This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WYMt_ndUWn2J_bBhkVxnGef4K98.cer
File:                     WYMt_ndUWn2J_bBhkVxnGef4K98.cer (raw, json)
Hash identifier:          Iu/lrbVMsXh1mFUFJWxAHbaQ2TqIz6CnJBLA7G5Ww7I=
Subject key identifier:   59:83:2D:FE:77:54:5A:7D:89:FD:B0:61:91:5C:67:19:E7:F8:2B:DF
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       4F90
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 21 Jan 2026 09:56:30 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    IP: 151.158.44.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20368 (0x4f90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Jan 21 09:56:30 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91D8601, serialNumber=59832DFE77545A7D89FDB061915C6719E7F82BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:1e:8b:2e:cd:e8:c5:17:74:ad:3f:84:2e:
                    f3:ca:31:2e:0b:6e:0d:11:44:8c:88:e8:ac:f7:13:
                    7f:95:7d:cc:75:0c:11:d4:70:71:41:1c:19:fe:4d:
                    aa:20:ec:b2:83:c2:ba:d4:0c:c3:06:22:30:5b:d2:
                    bf:5d:23:2b:c0:ef:bf:9c:44:01:06:a0:42:26:ae:
                    a7:a5:cb:92:1c:ec:06:d0:5a:fc:1a:81:e1:a0:25:
                    31:c0:d1:ac:69:ef:fc:2a:58:17:62:e5:d8:2c:94:
                    f4:42:ba:3c:ff:a4:2a:38:77:ed:0a:00:fc:80:f1:
                    8c:23:e8:ca:52:1f:5f:3a:b3:5a:3c:5b:f2:a9:cf:
                    0c:9c:10:b7:b8:a9:49:fe:f6:a9:0d:87:c0:c1:dd:
                    2c:e2:0e:62:31:fd:d5:10:05:be:68:e7:d5:a4:1a:
                    cf:6a:b8:ab:99:d5:11:4b:52:2a:d3:6b:55:8d:2a:
                    a1:53:23:28:f3:01:1f:cc:b5:d6:d9:af:fb:24:4e:
                    1c:61:90:1d:7d:1e:bd:b5:a9:19:70:cc:91:3d:8b:
                    66:43:e8:a4:8b:ba:0f:6a:c4:f8:d9:93:57:e4:19:
                    dc:6b:68:b4:d0:12:1e:5c:cd:30:c3:48:87:cf:cb:
                    27:69:76:a5:90:cd:7a:93:30:23:90:62:83:dd:55:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:83:2D:FE:77:54:5A:7D:89:FD:B0:61:91:5C:67:19:E7:F8:2B:DF
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91D8601/73AA3EBAF6AF11F0BE1EBC5F436F56BC/WYMt_ndUWn2J_bBhkVxnGef4K98.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:bf:4e:bb:05:57:f7:3c:eb:f2:df:8b:73:ad:b1:c8:70:c1:
         49:14:81:a9:a1:c7:c0:c6:50:b9:ce:5b:27:a9:2a:03:79:26:
         65:22:bf:c6:d8:f6:de:c6:16:b5:ee:eb:79:c5:81:4d:af:09:
         e8:0a:a2:b9:36:31:da:5b:05:58:bb:2a:dd:9b:6e:35:01:21:
         cd:55:fe:fc:e3:8d:8a:db:bb:40:9d:bc:9c:82:4c:6d:fb:e9:
         6f:96:1e:89:d2:de:52:2a:7a:f8:a5:26:31:22:f5:36:4e:bd:
         97:60:c3:88:b1:0a:f0:b7:49:06:19:52:2f:95:08:eb:2f:ac:
         eb:03:f9:48:8c:5c:c3:4f:1e:d2:d8:8a:c8:83:54:68:f8:57:
         2a:33:fc:21:65:b1:e5:3a:dd:e6:93:b2:7e:ce:2d:34:30:0b:
         68:1b:0b:bf:ab:50:ed:e1:3a:3d:07:37:71:0b:5f:a0:dd:21:
         7c:61:f7:e4:f9:d0:6a:5e:d4:19:55:aa:ba:2b:18:aa:bf:19:
         85:90:d9:0c:f8:d1:22:07:e4:dd:05:9d:f0:b7:b9:a8:a4:8f:
         be:d7:b0:ec:7f:f7:e7:ca:08:5e:4b:f3:29:fe:7f:4f:c2:6c:
         8f:35:8d:f6:e0:87:a6:c4:3b:67:4e:cf:b8:1a:61:b2:d3:8d:
         99:48:ca:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:30:03 2026 by rpki-client