This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
File:                     ggZKEDz1DwHRlFMAajhs04c5G-Y.cer (raw, json)
Hash identifier:          Yjcww0fT0bc7gzMEIyhlxl7KByUprHL1R3bF4FmMyoc=
Subject key identifier:   82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0280AC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 24 Dec 2025 13:46:00 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    AS: 150664
                          IP: 103.49.114.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 03:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164012 (0x280ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 24 13:46:00 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:d2:38:8b:d7:33:dd:49:97:77:7e:6f:77:
                    1b:a4:c6:a6:ef:ae:82:34:05:fd:41:24:93:53:f1:
                    53:de:91:bf:15:d2:39:c4:bd:68:93:a4:f0:20:dd:
                    0b:53:06:73:b0:96:9b:50:ca:62:4e:96:81:ba:e5:
                    2a:2a:d7:93:e0:a3:80:6e:02:1a:a4:f0:a1:e8:d4:
                    41:fa:9f:4e:5c:66:ae:14:ea:e8:cb:c0:7a:99:ad:
                    bc:a4:cf:e0:a2:5a:4b:ab:09:a1:7c:c9:59:2a:2c:
                    0f:6a:83:be:e6:c0:26:5e:27:de:76:2c:a1:43:ea:
                    7f:aa:d0:bc:d8:9b:38:f1:38:56:63:78:1d:ca:70:
                    58:a3:d3:96:e2:ac:4b:bb:35:7f:28:6f:8b:a0:a0:
                    71:20:b8:fb:c5:ef:6e:68:9e:ae:30:13:8e:74:4b:
                    9b:8a:43:16:81:09:08:08:3f:c0:ba:74:56:78:cf:
                    3d:87:5c:c6:99:a9:fe:5f:be:e9:fd:2b:e4:fb:9a:
                    99:56:e3:27:5b:4b:8a:20:15:2e:03:69:b8:03:9b:
                    b0:dc:98:80:66:85:50:2b:b5:4b:90:ac:7a:0a:c7:
                    85:57:27:25:bf:bd:c0:61:9c:1a:f8:65:cf:4a:6c:
                    40:3d:df:d6:b1:0d:80:65:8d:5f:a0:aa:62:19:98:
                    b7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  150664

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:db:5c:9e:d0:98:65:f5:fd:fb:fd:05:f4:eb:17:4e:2b:9a:
         64:49:bb:9b:f2:54:5c:9e:0a:54:21:47:cd:9f:d8:6b:53:61:
         f0:b7:86:fb:e6:9e:b4:10:69:14:4b:80:e4:6d:c4:d8:57:e9:
         61:ce:f3:5a:1e:d2:ce:3c:2e:d4:03:cf:f3:b2:0a:be:9d:44:
         c3:9c:6e:c1:9d:11:12:65:a7:4c:3a:06:ae:d6:bd:b1:f5:a4:
         6f:8a:05:90:0f:0f:2f:61:6b:2d:4a:a3:bb:2a:0e:9b:58:2c:
         62:bd:21:5b:73:c2:d2:7f:e8:ba:4d:40:e9:b4:38:e1:17:60:
         5f:1d:c2:81:6c:ba:9e:30:76:f7:60:55:40:25:23:20:43:14:
         8e:32:7b:92:75:3c:5e:33:65:39:f9:08:bd:36:b6:0c:bb:38:
         a1:60:06:ad:a4:85:9d:99:20:43:0d:83:2d:05:d2:ff:4e:ce:
         11:77:62:02:6c:23:49:8b:fe:8a:a3:d4:3f:c8:6a:b4:9b:26:
         f1:83:5a:ce:ef:e1:97:d8:7f:2c:87:9e:0a:d5:4f:19:23:3f:
         cf:cc:65:b5:8e:49:a7:6e:9b:30:fd:7c:00:a5:9c:c6:6a:95:
         33:d7:a0:7f:c7:db:79:22:de:5a:6e:24:2c:41:73:84:7a:2f:
         ab:51:5f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 05:33:35 2026 by rpki-client