This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
File:                     e3T7MiZmknZU8foeyLcJwwU1UOM.cer (raw, json)
Hash identifier:          w2bzguh0TtrCwsG1TBoPp6NgMB5BM52G6dI1kpWYP/k=
Subject key identifier:   7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       027B1D
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 03 Dec 2025 03:02:22 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 141409
                          IP: 2001:df6:62c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 14:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162589 (0x27b1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  3 03:02:22 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91F1451, serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d5:fe:48:32:3f:9b:b6:66:ed:a3:3d:8d:cc:
                    b6:5f:f9:35:a8:ad:b9:9a:27:7d:76:bf:ff:7f:8b:
                    a1:07:3c:50:c1:25:7d:7e:3b:43:ee:5b:2b:80:22:
                    fa:49:f8:2c:7e:9d:4b:91:98:db:68:47:3a:4a:9a:
                    d4:a1:28:ed:fb:57:9f:9b:c2:43:1b:d1:4f:e0:bb:
                    fd:1f:a1:4f:cd:78:36:30:88:48:90:3b:c8:4d:6c:
                    d8:22:b9:6c:00:1e:52:36:6f:ca:70:21:e5:12:bf:
                    7a:32:36:44:22:ab:d1:fe:b0:e7:76:8e:04:66:6c:
                    6b:2b:54:c6:3e:b4:3c:d6:f6:11:db:47:b5:6b:1f:
                    4d:07:4c:7a:fa:6e:05:75:1a:ff:19:68:09:9a:85:
                    87:e5:ed:d7:55:5f:29:ee:f8:27:27:f1:2a:39:93:
                    c4:a2:73:73:f6:9b:4d:90:7c:18:6e:49:93:51:4c:
                    3d:77:fd:0a:bf:5e:40:2f:e6:3e:7b:38:ac:42:e7:
                    15:89:6d:56:25:67:cb:e0:a1:b3:aa:d8:2f:c2:44:
                    f2:fb:29:48:ce:66:ef:d1:1e:de:74:11:bc:e7:42:
                    ee:8d:cd:99:89:ec:0d:68:30:51:98:46:8a:26:cf:
                    45:9b:ca:54:b5:9f:9c:ec:ac:da:c6:50:94:e0:a7:
                    4f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  141409

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:62c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:42:f0:70:7b:10:44:8c:b3:d0:dc:12:14:42:c9:20:d1:0b:
         70:40:53:64:b8:e1:b4:c4:b4:9c:c3:a5:85:f0:27:04:b4:4b:
         91:94:c3:f1:67:bd:72:b8:55:14:6e:6e:7e:20:71:a3:8f:27:
         b1:45:65:96:c5:0a:aa:d0:49:82:bb:2b:41:d2:ad:a7:0c:8e:
         2b:4e:6b:28:51:1a:3d:58:86:35:68:88:b9:96:a0:6f:6b:d3:
         91:e0:5c:26:0b:45:49:b7:23:98:7b:23:97:d6:71:0f:4d:0a:
         11:a7:34:2c:39:c7:6d:50:31:fd:ca:9d:78:2a:16:30:5a:43:
         0d:e1:5c:85:31:b3:6f:af:cd:93:08:21:27:c0:02:dc:48:f4:
         c6:bc:1e:65:10:8c:e8:60:c5:28:4c:ff:7a:f4:73:e3:3c:ca:
         8c:a6:d1:5d:68:73:a6:82:13:82:e6:ed:d9:90:5b:95:b9:72:
         ed:a6:c4:90:4b:d8:37:3e:da:76:dd:21:34:a3:21:da:5e:3a:
         7d:30:e3:1d:14:4b:ad:f6:ed:00:e0:cb:39:e9:c5:cf:f2:44:
         bd:91:58:bd:5c:79:1a:ff:04:01:85:56:c1:e4:4c:52:49:bd:
         7e:ba:30:e8:7d:9a:89:0d:e4:3c:91:31:18:33:64:08:c7:17:
         33:3b:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:34:21 2025 by rpki-client