This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
File:                     Abso_b4VWoZixe5oDP3wyY1OvR0.cer (raw, json)
Hash identifier:          SMghkuzpJWv+VgvQeXoRDlBQcq9j0YrBLMvk5Cjr5Q4=
Subject key identifier:   01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7223
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 12 Jan 2026 14:25:35 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 157.10.128.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 10:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29219 (0x7223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jan 12 14:25:35 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:1f:3f:1f:2f:dd:f9:0d:c3:37:1a:0a:a1:
                    20:78:3f:44:49:08:ba:4f:bf:6c:86:cf:f1:b0:10:
                    56:04:fb:29:59:fb:26:7b:3f:a6:9e:35:11:e2:4d:
                    01:bb:91:2b:40:67:fe:71:ab:be:3e:f9:a4:aa:97:
                    76:d8:dd:c0:1e:bd:97:fb:45:00:70:a9:e8:9f:8f:
                    f2:86:85:2a:a0:e7:2c:7f:24:e7:4b:2d:cc:0c:48:
                    35:6c:2f:d8:7d:71:81:79:5c:01:0f:ea:99:05:ff:
                    c0:d8:39:29:7c:7c:0e:94:e5:35:e4:45:b2:dd:e8:
                    27:3b:26:02:cf:30:09:1e:3c:7a:6c:3b:ce:b8:ef:
                    69:83:8d:31:b3:df:f6:85:11:49:c0:1d:d9:4b:12:
                    03:05:b6:0f:8b:1b:fe:29:52:75:50:e7:f7:14:cf:
                    dc:d3:d4:b8:b2:a8:e4:29:71:be:2b:ca:88:4c:79:
                    1d:85:50:5d:8c:e6:cc:e0:86:d6:6c:f2:0f:6f:1a:
                    f1:ad:ae:7c:f7:79:d6:40:6d:bd:cd:af:28:60:42:
                    6a:9f:4a:8a:4a:8a:97:7a:44:f0:87:fe:5e:55:b1:
                    fb:8b:c0:c3:2f:83:5a:89:f3:29:9b:74:16:4b:d0:
                    9d:76:f8:6a:66:a7:e6:fa:b6:44:55:53:62:fb:fd:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:47:b4:4d:12:a5:da:fa:c8:b0:66:c1:c5:00:dc:74:16:22:
         07:42:e0:fe:bd:0a:13:61:cb:2a:ce:0e:ec:42:97:e3:c2:7d:
         0f:81:77:25:80:37:9d:88:1a:7f:36:d2:98:56:6d:92:11:aa:
         9c:eb:bd:c0:20:02:48:77:b4:9e:fd:87:d0:4c:6b:fc:fb:b6:
         28:2e:cf:39:3f:13:55:85:73:59:b4:88:d6:a6:d2:d0:70:9e:
         88:0a:3a:af:4f:97:04:74:8c:86:8b:bd:ba:b8:99:87:a4:c3:
         23:b9:88:12:99:6c:9e:d9:0c:11:82:b2:fc:cd:c4:20:57:f8:
         91:a0:e4:db:ea:d4:82:63:5b:6b:12:ed:a5:14:92:cf:d7:d7:
         bb:1b:15:5f:7a:09:cb:39:2b:3e:92:da:ce:04:68:d5:6d:c6:
         e7:5c:b2:a8:2b:c7:f6:f8:b0:ba:98:1b:80:38:f3:94:6d:b9:
         f7:32:20:05:c0:d6:a4:30:ed:10:3a:03:4f:e2:ca:40:8d:ad:
         b0:52:da:46:b7:2f:b5:ad:a8:db:65:8c:d3:0a:06:ac:45:f7:
         1c:cb:e8:7c:79:d3:eb:ea:ac:8f:4f:b8:d1:b0:7e:9a:0f:50:
         25:8f:72:0e:52:f4:d5:c7:bb:dc:2a:dc:44:e7:65:d7:d0:5c:
         09:bb:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:32 2026 by rpki-client