This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
File:                     xeslRrtzrOaT4ZqxB9g_JmYyzug.cer (raw, json)
Hash identifier:          xtgPosldQV0TuF0OMbcEOCVLh4uTBmvpJtEhIz/hCQs=
Subject key identifier:   C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       4FA4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 22 Jan 2026 15:19:13 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    IP: 151.158.50.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20388 (0x4fa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Jan 22 15:19:13 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c2:8e:b4:d7:40:1a:3c:ad:cf:64:02:ef:96:
                    fa:14:1a:c2:1b:95:c6:b6:46:0e:c6:7c:e9:cb:cb:
                    b1:fa:50:66:18:07:48:d0:9f:e4:0f:f3:4d:67:72:
                    69:cd:38:55:fa:e0:92:5d:f2:76:ca:76:05:ea:5f:
                    1e:a7:f7:95:47:87:8e:68:e6:99:b3:ae:8d:e4:f1:
                    82:1a:b6:4f:ac:f3:77:3c:ad:c7:69:f0:d4:90:d2:
                    24:1d:1d:e4:f2:b6:b4:e7:24:ab:7b:08:b7:fa:ba:
                    85:d3:8c:a9:9d:78:a8:4a:4c:8b:f0:e4:44:d9:f4:
                    a1:93:ac:6d:d1:13:65:e5:6e:43:1e:ea:c8:12:fc:
                    7b:0b:9e:56:bd:cb:d0:55:ca:5b:58:18:42:22:db:
                    d0:0d:df:fd:08:11:5f:0c:37:2e:2e:0a:0b:3e:f8:
                    87:06:e0:b3:45:ce:aa:ee:88:0d:5f:cd:d6:ac:e0:
                    ba:9a:4f:d8:af:e2:b5:5a:eb:18:ba:62:76:e3:78:
                    36:23:63:3f:e5:92:a7:13:0c:d5:16:e3:89:34:38:
                    58:62:64:6a:04:f9:52:8b:0e:aa:8c:93:c0:75:4a:
                    e4:2d:60:84:e0:1d:fe:70:2e:76:da:f9:1e:c3:f8:
                    0b:04:5f:16:e0:65:74:c3:7a:af:f5:75:30:7f:be:
                    a7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:f3:09:67:25:56:d3:c0:b7:47:09:e8:5b:83:07:6e:53:82:
         5f:c5:e1:41:c0:d7:80:5e:53:ac:38:5a:df:db:14:c5:ac:4a:
         3c:e2:cb:28:e0:e7:ba:bc:49:0b:c2:fa:fe:31:50:4b:86:40:
         10:ef:c4:54:e1:41:b3:09:62:e6:f2:c7:e7:0b:09:84:84:a5:
         49:cc:95:c1:08:8d:a3:9c:89:c3:5c:a0:75:2b:05:e8:5b:3f:
         7b:e8:17:f3:1a:db:46:76:c0:84:ec:fa:ff:88:01:92:4b:00:
         a3:ce:14:d3:43:82:74:6d:30:f8:6a:c6:2f:dc:ca:b3:fe:cc:
         d1:97:d1:5a:d0:d5:5c:8a:db:70:68:84:0a:92:d1:3e:67:6b:
         fc:76:53:6a:b9:b4:49:ae:f5:4b:84:d4:b6:32:78:4a:11:92:
         59:ea:33:92:37:4c:ba:29:e7:79:01:3c:25:a4:79:5c:69:86:
         70:92:90:17:68:70:fb:c3:36:df:96:e9:ee:e9:3d:59:17:a0:
         00:76:8a:e3:b3:42:86:67:b1:fa:5a:d5:ec:55:03:c3:b8:6a:
         8f:80:48:ea:88:7f:d0:83:bf:63:7e:2e:7c:f7:f9:05:50:1f:
         6a:69:3f:4d:36:c1:fc:67:43:1f:bc:d4:32:ff:6c:fa:02:8b:
         77:be:77:70
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICT6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYwMTIyMTUxOTEzWhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDDAhBOTE5N0E1NTExMC8GA1UEBRMoQzVFQjI1NDZCQjczQUNFNjkzRTE5QUIx
MDdEODNGMjY2NjMyQ0VFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AI7CjrTXQBo8rc9kAu+W+hQawhuVxrZGDsZ86cvLsfpQZhgHSNCf5A/zTWdyac04
Vfrgkl3ydsp2BepfHqf3lUeHjmjmmbOujeTxghq2T6zzdzytx2nw1JDSJB0d5PK2
tOckq3sIt/q6hdOMqZ14qEpMi/DkRNn0oZOsbdETZeVuQx7qyBL8ewueVr3L0FXK
W1gYQiLb0A3f/QgRXww3Li4KCz74hwbgs0XOqu6IDV/N1qzguppP2K/itVrrGLpi
duN4NiNjP+WSpxMM1RbjiTQ4WGJkagT5UosOqoyTwHVK5C1ghOAd/nAudtr5HsP4
CwRfFuBldMN6r/V1MH++p50CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBTF6yVGu3Os
5pPhmrEH2D8mZjLO6DAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTdBNTUvQjMyQjUwMjhGN0E1MTFGMDg3RTUxRjE2NTU2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTk3QTU1L0IzMkI1MDI4RjdBNTExRjA4N0U1MUYxNjU1NkY1NkJDL3hlc2xScnR6
ck9hVDRacXhCOWdfSm1ZeXp1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZeeMjANBgkqhkiG9w0BAQsFAAOCAQEABPMJZyVW08C3RwnoW4MH
blOCX8XhQcDXgF5TrDha39sUxaxKPOLLKODnurxJC8L6/jFQS4ZAEO/EVOFBswli
5vLH5wsJhISlScyVwQiNo5yJw1ygdSsF6Fs/e+gX8xrbRnbAhOz6/4gBkksAo84U
00OCdG0w+GrGL9zKs/7M0ZfRWtDVXIrbcGiECpLRPmdr/HZTarm0Sa71S4TUtjJ4
ShGSWeozkjdMuinneQE8JaR5XGmGcJKQF2hw+8M235bp7uk9WRegAHaK47NChmex
+lrV7FUDw7hqj4BI6oh/0IO/Y34ufPf5BVAfamk/TTbB/GdDH7zUMv9s+gKLd753
cA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:00:56 2026 by rpki-client