This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer
File:                     zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer (raw, json)
Hash identifier:          EIU/0pnsMfs1nHdHaJszyMvqAHVlhZv5Mp5ZLOZPb+M=
Subject key identifier:   CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028AB5
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 31 Jan 2026 05:39:30 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 134355
                          IP: 180.94.15.0/24
                          IP: 2001:df3:2d40::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 04:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166581 (0x28ab5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan 31 05:39:30 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A9173D5E, serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:98:e4:57:37:ab:89:d3:97:68:fd:b3:9b:
                    93:00:1a:d0:6c:ea:a9:82:3c:26:45:4c:16:14:7b:
                    66:ec:66:c9:78:52:8e:8a:a6:73:ac:39:e8:96:58:
                    e3:4a:9b:a5:9d:17:b4:fc:7d:8b:16:bf:3d:af:de:
                    20:83:5b:78:2f:cf:dd:3f:06:45:23:fc:5e:b0:85:
                    52:6a:f7:bc:97:d2:07:d5:d5:21:0f:de:c1:85:e2:
                    60:da:44:07:9e:90:2e:c3:b3:db:f9:1a:2b:ee:1d:
                    2a:3f:52:38:ac:87:8c:b2:7a:0f:8b:29:21:a4:85:
                    c9:14:e9:bc:d3:a6:9c:4b:3a:89:16:c1:17:a2:3d:
                    29:05:20:f3:5e:79:76:d1:82:be:48:97:53:0f:fa:
                    4a:da:2e:de:1f:e9:1f:2d:e2:2e:92:56:52:69:3d:
                    42:9b:97:e1:a7:1e:90:d6:00:5a:14:a7:d6:3a:e3:
                    c1:dc:c8:db:ac:90:cd:07:10:b9:74:34:1a:3c:9e:
                    63:5a:64:7d:49:a5:58:5f:f3:e0:49:ca:d8:07:89:
                    71:cb:20:b0:52:8a:f1:dc:e3:c8:09:2c:e4:a1:00:
                    bd:66:42:f1:50:24:64:fd:4a:c9:bf:05:3e:58:87:
                    93:90:24:94:34:97:15:71:61:21:1b:b3:c1:fc:89:
                    97:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  134355

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.15.0/24
                IPv6:
                  2001:df3:2d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:fb:73:44:2f:5d:34:cd:4e:d1:42:7e:17:24:92:00:b7:cc:
         52:6f:8f:58:80:2c:21:9b:8d:8e:e7:39:48:a5:db:d0:f7:54:
         40:27:9c:b1:79:d6:20:c9:1c:17:36:0e:6c:be:3e:21:9c:85:
         17:f3:2d:b4:16:32:de:0d:ab:a1:80:f0:a8:9d:1f:72:c1:88:
         96:f9:07:83:89:29:27:f1:9c:fc:f1:ed:5c:1d:24:d8:df:96:
         0e:c4:cb:40:04:61:82:66:47:7f:85:7d:90:36:a2:38:db:11:
         a7:d6:56:16:3b:72:5f:45:36:b4:7b:93:23:2c:0f:ca:1c:fe:
         ad:06:38:66:06:bd:a2:1c:1f:07:21:3f:a4:03:2e:80:5a:35:
         52:dd:4d:4c:ef:21:9b:c2:12:c2:fa:54:1b:3b:53:f8:d8:86:
         b0:1a:96:03:cc:a6:01:e3:51:2c:09:17:fb:24:73:e5:dc:d1:
         27:53:74:c4:66:05:aa:2d:71:74:ef:79:87:2d:43:da:18:a2:
         41:84:e3:3a:c7:cc:02:7b:12:75:39:7c:17:50:49:49:a4:33:
         f9:71:ab:db:42:9e:02:8e:6a:f5:42:13:05:57:bb:c4:53:59:
         ca:95:24:c4:1b:f9:2b:7a:de:89:a9:2e:c1:d6:7c:cf:0d:dc:
         1d:eb:97:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 16 08:05:12 2026 by rpki-client