This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
File:                     fjqkjWfrmWmcArgfcWlt9GWopuU.cer (raw, json)
Hash identifier:          FDXzDCQfj0zbORoM8Ya/03CK2aHImoAjHu3y7mbW1mQ=
Subject key identifier:   7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       6E54
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 18 Nov 2025 14:48:43 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    IP: 160.187.210.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 11:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28244 (0x6e54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov 18 14:48:43 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:d4:fd:7d:32:e0:67:4a:22:24:5f:df:c5:
                    05:2f:da:44:9b:3d:f0:4b:ae:21:fd:35:a5:e3:32:
                    61:d0:eb:ff:fc:ed:9f:7c:41:47:de:48:6e:23:d1:
                    a8:5f:62:38:4a:2d:23:3f:ac:c9:ec:ef:cc:4a:66:
                    ca:57:5f:02:d8:27:43:d5:f5:14:c6:76:2c:3f:df:
                    e8:05:f1:0c:d2:41:c8:5e:4e:13:67:df:24:5e:ab:
                    1b:b0:f5:d7:8b:b3:cd:f8:80:b1:08:d0:b2:0b:c3:
                    6e:41:5e:fd:bb:35:c8:a3:62:b9:d1:76:c0:c3:27:
                    7a:59:e7:9f:e7:d3:eb:ff:6f:6a:c9:07:50:de:ae:
                    11:b1:37:be:ac:a0:ef:85:1c:4a:41:eb:70:73:2d:
                    95:5e:38:89:80:ad:87:ff:63:c6:46:38:23:4c:27:
                    53:b4:89:7f:87:ae:03:59:be:89:03:48:0b:b5:3e:
                    8f:a1:3c:fd:8c:97:d4:fe:0d:90:57:04:47:aa:d8:
                    c5:a9:4f:ec:2e:85:80:b1:d1:a5:4a:b6:b8:0c:4d:
                    85:a1:a5:04:f1:00:e7:f4:92:25:97:3d:ba:64:40:
                    29:a0:09:37:b3:54:03:6c:ee:69:dd:78:fc:e3:36:
                    71:a7:a5:5d:2f:af:87:89:96:5d:1c:f1:3a:2f:76:
                    84:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:35:13:0e:31:42:c0:63:9d:33:4f:30:92:6f:08:9e:f4:81:
         a6:b7:bb:e6:4f:32:1f:78:19:e7:97:ca:12:20:89:50:08:25:
         1f:4a:f4:a1:06:c0:c1:0e:22:68:e6:b1:68:d6:a8:c6:1b:0e:
         41:e9:3c:3b:dd:4e:92:b9:be:4d:ff:b4:1d:56:bc:6b:ee:e0:
         ec:15:e8:96:b4:de:f9:22:07:8f:fe:7f:58:ed:55:de:6c:28:
         0b:1c:74:1b:39:79:f6:81:a2:f8:c5:ba:92:77:fa:2c:8c:1d:
         60:ea:9a:6a:e0:8d:7e:08:35:9a:19:7a:b9:2d:4e:2a:06:10:
         a9:ae:4b:f3:2b:b4:ac:66:c4:1f:1a:b8:76:73:05:b3:94:dc:
         7a:fb:0e:94:08:ff:a1:28:25:4e:5c:7d:21:3c:a9:f6:70:18:
         17:1b:34:b5:7c:04:c0:2f:bf:e5:a7:32:5d:08:56:8a:ed:8b:
         5e:59:51:40:63:6f:5e:64:da:e1:ba:ac:5f:75:f6:d3:75:ee:
         e1:80:b6:a2:e9:49:60:96:43:14:03:bc:b7:8a:71:df:b4:f4:
         95:0b:ee:a1:4b:dc:18:75:0a:7e:c2:2f:ad:68:29:dc:2b:ae:
         0b:ff:3e:a3:e0:2a:8b:8b:e5:ae:be:52:93:28:0e:54:fe:94:
         64:ea:c6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:11:48 2025 by rpki-client