This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer
File:                     gMq7xd4_e5Mn6sTbqNk2U6EiIQA.cer (raw, json)
Hash identifier:          YL4t/vbBysIEYEcq2HumfswMilRFWSdUzQb/A6EsIzo=
Subject key identifier:   80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00
Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8
Certificate issuer:       /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
Certificate serial:       4F70
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 16 Jan 2026 10:14:26 +0000
Certificate not after:    Sat 01 May 2027 00:00:00 +0000
Subordinate resources:    IP: 151.158.34.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 02:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20336 (0x4f70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8
        Validity
            Not Before: Jan 16 10:14:26 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=A91B3316, serialNumber=80CABBC5DE3F7B9327EAC4DBA8D93653A1222100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:12:6a:30:00:7c:68:1e:41:dd:1c:fa:a2:29:
                    be:6c:e1:4e:bf:b3:e8:da:e5:c3:26:e2:71:85:f7:
                    75:67:35:e3:cd:5d:39:3f:0e:b9:e6:48:78:03:34:
                    27:34:4d:02:ed:a0:46:d0:d4:b6:f1:c6:dd:79:0c:
                    a1:70:e2:70:bb:d3:ae:c5:9e:57:9e:6e:a2:fb:96:
                    e1:45:ad:5e:d8:44:d4:1a:70:1b:ec:82:ec:ba:7b:
                    ad:e0:58:e3:3d:06:a4:29:17:ae:a9:9a:5a:6e:18:
                    ff:1a:62:be:d3:27:82:44:2f:91:cf:8f:1b:38:71:
                    07:b5:ee:e4:ce:51:75:2a:ac:b9:a0:ff:64:1a:b0:
                    0b:15:33:3f:81:9e:66:f8:83:a4:d3:b7:e9:79:06:
                    d6:41:08:64:47:7a:77:15:de:64:11:c4:03:82:9f:
                    e4:57:80:47:34:a9:3e:78:fb:6d:ce:5e:45:72:e0:
                    ef:1b:65:3a:0c:3c:45:7e:6b:d2:d3:4b:cf:04:a3:
                    64:a7:4e:30:84:c9:da:80:88:ea:24:eb:4a:75:ef:
                    23:ac:13:e2:0a:8b:9b:d5:fe:ee:be:22:7e:7e:e7:
                    94:2c:1f:b0:c6:e6:40:a1:1b:7b:68:9d:94:55:52:
                    d0:60:c9:67:8b:32:5d:b7:e4:72:ec:81:13:0c:c4:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CA:BB:C5:DE:3F:7B:93:27:EA:C4:DB:A8:D9:36:53:A1:22:21:00
            X509v3 Authority Key Identifier:
                keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91B3316/2068C062F2C411F08B84E445396F56BC/gMq7xd4_e5Mn6sTbqNk2U6EiIQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:ca:bf:ad:81:c9:26:48:bb:34:72:74:b5:c9:b9:00:d5:
         ed:48:27:9e:46:f7:49:23:c0:c5:f6:2d:7e:d2:c8:89:89:80:
         74:86:2f:78:25:72:8d:25:56:e2:e6:d5:66:13:1a:71:f3:85:
         3d:bc:c7:1d:47:9a:0b:00:36:b8:6d:b6:34:44:85:dc:f3:7c:
         80:9e:8d:e0:22:72:39:81:2c:45:9c:04:c1:1a:91:6e:63:3d:
         61:0a:63:e4:37:2d:98:b8:47:6a:6a:94:6c:06:df:a2:c7:b9:
         a4:5d:92:fd:4c:78:73:f1:46:ba:88:a2:f5:74:e6:bb:43:26:
         83:8d:6e:c8:dd:27:5d:e8:70:c0:f6:af:f5:bc:c1:a7:bd:31:
         3f:70:99:76:32:1a:78:d8:e9:b8:12:31:39:c1:99:e9:d6:34:
         56:0e:55:e7:43:c1:ce:12:c8:a7:00:cb:f7:16:45:59:60:e4:
         e5:28:3e:92:f6:76:3c:04:58:8f:91:05:b1:21:f0:c6:46:9f:
         98:d4:a8:d5:25:57:fe:e0:40:2a:0f:cc:1f:5d:9d:02:dd:9a:
         c1:e4:3b:fe:d1:26:6e:e2:f4:6e:58:cc:1c:e2:af:0a:ad:72:
         de:29:0a:0e:b0:e7:bd:e6:68:b2:c8:48:8d:83:f4:25:69:d9:
         cb:f1:9d:7e
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICT3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw
REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2
MTU5RTc2RjgwHhcNMjYwMTE2MTAxNDI2WhcNMjcwNTAxMDAwMDAwWjBGMREwDwYD
VQQDDAhBOTFCMzMxNjExMC8GA1UEBRMoODBDQUJCQzVERTNGN0I5MzI3RUFDNERC
QThEOTM2NTNBMTIyMjEwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJESajAAfGgeQd0c+qIpvmzhTr+z6NrlwybicYX3dWc1481dOT8OueZIeAM0JzRN
Au2gRtDUtvHG3XkMoXDicLvTrsWeV55uovuW4UWtXthE1BpwG+yC7Lp7reBY4z0G
pCkXrqmaWm4Y/xpivtMngkQvkc+PGzhxB7Xu5M5RdSqsuaD/ZBqwCxUzP4GeZviD
pNO36XkG1kEIZEd6dxXeZBHEA4Kf5FeARzSpPnj7bc5eRXLg7xtlOgw8RX5r0tNL
zwSjZKdOMITJ2oCI6iTrSnXvI6wT4gqLm9X+7r4ifn7nlCwfsMbmQKEbe2idlFVS
0GDJZ4syXbfkcuyBEwzEgxcCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSAyrvF3j97
kyfqxNuo2TZToSIhADAfBgNVHSMEGDAWgBQM/Od4V/zwHznZmmK0qmLmFZ52+DAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2
MTFFMkEzRjI3RjdDNzJGRDFGRjIvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZn
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9EUHpuZUZmODhCODUyWnBpdEtwaTVoV2VkdmcuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjMzMTYvMjA2OEMwNjJGMkM0MTFGMDhCODRFNDQ1Mzk2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUIzMzE2LzIwNjhDMDYyRjJDNDExRjA4Qjg0RTQ0NTM5NkY1NkJDL2dNcTd4ZDRf
ZTVNbjZzVGJxTmsyVTZFaUlRQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZeeIjANBgkqhkiG9w0BAQsFAAOCAQEAnaXKv62BySZIuzRydLXJ
uQDV7Ugnnkb3SSPAxfYtftLIiYmAdIYveCVyjSVW4ubVZhMacfOFPbzHHUeaCwA2
uG22NESF3PN8gJ6N4CJyOYEsRZwEwRqRbmM9YQpj5DctmLhHamqUbAbfose5pF2S
/Ux4c/FGuoii9XTmu0Mmg41uyN0nXehwwPav9bzBp70xP3CZdjIaeNjpuBIxOcGZ
6dY0Vg5V50PBzhLIpwDL9xZFWWDk5Sg+kvZ2PARYj5EFsSHwxkafmNSo1SVX/uBA
Kg/MH12dAt2aweQ7/tEmbuL0bljMHOKvCq1y3ikKDrDnveZosshIjYP0JWnZy/Gd
fg==
-----END CERTIFICATE-----
Generated at Wed Jan 21 06:06:36 2026 by rpki-client