This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer
File:                     e8dWLzeFS9JjniQQ1nPld8v7MR8.cer (raw, json)
Hash identifier:          MgoUzfJXiEsPYn8KGX4ZofqqIYY87ax0ZLtCVhxZvWk=
Subject key identifier:   7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02787C
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 27 Nov 2025 01:17:42 +0000
Certificate not after:    Thu 28 May 2026 00:00:00 +0000
Subordinate resources:    AS: 153606
                          IP: 163.61.144.0/23
                          IP: 2402:3ae0::/32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161916 (0x2787c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 27 01:17:42 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=A91C36C2, serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2f:fb:16:4c:d1:91:7e:27:a0:81:b7:13:22:
                    4a:82:8d:74:39:3b:88:6f:1c:31:b6:7f:97:9f:3d:
                    68:cf:19:f0:3e:a2:18:48:25:9b:72:da:4e:25:6a:
                    cd:58:6b:d6:33:b2:a2:f8:26:25:bf:20:0a:89:09:
                    1d:0d:75:92:b7:98:01:9d:e2:e4:0d:dc:08:2b:32:
                    62:39:b6:c0:98:a6:e0:36:5d:60:6b:76:b5:12:6e:
                    4b:27:10:70:f3:fa:45:f7:4d:c7:f8:94:0f:68:20:
                    c8:26:fb:30:85:6d:0f:7c:f7:9c:72:08:63:a6:05:
                    86:cf:8f:1b:3f:0a:20:b9:df:49:71:0f:84:e6:c9:
                    3d:0e:ce:32:09:b1:fd:c1:bd:06:39:33:81:f3:ef:
                    6a:4b:23:8c:49:3f:3d:2e:70:e2:bc:42:6f:a1:db:
                    a3:59:fd:1d:5b:04:56:ae:92:86:ff:d0:80:fe:4e:
                    90:5c:2a:cd:d8:64:05:d0:31:ab:12:1e:fe:0b:fe:
                    b4:b0:d9:31:04:56:0b:2d:8b:6e:4e:f0:38:e5:61:
                    61:9e:f3:6f:ed:91:a1:48:17:82:b6:7d:95:ab:2e:
                    d8:10:ce:bd:55:14:21:07:d9:01:a8:db:ca:a7:85:
                    ee:30:cb:e1:15:26:f7:c0:e6:ec:a9:5a:30:95:1f:
                    0a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153606

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.144.0/23
                IPv6:
                  2402:3ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:29:e8:aa:1d:55:bf:db:85:c2:91:62:fb:9d:bd:33:93:3a:
         65:59:18:7e:19:b5:07:de:ec:90:6d:3e:36:7a:6e:ea:42:0d:
         4f:e6:8b:ef:3c:e6:cc:cd:3a:40:52:79:f8:0f:6f:b8:9a:f2:
         bc:e7:ef:86:b8:3d:14:cd:d2:a0:62:56:dd:8e:ee:fc:d4:5e:
         d2:68:04:b4:63:3d:58:94:ff:b3:59:cc:30:7c:b4:80:f4:00:
         a0:71:4b:d3:d5:fc:87:83:24:04:0c:92:7c:af:f6:2a:0a:8b:
         c8:16:f0:40:36:58:8e:d5:cd:63:8f:8a:7e:14:d5:68:f9:e2:
         a6:69:ac:41:5a:d8:11:38:a2:62:64:92:8c:bc:5c:9c:94:6f:
         0e:c2:08:cb:b3:d0:ae:e1:40:b4:0f:36:31:9b:b0:a6:5f:58:
         7b:b2:6d:11:62:de:a5:59:ab:f3:01:ea:61:69:94:4f:a2:95:
         59:5f:b7:37:bb:c3:51:9d:96:e1:41:8f:b1:93:08:ae:55:81:
         52:39:84:ed:f6:22:52:b1:b9:88:c2:87:1f:65:9f:28:c7:e6:
         3a:3b:ca:e7:d0:fb:2b:a7:6f:ee:3a:88:d7:9a:cc:d1:fb:c9:
         d2:67:72:54:13:51:43:d9:79:13:d4:b1:c3:f4:b9:d5:48:f7:
         91:c9:80:a9
-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIDAnh8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTEyNzAxMTc0MloXDTI2MDUyODAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQzM2QzIxMTAvBgNVBAUTKDdCQzc1NjJGMzc4NTRCRDI2MzlFMjQx
MEQ2NzNFNTc3Q0JGQjMxMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDlL/sWTNGRfieggbcTIkqCjXQ5O4hvHDG2f5efPWjPGfA+ohhIJZty2k4las1Y
a9YzsqL4JiW/IAqJCR0NdZK3mAGd4uQN3AgrMmI5tsCYpuA2XWBrdrUSbksnEHDz
+kX3Tcf4lA9oIMgm+zCFbQ9895xyCGOmBYbPjxs/CiC530lxD4TmyT0OzjIJsf3B
vQY5M4Hz72pLI4xJPz0ucOK8Qm+h26NZ/R1bBFaukob/0ID+TpBcKs3YZAXQMasS
Hv4L/rSw2TEEVgsti25O8DjlYWGe82/tkaFIF4K2fZWrLtgQzr1VFCEH2QGo28qn
he4wy+EVJvfA5uypWjCVHwpPAgMBAAGjggMeMIIDGjAdBgNVHQ4EFgQUe8dWLzeF
S9JjniQQ1nPld8v7MR8wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUMzNkMyLzUwRkI5MDcwRUMzOTExRUY4MUUwMDk4NkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFDMzZDMi81MEZCOTA3MEVDMzkxMUVGODFFMDA5ODZDNEY5QUUwMi9lOGRXTHpl
RlM5SmpuaVFRMW5QbGQ4djdNUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlgGMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBoz2QMA0EAgAC
MAcDBQAkAjrgMA0GCSqGSIb3DQEBCwUAA4IBAQCEKeiqHVW/24XCkWL7nb0zkzpl
WRh+GbUH3uyQbT42em7qQg1P5ovvPObMzTpAUnn4D2+4mvK85++GuD0UzdKgYlbd
ju781F7SaAS0Yz1YlP+zWcwwfLSA9ACgcUvT1fyHgyQEDJJ8r/YqCovIFvBANliO
1c1jj4p+FNVo+eKmaaxBWtgROKJiZJKMvFyclG8OwgjLs9Cu4UC0DzYxm7CmX1h7
sm0RYt6lWavzAephaZRPopVZX7c3u8NRnZbhQY+xkwiuVYFSOYTt9iJSsbmIwocf
ZZ8ox+Y6O8rn0Psrp2/uOojXmszR+8nSZ3JUE1FD2XkT1LHD9LnVSPeRyYCp
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:25:23 2025 by rpki-client