This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
File:                     dE87SIpTzJP_qdl19F0f9emsipw.cer (raw, json)
Hash identifier:          eeny4OdNUM7PdPrb5WBQ8q1aALy1uEOKJeok2REwWcw=
Subject key identifier:   74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       71E8
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 09 Jan 2026 14:07:12 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 161.248.28.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29160 (0x71e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jan  9 14:07:12 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:69:2d:65:03:7f:64:ee:9f:4e:9b:b5:14:
                    b8:a4:70:28:2f:54:73:00:c3:c3:f6:65:8f:a0:73:
                    32:7b:32:43:b9:3d:a9:03:a2:a8:8e:28:48:e8:7b:
                    e2:12:df:b8:7e:dc:90:c5:6d:5f:1d:f6:a8:63:a2:
                    98:e8:a0:ac:53:36:9a:76:26:66:bb:37:35:f8:2b:
                    5e:19:ea:02:d3:f2:f3:83:73:a4:ac:e8:57:7b:8b:
                    15:db:1f:65:2f:48:92:da:fa:3c:44:6d:3f:34:1a:
                    91:5a:81:4a:ab:c1:d8:4e:9c:ab:41:5e:ab:2f:ae:
                    66:a8:bd:ff:47:4f:da:60:94:26:09:4d:ec:d7:52:
                    ee:50:8e:33:82:e4:3e:c2:c4:3b:94:4a:2f:bd:5e:
                    1a:5b:71:a5:aa:58:ee:54:a9:09:60:22:c4:ad:c4:
                    6d:52:08:76:b6:45:bf:98:0a:fe:14:d0:39:90:c1:
                    ab:0b:05:6a:61:85:16:fd:b3:10:e6:39:0d:8b:c3:
                    17:ab:bc:de:4c:6b:81:e7:de:0a:c1:e8:7e:b7:9a:
                    37:1e:f2:ea:e2:e3:50:e5:aa:0f:3c:f8:3d:7b:d9:
                    0c:3c:46:a5:04:b3:45:cb:b7:71:97:2d:09:65:91:
                    78:6d:25:50:04:1f:95:0c:4b:d8:53:fe:c5:66:30:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:95:00:25:7a:51:3b:ad:77:24:3c:98:f8:f7:5d:b2:c7:d1:
         e7:85:43:b0:fd:6c:a0:30:89:88:7f:37:3e:48:42:cc:4b:61:
         c8:00:d0:8f:c4:e5:20:fa:30:f4:fc:59:09:6c:c1:ee:e1:21:
         cd:13:1b:5f:57:16:a9:1d:92:74:51:80:08:63:82:6a:40:e6:
         27:a4:c2:07:a1:84:ce:14:a9:6d:77:95:64:73:ee:be:4c:d1:
         8e:5d:87:77:0f:07:ea:b3:67:48:8e:2d:0e:66:8a:59:bb:88:
         1e:8d:51:e0:31:a5:da:57:ad:06:0c:4d:87:8b:76:bd:fd:52:
         82:51:83:c4:c3:45:1b:e1:1d:e0:f1:77:15:f4:53:b0:02:55:
         c2:5a:b2:e2:19:f0:0a:18:24:be:b4:e2:87:20:f2:29:17:1f:
         b3:1b:75:da:cc:86:91:9e:d4:69:1a:38:de:11:c9:38:fb:14:
         a7:aa:bb:c1:8c:a6:d4:af:1e:b6:e8:90:7c:3b:06:77:f2:30:
         e1:90:3a:21:fb:b1:64:c8:cd:c7:72:79:38:50:3c:63:27:d5:
         24:56:d9:44:41:e5:e1:de:a9:68:68:2b:5f:af:b7:51:ef:e8:
         4f:2c:ce:dd:e8:c5:ac:93:2e:62:f3:8d:8a:65:5b:99:4b:f6:
         b5:cd:d3:ff
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICcegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjYwMTA5MTQwNzEyWhcNMjcwMzMxMDAwMDAwWjBGMREwDwYD
VQQDDAhBOTFDQzBDOTExMC8GA1UEBRMoNzQ0RjNCNDg4QTUzQ0M5M0ZGQTlEOTc1
RjQ1RDFGRjVFOUFDOEE5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMzcaS1lA39k7p9Om7UUuKRwKC9UcwDDw/Zlj6BzMnsyQ7k9qQOiqI4oSOh74hLf
uH7ckMVtXx32qGOimOigrFM2mnYmZrs3NfgrXhnqAtPy84NzpKzoV3uLFdsfZS9I
ktr6PERtPzQakVqBSqvB2E6cq0Feqy+uZqi9/0dP2mCUJglN7NdS7lCOM4LkPsLE
O5RKL71eGltxpapY7lSpCWAixK3EbVIIdrZFv5gK/hTQOZDBqwsFamGFFv2zEOY5
DYvDF6u83kxrgefeCsHofreaNx7y6uLjUOWqDzz4PXvZDDxGpQSzRcu3cZctCWWR
eG0lUAQflQxL2FP+xWYwBF0CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBR0TztIilPM
k/+p2XX0XR/16ayKnDAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0MwQzkvQkIyNzIzNzY1RkI0MTFGMDgyMDM0NDdEQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MUNDMEM5L0JCMjcyMzc2NUZCNDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBU
ekpQX3FkbDE5RjBmOWVtc2lwdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaH4HDANBgkqhkiG9w0BAQsFAAOCAQEABJUAJXpRO613JDyY+Pdd
ssfR54VDsP1soDCJiH83PkhCzEthyADQj8TlIPow9PxZCWzB7uEhzRMbX1cWqR2S
dFGACGOCakDmJ6TCB6GEzhSpbXeVZHPuvkzRjl2Hdw8H6rNnSI4tDmaKWbuIHo1R
4DGl2letBgxNh4t2vf1SglGDxMNFG+Ed4PF3FfRTsAJVwlqy4hnwChgkvrTihyDy
KRcfsxt12syGkZ7UaRo43hHJOPsUp6q7wYym1K8etuiQfDsGd/Iw4ZA6IfuxZMjN
x3J5OFA8YyfVJFbZREHl4d6paGgrX6+3Ue/oTyzO3ejFrJMuYvONimVbmUv2tc3T
/w==
-----END CERTIFICATE-----
Generated at Sun Jan 18 01:55:26 2026 by rpki-client