This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer
File:                     7DQrlR3sel8OPnf5LMsf-yHhmlg.cer (raw, json)
Hash identifier:          I3rdiVILpkUMQAB2Mqy1Rv7PVe8yY/ZzIwyRS3r8ivM=
Subject key identifier:   EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028E71
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 10 Feb 2026 14:09:58 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    IP: 103.180.30.0/24
                          IP: 2001:df0:5640::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 04:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167537 (0x28e71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb 10 14:09:58 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:53:76:46:d4:dd:08:52:80:3e:46:be:c2:
                    e1:e0:dc:93:04:29:22:1a:ef:ef:ee:dd:e3:e6:04:
                    48:b8:15:47:07:93:b3:c6:8d:9b:3f:27:26:42:5c:
                    3f:c6:f5:3d:f1:18:6a:ec:05:fe:0d:51:dd:73:b7:
                    9e:ce:c5:3f:1c:eb:aa:63:fb:ee:e6:76:3a:56:7e:
                    b5:b3:7c:27:65:99:b7:9b:81:73:16:16:6b:d4:75:
                    a0:7b:cf:b7:56:52:6a:27:15:61:3b:bd:f5:1f:33:
                    0a:99:3b:71:9f:51:b1:4e:fd:07:53:f7:f6:77:8e:
                    45:1f:d2:f1:af:3c:28:56:b3:c4:e6:e6:30:1d:57:
                    5e:9a:82:f3:86:e7:ac:ac:da:ed:12:80:33:ba:4a:
                    36:e8:b2:1a:a1:05:38:46:dd:67:e2:d8:d1:0f:8f:
                    3e:df:95:80:78:0a:12:d7:e3:4b:89:4e:1a:ce:41:
                    34:74:19:46:06:2e:17:94:10:58:e6:f1:7b:90:8b:
                    fb:fb:7a:fe:c6:1f:b1:88:f0:1a:94:62:05:aa:fb:
                    d6:51:6d:93:21:be:14:31:d8:da:47:50:a9:78:30:
                    8c:3d:69:f0:0d:e4:70:1a:11:b1:05:51:b1:0a:e8:
                    fb:6a:34:1a:cf:55:1a:9d:b6:86:9a:fe:6d:fd:09:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.30.0/24
                IPv6:
                  2001:df0:5640::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:ca:4e:41:32:62:87:36:15:ae:5c:74:9d:d7:97:77:3b:48:
         e3:35:77:01:ec:28:22:c8:2d:46:90:d9:d3:1d:9e:d7:eb:a3:
         30:fe:8a:d5:dd:b7:43:00:b0:58:4a:a7:a1:c6:76:b6:c9:8b:
         71:3d:b8:db:5f:b3:a7:3a:25:fb:b8:3f:7e:eb:dd:af:b9:74:
         ba:f3:f8:1c:7d:ad:92:19:95:6d:84:48:3c:15:b0:3c:37:aa:
         3e:fe:46:79:4b:d6:4b:27:b2:c3:91:fd:03:45:19:33:d6:c4:
         c6:b2:fc:b2:3c:d4:fc:cc:9e:e4:d0:94:1f:d4:53:0c:97:68:
         61:e5:f9:42:29:c0:f2:f9:13:8e:a1:42:5d:a8:da:d3:c9:c0:
         46:66:90:67:13:8b:c6:a4:ff:ec:cd:0d:89:b6:b2:58:32:49:
         86:f9:ef:e8:d2:f4:3a:07:f2:d4:4c:97:9f:8b:d1:a1:dc:1e:
         b7:b7:1f:85:c5:12:36:55:b8:1e:c1:54:84:1f:1d:61:6f:41:
         ac:11:9d:06:1f:a8:90:2b:a5:dc:d6:f7:b2:e7:c1:a2:6c:a8:
         5d:a5:d1:5b:9b:ad:a4:43:84:6c:95:f1:35:38:bc:e2:2c:e7:
         31:ec:34:51:d9:2b:9e:f9:00:97:87:53:70:7e:22:1d:2b:fd:
         6d:94:17:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 09:17:13 2026 by rpki-client