This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
File:                     gMgrnUJmF5jRouALzqsG8-Tho14.cer (raw, json)
Hash identifier:          0P4u9b3KX8LLZ8G/QDoqwIY4tl4r28W6RKR2LBesSTs=
Subject key identifier:   80:C8:2B:9D:42:66:17:98:D1:A2:E0:0B:CE:AB:06:F3:E4:E1:A3:5E
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       4F51
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 14 Jan 2026 06:47:38 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    IP: 151.158.8.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 02:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20305 (0x4f51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Jan 14 06:47:38 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A915B358, serialNumber=80C82B9D42661798D1A2E00BCEAB06F3E4E1A35E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:45:64:1b:cc:27:2b:af:b4:cf:3b:78:08:
                    31:37:78:f3:b4:43:04:2b:7d:b7:2e:82:61:8b:c6:
                    9f:90:3e:f7:ad:42:64:58:3b:5d:c3:f1:f3:30:f9:
                    9d:43:62:3a:cf:03:ef:2b:3f:5c:5f:45:9d:9b:dc:
                    2f:a6:8d:3a:30:be:ca:53:a4:f5:e5:a4:53:d5:72:
                    af:51:4d:a3:19:c8:58:66:ae:8e:1f:5c:b8:3a:21:
                    65:0e:5d:e3:8c:14:5c:13:59:92:c9:40:8d:26:5e:
                    f9:50:7a:52:1b:f3:ed:b5:38:c2:3b:90:de:6f:41:
                    59:88:27:16:55:1a:3d:da:13:47:96:98:5b:6e:e7:
                    b7:54:66:ea:2c:56:69:0b:70:56:64:2c:7d:84:bb:
                    49:4c:05:b3:c4:57:5c:73:bd:0e:20:70:60:f4:c7:
                    f4:d1:fb:91:5c:2f:0f:73:7b:e0:b6:73:06:31:8e:
                    69:79:e5:46:5e:1d:a3:51:b1:0c:1b:33:62:eb:a0:
                    28:69:03:80:dc:22:c7:67:29:77:66:9a:97:27:32:
                    3b:b6:6e:86:1c:14:3a:82:0a:16:2c:0c:90:0f:49:
                    74:57:df:35:b8:94:ee:90:ba:6b:cb:62:42:21:5f:
                    12:13:a0:f5:4b:4c:ee:be:cf:03:b3:93:74:15:4c:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C8:2B:9D:42:66:17:98:D1:A2:E0:0B:CE:AB:06:F3:E4:E1:A3:5E
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:05:fa:15:27:59:f2:9f:28:67:af:20:1b:0a:ae:54:3b:b8:
         a5:20:03:ef:c1:72:83:08:1b:27:cc:7c:b2:b7:52:c5:62:3a:
         48:75:5e:77:f2:9f:57:34:6c:73:55:a7:99:04:64:8f:b9:d5:
         a1:e0:2f:a0:d4:e7:c5:a0:62:ad:9a:98:da:2e:27:71:9d:68:
         8e:70:79:67:3c:98:c5:64:38:5d:d7:cf:18:5a:ac:d9:18:61:
         61:85:9f:24:c8:ba:4c:3c:25:47:7f:e5:cc:49:48:2d:73:2b:
         e2:d7:9e:e5:65:d4:d2:85:c7:5f:da:44:9b:92:3d:37:73:5b:
         71:a6:98:c1:3c:1c:06:4f:ac:8f:6d:a2:1c:19:6b:e8:ea:89:
         6c:2c:83:be:f7:5b:a3:32:c4:b0:fd:c9:1f:24:7b:34:0c:0e:
         a9:a6:af:4e:2d:ca:fc:d2:d1:4a:3c:8c:9e:ff:e5:6f:10:0d:
         3f:9c:23:33:37:0a:f3:26:08:ef:2b:7e:c9:f0:c5:c2:b8:4e:
         d6:20:ca:00:72:48:ab:08:c9:fc:95:61:bd:87:21:e7:d0:04:
         ca:6a:7a:41:04:5f:4d:a5:aa:6d:20:d6:7b:70:e0:a5:66:1f:
         05:26:80:73:fe:57:e3:13:65:2d:47:4c:10:12:5b:72:d0:f8:
         68:f2:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:07:26 2026 by rpki-client