This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
File:                     dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer (raw, json)
Hash identifier:          E+3atE+A7gN7YEezZJfKbdUgR2dWgUrijkPwn9Hy7rM=
Subject key identifier:   74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       717E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 04 Jan 2026 12:24:12 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 160.250.10.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29054 (0x717e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jan  4 12:24:12 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A911691A, serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:86:70:0a:5f:76:09:29:89:04:ee:ae:4a:65:
                    a0:08:4e:61:4d:3e:83:51:b4:e6:92:c5:e0:5f:d5:
                    a8:76:4d:e9:b2:20:93:55:b1:cf:97:60:f1:7d:26:
                    28:c1:5a:4e:bb:b4:91:d6:7b:3a:bf:33:3e:d6:30:
                    43:ae:0d:74:92:f6:ff:71:46:b3:a3:93:9f:09:74:
                    47:f0:ac:03:3e:3b:55:4c:cf:f0:9b:15:0f:04:95:
                    15:65:72:53:29:14:68:4c:b8:61:31:c5:9b:90:a8:
                    96:0a:15:c1:be:39:67:9c:b6:fc:25:ee:ca:8b:e3:
                    cd:15:a4:d8:d8:e8:07:89:b2:ae:70:22:17:23:e6:
                    6c:4e:49:87:81:c4:e6:db:b4:84:27:58:4b:a9:ce:
                    98:d2:3c:61:0b:b9:42:92:0d:b7:a3:33:0d:97:6d:
                    ae:a9:53:d5:15:f2:fe:8a:5f:ce:ae:4f:0c:ff:ce:
                    bd:d9:09:d8:f8:63:f3:b1:c8:1d:f2:6f:e2:b7:ca:
                    90:50:96:42:01:c4:cd:d6:fa:76:0f:bd:ba:e4:1b:
                    53:f7:12:17:49:ea:e0:20:21:0f:1c:10:1f:ed:42:
                    c0:ef:0b:a8:b2:28:a2:ab:bf:ca:ba:19:ba:d5:39:
                    e7:50:9c:c8:f8:61:6d:63:e5:0a:6b:14:8e:63:46:
                    a2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:41:bb:7e:5a:f9:c5:7c:64:40:60:39:4b:aa:b5:15:31:33:
         8a:93:b5:04:0d:76:54:4d:2c:77:6c:e4:c3:99:1d:b5:2c:47:
         af:a4:6a:11:8a:39:2c:b8:d2:72:bb:c2:9f:cc:68:fe:46:2e:
         66:70:37:ed:cf:99:b1:fd:6c:d9:0a:2b:f1:b2:e1:5b:ba:5d:
         85:37:ac:f3:ed:02:53:4a:1e:74:69:3e:66:ef:2a:ea:5d:24:
         a9:eb:1e:7f:2b:64:52:fe:db:d0:32:ec:6e:72:ca:d4:ce:c2:
         d7:3d:9d:ce:97:41:71:8e:de:0e:6a:95:6d:58:39:55:63:d0:
         25:b5:c7:bf:16:85:de:b8:9a:f5:9f:9a:87:6f:4a:e8:af:5a:
         f7:2d:bf:63:35:20:65:8d:bf:dc:24:f9:a0:71:8c:40:cb:bf:
         7a:ea:57:09:a3:cf:9b:a4:ff:93:dc:7f:a4:29:ad:00:a7:01:
         a4:2a:5d:8b:f6:d6:ad:73:bc:7c:dc:42:12:f4:6a:f8:68:16:
         77:df:62:73:6c:d4:fb:2a:47:0a:1e:ae:bb:2d:19:da:f6:72:
         82:63:d4:7a:62:58:db:d3:62:1a:80:f5:f6:b9:ab:ec:b4:50:
         c2:5d:fa:44:f6:50:9a:f8:2e:28:2e:02:0f:42:24:63:d6:f0:
         49:bb:ee:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:54:10 2026 by rpki-client