This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
File:                     aFVDc0Du-d9CM6owWYMBIXsKHFU.cer (raw, json)
Hash identifier:          7lyxc48pwAs20XtNkeYv1BCMkNpasRiUoUKVK8VIueY=
Subject key identifier:   68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7296
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 21 Jan 2026 01:43:31 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 144.79.175.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29334 (0x7296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jan 21 01:43:31 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A9110C8B, serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:99:c5:7d:73:89:f6:cb:3c:98:83:ec:e5:
                    e9:5c:79:0d:26:84:b8:c3:2e:f7:bf:bb:5d:89:79:
                    80:f8:e7:2c:de:b6:96:eb:6e:33:81:cc:2e:5b:ef:
                    0d:12:79:a3:c0:3b:cf:db:17:cd:a0:f4:15:63:46:
                    37:89:67:eb:79:74:a5:91:38:51:ce:77:b6:5e:65:
                    a6:86:48:e2:8e:10:ea:30:ed:7b:c3:7f:cb:b6:56:
                    05:96:9c:98:db:95:97:0e:70:7d:ed:33:16:6f:ca:
                    52:70:cb:02:9b:ef:31:aa:58:6c:ab:82:1c:de:0f:
                    8c:7c:92:e2:f1:70:79:1b:89:85:9d:01:44:08:14:
                    74:60:63:a0:cd:d3:52:c8:1c:40:17:c5:d0:3c:b2:
                    40:6d:33:65:36:aa:28:04:a2:6c:fc:f4:5e:8f:db:
                    93:c6:ee:45:72:f7:44:db:33:2b:20:04:ee:b8:76:
                    8f:82:89:f3:4e:fa:30:f0:2e:d9:19:48:14:22:6a:
                    6d:72:35:33:b8:02:d7:47:16:60:ae:5e:20:97:21:
                    b9:7c:d5:ea:a5:ad:20:ff:cc:42:45:4f:59:67:9c:
                    49:df:81:9b:cf:47:91:3e:d8:2d:3a:c1:b7:1a:bc:
                    5f:aa:51:f5:a9:2e:17:de:58:1c:76:d6:0f:ad:8d:
                    90:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:1e:0c:5d:84:ea:79:4d:24:73:7a:32:10:c2:b4:a5:40:57:
         40:a9:53:31:c0:73:1e:79:e0:62:37:38:99:3b:55:b2:71:2a:
         4a:bb:bc:74:f1:df:cf:db:67:e4:14:a8:5a:ff:1f:f9:58:46:
         d4:64:78:c6:59:bd:40:03:03:4f:8e:ef:ef:35:f9:10:2a:0f:
         10:69:73:a9:6c:32:95:5f:36:40:cc:08:96:ec:c1:1b:e2:6c:
         02:cd:9f:10:c3:d2:83:c7:9b:e5:fb:76:44:59:41:ea:55:8f:
         53:d4:2c:92:1a:2e:f9:72:68:80:76:fa:26:9a:ed:7d:46:e4:
         9c:2e:83:36:ef:4c:63:e9:e9:cd:05:65:24:1e:56:f8:f2:3c:
         16:d2:2f:8f:e5:7d:3f:ad:17:45:7e:5f:3a:df:a5:95:b0:85:
         c0:21:62:d7:d5:23:2a:cd:e6:2a:b8:c0:f9:b8:5c:af:d4:7b:
         dd:5f:78:ed:91:c3:9e:67:a0:fe:19:fe:95:a6:88:8b:f7:6d:
         f8:f1:32:ec:30:a3:d8:3d:a9:2c:32:c3:ec:32:c6:9c:69:d7:
         a6:f7:29:7e:3f:51:3f:79:a0:41:23:95:06:8a:98:2f:d9:94:
         f3:90:56:9b:5a:62:3f:93:50:49:6e:e1:e4:ee:79:fa:fa:20:
         9a:c3:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:47:21 2026 by rpki-client