df2:7580::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163093 (0x27d15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  9 15:33:12 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:34:bc:36:7e:99:9f:dd:19:44:83:9f:03:
                    97:26:dd:07:cd:04:6c:7c:91:60:53:eb:d1:74:5a:
                    f8:46:26:8e:ff:3c:95:d2:52:c3:d8:1d:a0:12:89:
                    d9:c4:c3:9c:d0:04:a5:8b:3d:e7:f9:9a:18:6d:19:
                    b2:98:54:66:0c:5b:06:66:57:5f:71:14:9b:3d:19:
                    5b:5b:19:55:04:8d:d0:e6:b9:5e:87:0b:0d:d9:ce:
                    db:d6:14:9c:4a:43:a0:e5:88:cb:e2:b4:ca:59:89:
                    79:d6:15:f8:05:18:9b:f9:c7:ed:53:cc:c1:7c:c2:
                    11:76:b9:c7:2a:ec:bd:ea:99:9c:e0:69:b5:54:f6:
                    7e:18:f6:75:d9:13:ed:2e:53:58:81:76:44:a4:65:
                    7d:0f:5f:aa:36:2e:9d:2d:aa:e7:b8:83:97:7e:49:
                    39:72:8a:e0:aa:5c:f9:a4:66:ec:ca:b7:42:8c:2b:
                    d9:56:5c:08:19:65:bf:12:0a:e9:55:22:75:66:34:
                    70:70:8f:27:89:90:0c:38:e8:3d:e4:74:55:92:74:
                    f5:35:75:e2:ea:38:4b:d3:d7:57:34:21:1f:a5:b8:
                    90:55:0a:e4:c1:c6:a3:a6:79:b5:37:9d:56:a8:19:
                    77:0d:f0:49:e5:ba:8c:21:bd:70:d4:12:63:cc:b7:
                    3e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139903

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.250.0/23
                IPv6:
                  2001:df2:7580::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:a3:2a:5c:a4:79:db:fb:53:5a:0a:24:f4:2a:c9:c5:f9:52:
         dd:6d:80:c5:25:a7:30:e9:a9:27:d8:5b:e7:b1:df:62:a6:97:
         d1:c4:92:4b:a0:a1:af:aa:60:66:25:02:d5:6d:46:d9:70:bc:
         50:d6:be:76:09:5f:55:86:70:5f:7d:c9:5f:ba:87:a2:2a:f0:
         61:68:c8:e3:21:01:1d:26:46:64:58:22:66:b5:45:dc:fc:f4:
         3a:ad:0c:60:43:77:ed:ff:70:7f:41:2f:fa:a6:16:3d:17:ac:
         a7:e4:97:ba:d9:9b:34:34:03:54:fb:95:36:b1:f7:91:f5:79:
         cf:ba:37:bf:92:f0:78:1f:b5:08:78:ef:e5:c7:36:84:2d:8f:
         13:64:25:a8:21:b7:2b:e7:fa:ce:93:66:9c:26:e0:61:0c:28:
         1b:b0:fd:a6:85:b6:83:d2:86:01:03:bc:67:7c:ae:5b:a7:87:
         ca:b9:e8:40:01:e0:0a:48:7d:a1:57:43:e2:1c:f2:d3:29:29:
         2e:92:b1:ee:2d:2d:09:48:09:43:d0:a5:44:df:eb:d0:db:6d:
         31:81:52:64:c0:04:16:98:d8:89:4d:8d:64:dd:b2:ea:2c:de:
         d2:db:b7:e7:43:01:83:b2:bb:c6:e9:fe:c5:f5:26:38:4f:93:
         7b:9a:8a:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:50:05 2025 by rpki-client