This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
File:                     yUoDUOcJ9WwjluMLRwyLXh37FwA.cer (raw, json)
Hash identifier:          58Xn40H+G6fYosr7UU4CDZA50BLlnH9ntsDjyGOsYew=
Subject key identifier:   C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027E47
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Dec 2025 12:59:54 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 9464
                          IP: 202.12.73.0 -- 202.12.74.255
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 14:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163399 (0x27e47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 15 12:59:54 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A9137992, serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:7c:20:31:2c:ea:aa:c5:59:4f:3a:c6:8b:
                    b7:4b:5b:19:ae:82:79:73:4e:51:4f:8b:d5:10:93:
                    b1:b1:fd:7e:36:25:fd:83:58:4a:e9:3a:c0:8f:ce:
                    ae:5f:a0:89:f6:14:c4:bf:8d:1b:7c:12:af:a5:81:
                    e9:d7:fb:74:8c:d6:68:60:4b:86:c1:c1:cd:70:97:
                    49:9c:38:a0:22:6c:9f:f8:4a:22:d5:28:04:03:50:
                    b2:8f:32:8f:76:4d:36:69:74:10:ad:8b:58:d3:e2:
                    b7:30:bc:af:ed:93:0e:1b:e6:2c:1d:23:37:22:da:
                    67:74:5b:1e:18:ac:b6:36:d6:88:71:dd:f0:91:24:
                    19:f6:24:92:2a:79:5a:17:17:35:9b:34:79:19:eb:
                    7b:37:f2:00:8d:65:52:9c:54:4b:fb:9a:25:22:32:
                    d3:f8:d4:47:43:0a:03:f7:a2:3b:74:c7:54:34:48:
                    f7:e3:95:ad:59:39:8c:0a:af:ca:8b:5a:17:4c:14:
                    02:67:6e:89:fd:ab:ed:e7:2c:c5:ad:67:47:78:c8:
                    d3:a8:e2:4b:12:93:df:bb:0d:a5:93:b2:b4:03:3e:
                    10:cb:3b:2d:bc:13:79:0f:31:be:ba:34:f2:f2:cc:
                    e8:9e:c4:84:98:15:e7:da:1d:2b:83:5b:d2:70:56:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9464

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.73.0-202.12.74.255

    Signature Algorithm: sha256WithRSAEncryption
         02:27:04:9a:ac:61:77:1c:cd:29:9f:2c:77:8d:1b:b7:d1:92:
         dd:f2:8a:ff:54:d3:53:4e:99:38:92:f6:b3:24:01:ba:cf:f2:
         a3:67:c1:31:4c:e2:a4:7b:22:7f:fa:99:fc:e9:7b:78:0a:32:
         7b:a7:90:1f:ab:0d:ad:08:68:b2:d5:c6:4d:52:2e:e4:e2:d1:
         4b:4f:3d:2b:76:73:6b:f0:86:05:b2:d8:83:c7:9a:9d:fb:c2:
         ea:ee:80:80:21:8c:99:ba:2e:ed:2f:a7:80:1e:08:14:a8:d9:
         94:10:72:6e:f8:e9:6d:6d:e8:a3:ad:a6:a2:84:93:75:0c:5c:
         02:58:83:34:73:77:6c:37:be:31:88:43:9f:d3:bb:0f:22:0f:
         34:a7:6e:1b:16:a2:c9:4a:c1:36:dc:da:8a:ee:bc:e4:7d:c5:
         d0:0b:97:fd:80:b7:6a:44:72:54:28:6d:00:99:7d:db:4a:61:
         ac:35:74:57:78:14:84:0e:65:ef:fd:c8:18:d8:b2:52:0e:5d:
         d5:e4:ba:8f:12:1c:20:d9:98:04:c7:84:31:86:f2:3d:68:b6:
         7e:bd:ee:9e:1e:14:17:cb:6c:86:28:7b:51:f8:d9:15:03:48:
         33:bf:bc:66:ba:f2:21:16:d3:cd:07:a5:7e:69:63:1e:19:ab:
         1c:fc:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:05:52 2025 by rpki-client