This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer
File:                     fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer (raw, json)
Hash identifier:          /aiqfoEIhBR5cK6IIDrMohrF8nKjQ4vCpx89UssMpG4=
Subject key identifier:   7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02756A
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sat 15 Nov 2025 14:05:09 +0000
Certificate not after:    Sun 31 Jan 2027 00:00:00 +0000
Subordinate resources:    AS: 153373
                          IP: 2001:df4:78c0::/48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 08:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161130 (0x2756a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov 15 14:05:09 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=A91AF4CC, serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1f:4d:49:3d:a4:93:04:bb:6c:e6:2f:12:a6:
                    06:b3:e8:2b:3d:ee:a7:d1:ae:8f:35:0d:9a:53:9a:
                    88:19:e3:b6:99:26:58:d4:3d:e0:51:f9:b0:51:3a:
                    cf:da:23:99:55:54:fc:a0:a1:b2:2c:93:64:02:98:
                    31:ce:4c:6f:c5:67:6e:b4:cb:74:90:57:60:cd:6d:
                    5c:80:d2:9f:31:73:df:d1:f2:37:eb:03:76:fb:e4:
                    5e:3e:9d:f7:33:24:21:8a:04:06:1c:47:37:05:82:
                    ea:1c:31:f5:db:24:bd:ac:f8:fa:6f:b3:12:70:4d:
                    d2:d6:7a:a1:eb:ce:ad:67:f7:f0:ce:57:18:17:dd:
                    70:7d:ac:1d:a2:c8:8a:2b:50:97:4a:60:e1:78:4b:
                    12:25:88:9e:e2:94:70:94:b5:22:9b:7b:e9:29:31:
                    48:0f:e8:f5:f0:5a:d3:bc:f6:3e:d7:56:9d:7e:eb:
                    d1:78:1e:87:ab:14:d8:07:25:b3:c4:45:6a:0d:b3:
                    1b:1e:21:c5:27:79:67:06:29:e6:82:5c:de:ce:41:
                    ce:d9:22:f9:ef:63:b6:35:ad:43:43:9f:68:12:c6:
                    7f:1c:a1:da:d3:eb:a0:88:45:8d:52:3b:9e:a2:d1:
                    85:e0:e1:8d:27:76:2d:75:f3:7c:5d:a5:33:38:4e:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  153373

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:78c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:ca:09:cd:e8:e3:0b:e2:c0:27:c9:ce:45:9f:4a:e8:57:b8:
         8c:4b:eb:f9:09:59:d5:d6:e2:3b:d5:b8:47:36:9a:cb:7a:91:
         3d:b7:0b:d2:15:49:cc:0f:1a:ae:46:be:3c:48:93:91:45:29:
         c8:3a:12:73:9c:fb:78:e2:be:66:fc:e4:c8:c9:64:3b:a7:a4:
         81:23:f8:c8:23:b3:b3:45:a6:ed:f3:fd:ad:41:fd:05:6e:a7:
         d5:8b:ec:bd:3e:07:39:64:00:ac:b6:1a:df:45:66:1c:61:9f:
         9d:ce:e2:17:b9:e1:0a:f2:16:5a:88:8d:6d:0c:de:75:91:97:
         3c:51:81:88:7b:10:1a:e4:ee:06:60:db:02:78:0f:03:db:cf:
         a4:c1:4e:74:38:ef:fd:4a:81:9a:58:79:c7:30:fe:40:b8:20:
         09:e8:b9:57:7d:d0:88:7e:6d:68:6d:37:5b:29:ef:30:e8:e3:
         32:27:32:d6:49:32:76:fa:cb:8e:a1:8b:2f:70:bb:c7:15:6c:
         5c:5e:a0:01:57:43:44:69:52:4c:ad:72:63:f4:70:e7:ed:9b:
         be:f6:c2:b9:04:b0:12:05:c0:18:dc:81:3f:4c:c4:ea:70:10:
         af:b7:c8:f7:df:f7:bf:91:52:70:d5:28:35:1d:08:f3:21:f5:
         d0:e1:e7:ca
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgIDAnVqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI1MTExNTE0MDUwOVoXDTI3MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxQUY0Q0MxMTAvBgNVBAUTKDdFMzlGRTIxRjlEMTU4NUNBRUY1OThG
QjdENkEwNkVCRkQzMTA2QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDnH01JPaSTBLts5i8Spgaz6Cs97qfRro81DZpTmogZ47aZJljUPeBR+bBROs/a
I5lVVPygobIsk2QCmDHOTG/FZ260y3SQV2DNbVyA0p8xc9/R8jfrA3b75F4+nfcz
JCGKBAYcRzcFguocMfXbJL2s+PpvsxJwTdLWeqHrzq1n9/DOVxgX3XB9rB2iyIor
UJdKYOF4SxIliJ7ilHCUtSKbe+kpMUgP6PXwWtO89j7XVp1+69F4HoerFNgHJbPE
RWoNsxseIcUneWcGKeaCXN7OQc7ZIvnvY7Y1rUNDn2gSxn8codrT66CIRY1SO56i
0YXg4Y0ndi1183xdpTM4ThzTAgMBAAGjggMSMIIDDjAdBgNVHQ4EFgQUfjn+IfnR
WFyu9Zj7fWoG6/0xBsIwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUFGNENDL0Q1ODFDMUJDOTE0ODExRUY4N0VBREQ1MkM0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTFBRjRDQy9ENTgxQzFCQzkxNDgxMUVGODdFQURENTJDNEY5QUUwMi9mam4tSWZu
UldGeXU5Wmo3ZldvRzZfMHhCc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAlcdMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN9HjAMA0G
CSqGSIb3DQEBCwUAA4IBAQCUygnN6OML4sAnyc5Fn0roV7iMS+v5CVnV1uI71bhH
NprLepE9twvSFUnMDxquRr48SJORRSnIOhJznPt44r5m/OTIyWQ7p6SBI/jII7Oz
Rabt8/2tQf0FbqfVi+y9Pgc5ZACsthrfRWYcYZ+dzuIXueEK8hZaiI1tDN51kZc8
UYGIexAa5O4GYNsCeA8D28+kwU50OO/9SoGaWHnHMP5AuCAJ6LlXfdCIfm1obTdb
Ke8w6OMyJzLWSTJ2+suOoYsvcLvHFWxcXqABV0NEaVJMrXJj9HDn7Zu+9sK5BLAS
BcAY3IE/TMTqcBCvt8j33/e/kVJw1Sg1HQjzIfXQ4efK
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:37:52 2025 by rpki-client