This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer
File:                     E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer (raw, json)
Hash identifier:          DY44PhqP9XmZGp5lfM+V/SJzhZgYm1X4ks6hnj6ullA=
Subject key identifier:   13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7233
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 13 Jan 2026 23:13:09 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 138.252.154.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29235 (0x7233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jan 13 23:13:09 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A91A68C0, serialNumber=13C2AB779B5A8DBBB396C9E5845817930BBE16AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:83:37:4c:dc:4f:e4:2d:2c:95:94:b6:5d:
                    ec:77:ab:d4:22:45:23:db:30:79:5d:43:e8:ba:d0:
                    ba:fc:0e:01:f6:59:d6:90:a7:b3:9b:2a:b3:95:49:
                    5d:fe:cb:4d:16:65:bc:61:6f:30:12:94:b1:0c:a7:
                    5d:1d:6e:f3:76:70:20:1d:0c:a3:fe:2f:27:77:46:
                    35:a9:e3:87:67:70:fc:12:f1:10:a4:d5:9e:c1:b6:
                    86:7b:92:26:a3:6b:07:f2:12:10:cc:b0:21:63:25:
                    c1:19:8c:92:6a:0b:dc:76:ea:f0:be:b6:01:6b:1e:
                    6f:a7:a2:36:fc:3b:63:46:b3:43:67:6b:74:d2:b8:
                    3f:c1:02:b7:63:96:86:7f:12:a9:8d:e5:3b:f2:18:
                    32:07:3e:d8:78:03:13:fb:8e:13:15:3c:fb:60:38:
                    1b:d5:50:b4:db:b1:02:43:25:0f:00:3f:1f:d1:90:
                    5b:12:86:43:d4:87:3e:39:ca:01:88:59:f8:29:91:
                    66:57:3c:3a:03:c0:0d:3e:61:bc:72:3d:6c:85:f7:
                    f1:fd:59:6b:15:a9:63:23:ec:ee:03:4f:ed:eb:a3:
                    81:2a:96:a9:10:e4:11:ab:83:dc:3a:7b:c8:50:33:
                    4b:f6:b8:83:9d:cd:5b:67:27:30:e8:44:fd:23:9e:
                    72:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:86:23:c2:c5:d8:3a:5a:08:c1:c0:1e:55:00:f1:7b:20:6d:
         b0:ab:47:59:c2:4c:2a:0a:86:c4:c2:1d:b5:85:48:18:8c:45:
         0f:77:7b:0c:f4:71:8d:1d:3d:e1:a2:4b:00:a4:9a:03:f5:ff:
         29:c0:c3:6e:b7:4c:21:5e:36:da:f2:8d:da:30:d8:7e:c4:f0:
         bd:ed:89:d7:8b:d9:15:2d:87:c1:96:be:25:6f:1e:35:b2:bb:
         eb:81:f2:a2:a8:96:12:bb:d1:49:ba:c5:6a:00:b9:cf:7a:d6:
         a4:5a:b0:78:f5:c8:09:27:6a:ce:6e:d1:50:e3:b6:83:16:72:
         5b:af:cb:79:0d:44:9d:92:55:c9:2e:17:b3:06:8c:87:a5:bb:
         c8:97:ff:f8:5d:5e:d4:7d:72:fc:3d:54:29:e5:43:ed:1b:86:
         4e:08:b6:84:35:ac:40:69:5b:4c:e3:6e:31:af:1b:dc:e5:96:
         3a:ce:22:06:b5:c8:a0:f2:db:06:12:e7:5e:e7:2b:08:52:f0:
         f5:b6:cb:8a:ec:54:fd:d4:c1:fe:ad:fa:fd:32:0b:48:30:59:
         27:a1:d1:4a:ad:46:31:74:b9:2b:9b:32:fe:b2:e5:d1:17:30:
         e2:13:de:96:6a:27:d8:57:0d:8a:e9:72:30:4a:78:e0:f5:de:
         d6:1d:38:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:50:42 2026 by rpki-client