This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I2o4zV7FL3Doi4BtcV63sELNfr8.cer
File:                     I2o4zV7FL3Doi4BtcV63sELNfr8.cer (raw, json)
Hash identifier:          0yZz95AgMtMaDfIW2yl02qmOwjqDQxJSps1L9hsUzDo=
Subject key identifier:   23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       70CC
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 24 Dec 2025 09:56:11 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 144.79.182.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28876 (0x70cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Dec 24 09:56:11 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A918120B, serialNumber=236A38CD5EC52F70E88B806D715EB7B042CD7EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:6f:7c:b4:9d:65:d6:1a:db:91:f3:0b:5b:
                    a4:b3:be:90:be:43:79:24:78:00:1e:40:2e:15:2b:
                    cd:5d:00:16:d1:0d:b7:b0:a4:da:90:59:d2:64:09:
                    32:12:31:fc:6f:13:37:99:e9:51:3d:17:05:4a:05:
                    ac:9e:4d:1f:20:4e:83:50:dc:32:74:ad:c4:a2:77:
                    29:fc:04:ff:14:fa:03:76:be:c3:ce:23:a6:81:9a:
                    da:f1:6c:f9:b4:3f:2e:8e:ff:20:4f:d6:58:dc:fd:
                    29:f2:ec:e2:0f:e9:d8:f7:4f:e1:ae:2e:49:ee:e7:
                    db:14:c2:05:68:17:45:1b:cd:cb:62:a2:37:f4:7c:
                    88:6c:38:6c:22:d5:2d:b9:5b:a4:e0:02:34:45:70:
                    bf:37:b4:b7:4f:0c:86:5d:83:a1:8b:c2:6d:1d:7b:
                    c1:52:64:a0:05:0f:ae:dc:6f:8b:28:f0:52:58:1c:
                    ca:25:74:50:f9:ab:2b:0f:2b:8a:18:7b:ab:ba:44:
                    35:ed:bc:64:6d:67:74:a5:6f:f3:81:12:2b:5f:d8:
                    4d:61:2f:a5:42:87:df:e3:42:4d:1d:bc:52:da:12:
                    42:3c:b0:6e:d5:a8:7e:33:d1:5b:fc:fc:66:fe:26:
                    10:12:3d:59:b4:0f:7e:02:25:0f:3c:56:80:70:88:
                    64:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6A:38:CD:5E:C5:2F:70:E8:8B:80:6D:71:5E:B7:B0:42:CD:7E:BF
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918120B/C42E343EE0AE11F096D7E288496F56BC/I2o4zV7FL3Doi4BtcV63sELNfr8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:fc:05:0c:61:0c:d6:7c:75:8d:9e:f0:48:76:7f:92:80:a6:
         d5:b4:b8:08:12:61:d6:0f:5c:ff:04:17:d7:fb:2e:1f:f6:5c:
         ca:98:40:f9:96:e0:43:d0:e9:ab:f0:2c:b6:54:83:83:bc:d1:
         e2:16:ff:2e:66:44:4f:d9:94:41:65:b2:c6:cc:60:80:02:be:
         bb:8a:82:e2:11:bc:e5:3a:78:f9:28:bf:47:a3:4b:ee:00:2a:
         03:78:e4:82:dc:53:64:9b:23:ac:a5:d4:02:2a:5e:a1:da:da:
         93:f8:33:35:8e:62:97:71:40:b1:b4:b1:45:43:ea:99:97:c4:
         16:8c:b0:60:16:37:1a:68:1c:75:6d:e6:e2:09:12:8d:bf:b0:
         4c:f1:e9:d0:1b:23:4e:ab:75:2f:b9:c5:9c:65:55:6d:9b:eb:
         07:58:b0:e3:cb:fd:3e:42:7f:28:9a:c8:89:90:71:54:f7:f2:
         9b:c6:31:58:f9:ae:f9:58:75:0b:bb:15:2d:ec:3a:c1:b5:cb:
         f3:bf:c3:c7:8a:57:9d:31:b0:28:1f:e2:34:75:c6:80:4d:6e:
         09:19:28:ac:59:93:29:18:64:87:cf:ea:9d:8f:fe:13:ae:eb:
         e3:61:1d:ee:d2:04:15:d9:9d:c1:f8:8e:d5:e5:ab:9b:c9:4f:
         22:b0:88:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 08:05:04 2026 by rpki-client