This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer
File:                     Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer (raw, json)
Hash identifier:          mmEnEQtGOdF4cAjNoRAVA4P5e8dn+V0UEZLEJZs1DUs=
Subject key identifier:   0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       0283FB
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 06 Jan 2026 08:14:37 +0000
Certificate not after:    Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources:    AS: 142030
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164859 (0x283fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Jan  6 08:14:37 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=A917C09A, serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d5:f5:4f:b1:ce:e7:15:1b:82:cd:ca:3a:c8:
                    a2:ac:ad:7c:b4:92:5b:74:4f:f5:df:11:67:d7:e9:
                    30:7d:d6:12:40:1e:90:a6:92:01:ec:6f:ec:92:ca:
                    7c:c4:74:8e:b7:c1:39:97:8f:18:15:16:69:ee:be:
                    03:36:22:d2:9b:9c:ce:5b:cc:f3:a3:c0:cf:27:92:
                    51:a9:3e:01:4c:02:bc:16:b1:08:59:a6:ea:52:c7:
                    a2:bd:c9:14:f5:80:78:e0:b5:90:b7:b2:04:f8:76:
                    7e:5d:ce:79:2d:60:b5:7f:3c:d1:78:dc:23:8a:a3:
                    c6:f9:db:d5:59:44:ca:d7:b3:96:a3:89:b6:e3:de:
                    49:eb:c4:82:bf:be:2f:db:9b:19:fd:1d:8f:e9:54:
                    87:26:3a:48:bd:e4:c5:e8:60:7f:df:14:7c:6d:00:
                    b5:0c:46:3e:91:5f:15:c0:d8:ca:f9:4a:ac:8e:ce:
                    e8:73:fd:53:60:c9:08:3b:e0:ca:0b:83:fb:7a:bf:
                    27:6f:06:c6:e6:0e:2a:40:69:8b:cd:6f:03:91:d0:
                    5c:e1:f0:2e:28:08:b3:ad:7d:42:94:71:fa:cc:5b:
                    b4:9b:0b:fb:bb:a3:a8:eb:b4:1d:ed:3f:36:66:07:
                    0d:8b:22:5b:a2:a2:77:ba:53:c3:39:29:24:03:2b:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  142030

    Signature Algorithm: sha256WithRSAEncryption
         aa:c3:01:cc:2b:c2:0c:3b:ea:2b:22:32:03:06:a2:d3:be:b4:
         98:41:95:9c:1d:07:00:26:6e:a4:ef:8b:c3:e2:31:31:c9:74:
         8a:b2:76:1b:b5:4d:21:f9:1c:4d:14:a7:7a:80:6d:d0:48:d6:
         ed:8b:e9:22:63:b7:b6:f7:7d:25:29:1c:db:30:f4:b5:f3:a2:
         7e:04:93:92:31:63:f5:26:51:a1:23:cc:48:e1:ea:b0:1d:8d:
         65:12:5b:e1:2c:fe:25:23:1e:7d:27:fd:bf:50:1c:42:ea:7b:
         63:96:5f:9b:2b:46:59:6c:e3:f4:50:ae:69:2e:92:ab:2b:d1:
         56:49:27:5e:35:af:54:5c:0c:2c:ba:14:6e:28:2b:1b:33:13:
         54:e5:8f:36:6b:df:e4:0e:bf:95:9d:91:17:8e:fc:b8:b5:99:
         da:d3:65:24:9c:93:db:18:45:80:a0:fa:62:3d:07:06:11:32:
         35:b7:1c:7f:81:c0:91:b1:3f:78:0f:be:7e:73:d4:65:53:4d:
         48:cc:11:e8:1c:d5:4a:f3:5b:c3:af:f7:47:5c:55:18:0b:10:
         d5:e2:bf:41:cb:43:f5:da:b1:23:8a:0f:5e:ca:16:9b:14:a4:
         fa:ef:1a:43:ae:7f:de:d0:c4:f0:2d:87:f8:f5:83:96:e2:48:
         b7:be:2a:e7
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIDAoP7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDEwNjA4MTQzN1oXDTI2MTIwMTAwMDAwMFowRjERMA8G
A1UEAwwIQTkxN0MwOUExMTAvBgNVBAUTKDBGM0I1RkYxNTQ1MDUyOTE0MDhDNDg0
MEIxMDM2RDkyQTkzMDRFRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCX1fVPsc7nFRuCzco6yKKsrXy0klt0T/XfEWfX6TB91hJAHpCmkgHsb+ySynzE
dI63wTmXjxgVFmnuvgM2ItKbnM5bzPOjwM8nklGpPgFMArwWsQhZpupSx6K9yRT1
gHjgtZC3sgT4dn5dznktYLV/PNF43COKo8b529VZRMrXs5ajibbj3knrxIK/vi/b
mxn9HY/pVIcmOki95MXoYH/fFHxtALUMRj6RXxXA2Mr5SqyOzuhz/VNgyQg74MoL
g/t6vydvBsbmDipAaYvNbwOR0Fzh8C4oCLOtfUKUcfrMW7SbC/u7o6jrtB3tPzZm
Bw2LIluione6U8M5KSQDK7wfAgMBAAGjggLuMIIC6jAdBgNVHQ4EFgQUDztf8VRQ
UpFAjEhAsQNtkqkwTtQwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTdDMDlBL0JCNjczRjNFRUFENzExRjBCOUNCRkJFNjY0NkY1NkJDLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE3QzA5QS9CQjY3M0YzRUVBRDcxMUYwQjlDQkZCRTY2NDZGNTZCQy9EenRmOFZS
UVVwRkFqRWhBc1FOdGtxa3dUdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAirOMA0GCSqGSIb3DQEBCwUAA4IBAQCqwwHMK8IMO+orIjIDBqLTvrSY
QZWcHQcAJm6k74vD4jExyXSKsnYbtU0h+RxNFKd6gG3QSNbti+kiY7e2930lKRzb
MPS186J+BJOSMWP1JlGhI8xI4eqwHY1lElvhLP4lIx59J/2/UBxC6ntjll+bK0ZZ
bOP0UK5pLpKrK9FWSSdeNa9UXAwsuhRuKCsbMxNU5Y82a9/kDr+VnZEXjvy4tZna
02UknJPbGEWAoPpiPQcGETI1txx/gcCRsT94D75+c9RlU01IzBHoHNVK81vDr/dH
XFUYCxDV4r9By0P12rEjig9eyhabFKT67xpDrn/e0MTwLYf49YOW4ki3virn
-----END CERTIFICATE-----
Generated at Sun Jan 25 01:11:57 2026 by rpki-client