This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
File:                     E0_EgN8WeugPs_TETe9qm6mZWpE.cer (raw, json)
Hash identifier:          3227vlYcJMXIkFZdcg2aTgjp6OsqvieA8U6mylnu0EQ=
Subject key identifier:   13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7151
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 08:44:52 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 144.79.248.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29009 (0x7151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jan  1 08:44:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91736F5, serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:fa:f6:85:a5:ec:77:9b:5c:2d:db:66:b8:
                    8e:95:b2:c6:af:74:b6:8b:52:ad:d1:4d:bd:7d:1c:
                    20:f7:bb:a6:d7:f5:08:ae:08:d8:81:3e:f4:d5:82:
                    19:08:28:ae:f5:1c:7a:b7:2e:4e:ff:90:f5:7e:d7:
                    41:46:00:f2:85:e3:74:c8:e6:47:8e:ca:91:66:2f:
                    4e:85:00:1c:65:ec:9e:29:ec:7d:76:78:05:7f:e9:
                    a3:55:8f:e1:36:6f:31:91:67:3c:67:2f:02:01:73:
                    a2:4e:a6:2f:b8:67:a6:df:0d:79:b6:16:90:de:b9:
                    78:41:3c:1b:83:f5:a0:3f:a7:62:30:2a:e3:82:a9:
                    d5:39:4e:7d:88:12:f5:05:f2:a9:50:53:f4:4c:36:
                    2b:18:2d:60:0f:f7:06:00:30:66:7c:2d:43:95:da:
                    be:de:a7:2d:f5:3a:68:c1:da:03:63:f6:53:2b:6c:
                    a0:0c:5e:89:c5:50:68:5a:5c:75:9a:5c:6b:98:54:
                    29:cc:91:45:3d:ac:50:44:6d:18:04:79:b9:75:b9:
                    1d:5d:dc:ed:8c:dc:02:6d:72:44:94:82:08:9e:34:
                    46:59:c3:d6:70:6e:71:e1:2f:b2:88:9c:07:6b:8d:
                    3d:ca:b9:6b:0c:5e:a6:69:90:60:b5:af:62:cf:01:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:29:0d:88:fb:5f:a0:40:2a:38:f5:d5:ba:59:7e:b6:60:cb:
         26:83:ba:3e:e9:66:b2:8d:eb:c4:f7:3a:83:6d:10:f3:f5:72:
         73:15:aa:b5:92:36:d3:ad:6f:ad:b2:5d:b5:f4:35:f1:68:20:
         7b:e4:c4:ea:7a:02:7f:b0:81:fd:6e:9d:ae:25:13:59:91:24:
         46:05:6e:63:31:8e:df:0b:00:5e:4e:f9:d4:e9:07:87:78:44:
         69:a4:52:ef:05:fe:19:ad:da:d5:44:ad:32:d2:01:ca:7b:37:
         72:76:4a:37:23:f4:4a:34:de:f2:c2:73:bb:8e:c3:b1:86:42:
         d7:df:ef:f8:a9:4c:b7:34:a6:70:06:63:d7:5e:1f:a4:10:e0:
         37:5e:fa:98:85:b8:b8:c4:6b:27:85:22:5b:10:4c:1d:92:9a:
         58:23:b3:2f:e5:b5:db:fc:8a:80:97:34:8d:dd:f2:7e:37:2b:
         8b:d1:7b:6c:c9:e9:da:d1:41:e1:a2:76:3c:b3:7a:dc:c7:45:
         6f:26:53:f4:b3:d8:59:08:4a:5a:5d:32:b4:e7:fb:4e:9d:25:
         de:0e:1d:d0:80:ea:1d:cd:c4:36:33:0b:5c:a1:24:4a:35:ca:
         a8:ac:35:b4:f2:60:b7:3d:b8:f7:93:da:70:ce:01:06:2a:b8:
         84:0e:a5:ce
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICcVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMTAxMDg0NDUyWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDDAhBOTE3MzZGNTExMC8GA1UEBRMoMTM0RkM0ODBERjE2N0FFODBGQjNGNEM0
NERFRjZBOUJBOTk5NUE5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMBo+vaFpex3m1wt22a4jpWyxq90totSrdFNvX0cIPe7ptf1CK4I2IE+9NWCGQgo
rvUcercuTv+Q9X7XQUYA8oXjdMjmR47KkWYvToUAHGXsninsfXZ4BX/po1WP4TZv
MZFnPGcvAgFzok6mL7hnpt8NebYWkN65eEE8G4P1oD+nYjAq44Kp1TlOfYgS9QXy
qVBT9Ew2KxgtYA/3BgAwZnwtQ5Xavt6nLfU6aMHaA2P2UytsoAxeicVQaFpcdZpc
a5hUKcyRRT2sUERtGAR5uXW5HV3c7YzcAm1yRJSCCJ40RlnD1nBuceEvsoicB2uN
Pcq5awxepmmQYLWvYs8BqTsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQTT8SA3xZ6
6A+z9MRN72qbqZlakTAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzM2RjUvMjBEREUzOTJFNkVFMTFGMEFEMDk1NzkyNjM2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTczNkY1LzIwRERFMzkyRTZFRTExRjBBRDA5NTc5MjYzNkY1NkJDL0UwX0VnTjhX
ZXVnUHNfVEVUZTlxbTZtWldwRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZBP+DANBgkqhkiG9w0BAQsFAAOCAQEAZSkNiPtfoEAqOPXVull+
tmDLJoO6Pulmso3rxPc6g20Q8/VycxWqtZI2061vrbJdtfQ18Wgge+TE6noCf7CB
/W6driUTWZEkRgVuYzGO3wsAXk751OkHh3hEaaRS7wX+Ga3a1UStMtIByns3cnZK
NyP0SjTe8sJzu47DsYZC19/v+KlMtzSmcAZj114fpBDgN176mIW4uMRrJ4UiWxBM
HZKaWCOzL+W12/yKgJc0jd3yfjcri9F7bMnp2tFB4aJ2PLN63MdFbyZT9LPYWQhK
Wl0ytOf7Tp0l3g4d0IDqHc3ENjMLXKEkSjXKqKw1tPJgtz2495PacM4BBiq4hA6l
zg==
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:50:42 2026 by rpki-client