This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
File:                     yddu42nMHPDmKcUQpLr0ZeFfteE.cer (raw, json)
Hash identifier:          TQGLXtnvMpEVl7Zil/asKfCaxXgqp13wqKS2dS0OtyA=
Subject key identifier:   C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0284B6
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 08 Jan 2026 13:44:53 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 132008
                          IP: 103.178.72.0/23
                          IP: 2001:df0:36c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 18:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165046 (0x284b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  8 13:44:53 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:6f:f5:0c:2d:9e:e0:78:84:61:d9:ab:01:
                    fb:ef:5b:8e:97:5d:17:14:46:80:1a:4c:7f:98:33:
                    2e:d8:51:69:c5:b3:aa:93:b6:b4:b8:e3:77:9c:7e:
                    b0:41:c5:2a:66:87:94:a5:20:d0:ae:52:4d:54:fe:
                    74:15:2b:cb:1f:1c:59:59:07:17:30:aa:9b:0c:5d:
                    64:1b:36:cb:89:80:e6:01:57:c9:54:10:65:b7:0b:
                    fa:eb:7d:c1:78:81:37:4f:60:7b:c7:4e:09:d7:f5:
                    3c:58:6b:13:e6:06:19:f6:48:0a:93:bf:80:07:4d:
                    e7:28:75:a5:e1:f0:fa:02:cf:97:96:c2:b5:89:89:
                    9f:c7:8d:b5:f8:dd:9f:84:b8:f5:31:67:49:ce:93:
                    78:01:f9:a4:34:b3:25:81:1d:fe:97:0d:6e:62:fc:
                    c6:29:96:78:78:e0:ee:20:96:a7:54:10:5f:99:47:
                    70:5e:6b:08:46:61:f8:54:17:db:86:be:a7:bf:2e:
                    b0:89:76:b2:f6:1c:6e:ab:af:2a:a4:f8:f0:43:ea:
                    48:6f:57:72:c0:c5:37:54:4a:f2:94:22:30:25:3f:
                    23:42:87:b2:53:20:1f:0f:4e:cf:a2:1f:10:9a:bc:
                    48:d9:64:8c:95:fb:cd:00:79:a5:83:b2:71:b4:62:
                    90:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  132008

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.72.0/23
                IPv6:
                  2001:df0:36c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:e1:1f:4e:b0:79:8c:02:46:93:b5:b9:1c:1c:4a:b8:03:70:
         df:17:9f:71:f9:f6:53:e6:b1:6e:63:9f:c0:7f:03:14:8f:76:
         d9:49:2e:2a:19:69:23:28:f7:3d:76:9f:1f:13:24:05:c3:3f:
         12:fa:c4:94:1f:c9:fd:15:52:89:16:d0:29:e4:a5:c6:fd:37:
         a2:a4:32:2b:b5:3c:53:8e:99:48:ab:6a:97:bd:b0:37:ee:2a:
         17:42:70:72:58:74:9d:0c:2b:d8:18:59:2b:7e:55:ed:6a:60:
         60:03:65:a2:94:7b:95:8d:46:be:e9:32:c3:2e:d3:7f:65:e7:
         f1:12:ba:a0:80:1d:9f:9a:8b:98:fc:c3:b4:06:46:5d:51:f9:
         74:4a:fb:d1:6b:d3:82:1a:ae:3b:18:7e:dd:a0:f2:d0:e6:7e:
         af:b2:92:9e:84:67:99:0c:93:b9:e8:24:84:8a:50:4f:c1:ae:
         24:59:72:27:5e:74:aa:be:3d:5a:84:39:bf:a5:46:b4:5a:cb:
         76:7a:5a:4b:94:1e:51:6c:f7:df:64:67:a4:4c:0a:4f:c2:7c:
         c2:3b:b0:a6:f1:da:50:f9:13:72:b8:b7:f5:00:5e:6b:63:e0:
         6e:4d:09:b4:50:aa:ad:dd:98:7b:a7:15:df:0f:96:8f:26:36:
         af:78:be:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 12 01:07:10 2026 by rpki-client