This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
File:                     64P0iA8jV15XUXhcbgqyvgskm8M.cer (raw, json)
Hash identifier:          f/O/o19QpqhvvgL4r4LJAT5HcMiWTXQJITh1+gtS/A4=
Subject key identifier:   EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7211
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 12 Jan 2026 13:27:05 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 160.250.44.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 14:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29201 (0x7211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jan 12 13:27:05 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A917C0F3, serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:4a:0e:e3:2b:9f:4b:d5:b5:51:df:5a:29:
                    cb:df:ab:d2:8d:a6:f6:2b:d7:59:a1:64:ae:2c:65:
                    9b:fc:93:bf:c2:38:8f:06:34:7b:8b:af:0e:96:20:
                    68:64:18:ef:42:06:62:88:81:0a:60:b8:81:ed:ef:
                    ba:ef:87:cc:4e:24:f4:00:b7:f6:03:00:58:00:61:
                    48:35:ac:a7:b2:b8:ef:53:18:40:d0:95:4f:f8:93:
                    6d:47:67:2d:77:53:bc:7e:73:19:29:2f:b8:21:59:
                    b5:c6:20:f2:22:6b:6b:1e:40:4a:29:df:39:ab:fe:
                    d3:c4:ed:3f:41:15:a5:1d:f1:02:d4:2a:77:bb:5c:
                    99:1d:b6:85:6b:9c:dc:57:35:dd:14:a0:0d:db:e3:
                    bd:fd:86:d4:94:42:74:4c:d3:87:0b:71:38:07:60:
                    f0:8b:e4:83:42:f5:c2:c4:f0:d5:0d:78:9d:d9:5f:
                    cc:2c:7b:1f:62:57:92:b1:cb:cc:db:19:05:c8:89:
                    21:97:03:d3:77:78:0b:0f:0b:59:e4:55:dc:c2:fb:
                    64:65:c6:77:4e:0a:e1:51:50:8d:2a:73:eb:2a:b8:
                    6b:47:bb:46:84:0f:3f:0a:0f:3e:66:73:ae:a6:42:
                    a5:61:99:c3:d0:1f:12:6e:55:fb:4c:c8:28:85:67:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:08:77:60:bf:da:3e:c0:5d:bd:90:2a:e5:60:24:8f:46:b8:
         d8:b6:fd:de:1d:65:f4:51:cd:cd:27:ec:01:4f:e0:e4:7c:89:
         8e:54:a5:09:69:52:0c:c2:38:17:46:ae:b5:b9:74:06:ba:f2:
         47:fd:3d:c8:9b:58:28:d0:6b:e2:24:14:69:57:5d:e8:50:0d:
         2a:6a:a7:03:d7:ee:b9:28:6f:16:c0:e0:99:dd:b0:2e:23:24:
         4b:62:28:93:8f:32:82:92:3d:3d:c6:b6:3c:09:94:e1:cf:6b:
         b9:87:b7:15:bc:aa:86:05:d7:1b:9b:cc:75:be:4c:c5:aa:b7:
         de:7e:c6:0c:1f:08:11:36:08:11:13:7e:5a:9f:28:0f:3c:23:
         fc:78:eb:3a:68:74:01:d9:c8:8d:31:1c:fe:f4:57:c7:05:9a:
         25:f4:e5:9d:75:1e:58:2a:f3:e4:fa:10:bd:7f:cd:cf:f9:15:
         e5:0d:27:38:46:f0:b2:77:08:2b:f4:6f:28:7d:df:6d:ad:6c:
         82:87:26:aa:e8:d1:9d:18:69:49:5b:fa:96:38:fb:94:94:80:
         79:34:9e:cd:e5:3b:60:47:a8:a0:8a:59:79:8c:96:64:5b:a9:
         b5:d2:60:25:f9:de:a0:41:b1:ec:09:26:89:ef:ac:f0:40:81:
         12:e3:a4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:09 2026 by rpki-client