This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer
File:                     IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer (raw, json)
Hash identifier:          AXCpwPaJVq52HdAOWvsJOSY4G7MVscj4Fc1kEjjFarc=
Subject key identifier:   20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       711E
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 30 Dec 2025 04:03:49 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 144.79.234.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28958 (0x711e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Dec 30 04:03:49 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A918C2EB, serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6a:49:75:2e:05:45:53:da:74:b1:d4:6e:b6:
                    43:6d:00:ec:91:20:eb:8d:da:02:e7:08:01:60:f0:
                    79:2b:81:98:f2:4c:99:21:1b:35:6c:d3:00:8d:23:
                    24:92:76:0b:75:3d:f1:ba:d0:75:25:5b:03:6d:98:
                    d7:61:c4:1f:46:1e:c4:e1:75:67:66:c8:2f:cd:b0:
                    60:94:da:0f:3e:cd:61:66:93:b2:34:49:29:a2:0f:
                    fe:4d:26:e8:09:30:e2:d9:4f:c7:5d:ae:5c:63:e3:
                    56:f0:26:28:7f:86:4a:0b:9c:02:4e:71:e4:1e:ab:
                    1e:c3:2e:64:04:44:35:ac:43:47:8e:f1:e2:d5:ad:
                    39:eb:d8:ef:6c:e5:2f:d7:f1:ea:30:8f:ac:05:58:
                    ea:e9:bb:64:c0:49:a2:dc:8a:f7:b8:cd:2a:65:6a:
                    de:bf:2c:39:ad:74:89:31:d4:c2:5e:96:b6:59:f1:
                    2d:6b:3a:dc:4a:96:2c:a5:bb:cf:de:c1:c0:17:7b:
                    7b:ac:14:36:cf:ee:ad:22:6b:9f:95:90:12:f4:23:
                    cc:79:16:a5:2e:19:01:13:1e:cc:98:eb:4a:9f:38:
                    bb:3b:f6:53:1b:a6:94:a9:6e:a3:da:7c:32:2f:10:
                    b6:8a:d4:94:ee:3a:5b:6a:b7:63:c8:b4:7a:f7:fd:
                    cf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:4f:1c:80:42:1f:a8:45:f4:a0:b1:25:0b:60:3e:98:3f:f7:
         6b:69:75:26:bf:2d:9e:68:73:be:79:12:73:13:ff:dd:26:3f:
         3c:00:59:15:aa:79:17:66:70:b2:4b:0c:57:89:6e:2b:ac:50:
         a6:c1:75:e4:08:6b:f9:ca:f6:14:c5:c0:52:7f:a5:9f:dd:bc:
         14:14:f3:0e:d2:0a:9a:8a:c1:39:2d:04:b7:96:cb:7b:c1:88:
         88:68:3c:5a:62:02:a2:18:5c:e3:f5:4b:7c:b5:78:74:57:0a:
         31:f5:bb:82:29:13:f9:57:c4:73:86:68:54:9f:56:2c:eb:80:
         56:aa:dc:cc:fb:7a:5b:64:1d:51:a5:b6:25:5a:bd:2b:00:d4:
         a5:4b:5c:6a:69:59:c1:a3:fc:62:4b:17:68:2a:8e:49:f1:ca:
         c3:6d:ef:aa:b8:c4:48:1f:f4:10:fd:2e:c4:b3:75:1b:9a:11:
         d1:4a:9c:2c:a3:7b:11:b3:e0:45:bf:9e:75:ff:e7:4e:33:37:
         25:d0:fd:ea:2e:c7:d6:b5:90:b1:b8:7d:18:9e:db:b0:c8:54:
         85:d3:9b:d6:04:89:12:fe:40:dd:e8:f6:0a:73:b5:94:e5:43:
         9d:87:d6:da:d0:13:c0:4d:8a:cb:47:03:d5:0a:bd:10:f5:5d:
         3c:b3:c1:d9
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICcR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUxMjMwMDQwMzQ5WhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDDAhBOTE4QzJFQjExMC8GA1UEBRMoMjAwM0VFNDA1MjI5RDg4Qzk0OEI3NkRD
MTk1RDQzMEJDMDIwQUYxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOJqSXUuBUVT2nSx1G62Q20A7JEg643aAucIAWDweSuBmPJMmSEbNWzTAI0jJJJ2
C3U98brQdSVbA22Y12HEH0YexOF1Z2bIL82wYJTaDz7NYWaTsjRJKaIP/k0m6Akw
4tlPx12uXGPjVvAmKH+GSgucAk5x5B6rHsMuZARENaxDR47x4tWtOevY72zlL9fx
6jCPrAVY6um7ZMBJotyK97jNKmVq3r8sOa10iTHUwl6WtlnxLWs63EqWLKW7z97B
wBd7e6wUNs/urSJrn5WQEvQjzHkWpS4ZARMezJjrSp84uzv2UxumlKluo9p8Mi8Q
torUlO46W2q3Y8i0evf9z38CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQgA+5AUinY
jJSLdtwZXUMLwCCvHjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEMyRUIvODk5NzI1MTJFNTM0MTFGMDkxMkNGRDU2NkU2RjU2QkMvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThDMkVCLzg5OTcyNTEyRTUzNDExRjA5MTJDRkQ1NjZFNkY1NkJDL0lBUHVRRklw
Mkl5VWkzYmNHVjFEQzhBZ3J4NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZBP6jANBgkqhkiG9w0BAQsFAAOCAQEABk8cgEIfqEX0oLElC2A+
mD/3a2l1Jr8tnmhzvnkScxP/3SY/PABZFap5F2ZwsksMV4luK6xQpsF15Ahr+cr2
FMXAUn+ln928FBTzDtIKmorBOS0Et5bLe8GIiGg8WmICohhc4/VLfLV4dFcKMfW7
gikT+VfEc4ZoVJ9WLOuAVqrczPt6W2QdUaW2JVq9KwDUpUtcamlZwaP8YksXaCqO
SfHKw23vqrjESB/0EP0uxLN1G5oR0UqcLKN7EbPgRb+edf/nTjM3JdD96i7H1rWQ
sbh9GJ7bsMhUhdOb1gSJEv5A3ej2CnO1lOVDnYfW2tATwE2Ky0cD1Qq9EPVdPLPB
2Q==
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:50:44 2026 by rpki-client