This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
File:                     dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer (raw, json)
Hash identifier:          S6z0qx+whxXRqsRpGZMaQQW0D/aWQx1GeDjl8qDYzBc=
Subject key identifier:   75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7205
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 12 Jan 2026 10:17:42 +0000
Certificate not after:    Fri 01 May 2026 00:00:00 +0000
Subordinate resources:    IP: 160.30.94.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29189 (0x7205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jan 12 10:17:42 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=A913270F, serialNumber=750D6AD849977279569525E3DAFC972FCB782233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:1a:48:89:05:08:17:35:21:da:0f:c4:4a:
                    02:ce:6d:35:40:33:be:bd:d4:6d:ce:6f:e1:4a:39:
                    f7:e0:b5:0d:7c:c2:7a:74:1b:ca:72:c9:58:d9:15:
                    5d:4d:90:8b:06:e5:eb:07:e4:ac:7a:36:ce:ea:11:
                    ee:78:ec:99:54:12:76:ed:c0:67:c1:ff:17:b3:06:
                    57:58:9b:9a:92:34:2f:57:42:0b:24:a0:20:a6:07:
                    97:1d:97:de:5f:5b:56:37:6a:50:36:cc:81:d3:cb:
                    54:b9:42:ba:77:df:b8:c1:a9:d2:1a:0b:22:f4:f2:
                    1b:7a:11:4d:57:69:10:c2:da:75:f9:ea:72:9e:cd:
                    47:16:6b:de:9c:0e:60:ba:77:fb:09:d9:63:ed:86:
                    f5:9a:0d:15:0b:d4:d9:70:df:46:25:55:0b:74:75:
                    fb:ad:00:45:cf:b6:4b:76:f9:04:6e:50:6c:c8:f2:
                    71:d2:ad:50:3d:60:34:eb:e7:e3:f0:26:09:11:8a:
                    ff:19:64:d7:63:64:98:12:e8:7c:82:09:39:c9:75:
                    e8:2f:2a:27:57:91:df:d0:a9:f8:9d:fa:a9:f9:81:
                    55:ba:ef:2c:30:ce:27:ae:78:79:f8:7c:89:06:7c:
                    58:7d:e5:00:3c:7f:bc:7c:26:95:8f:48:7c:4a:c5:
                    d9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:0a:1c:af:09:9f:36:04:35:1c:d2:11:d2:00:f2:d3:29:
         6f:45:ed:c4:00:47:47:79:ac:69:31:5d:f7:29:56:58:b8:fd:
         d7:a4:b5:e8:cc:e3:5b:2e:17:1c:ba:02:14:17:37:25:d6:5b:
         05:0e:2f:5d:ce:37:cf:cd:73:f6:70:ed:8d:2c:d6:6e:af:b4:
         0c:f3:d0:26:be:89:71:5e:c1:29:bd:6b:21:48:d6:78:c5:42:
         a4:f2:e3:73:87:2c:ed:23:d0:cf:1f:0f:72:12:0e:4e:04:97:
         01:23:0b:c4:a0:37:5a:23:ea:99:65:26:ef:89:ae:b6:5d:f9:
         6c:73:4b:60:1c:e5:b7:4c:b2:66:f2:4c:5a:0d:34:6b:97:4d:
         9e:4c:49:e7:90:58:30:f0:26:8a:a4:30:ef:03:44:ce:1e:ed:
         c8:f2:ac:8f:30:a6:37:9b:9c:b1:d7:72:f3:97:e4:19:2d:fa:
         ac:1f:a9:5f:ca:9b:b5:27:13:30:ad:18:de:36:5f:67:6f:da:
         43:33:f9:8a:3f:d6:de:e7:fa:9a:f8:1f:2e:11:f9:dd:da:5c:
         17:3f:bd:be:11:a7:4d:9b:f6:d7:4d:de:53:92:fa:56:a4:42:
         5f:87:bf:29:d9:0a:bc:b9:ff:5f:06:0c:c8:c3:3b:ef:1b:80:
         37:70:67:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:50:42 2026 by rpki-client