This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
File:                     dt6sBgRg9vilvVgpnFOryvmx01g.cer (raw, json)
Hash identifier:          Sx5Rw48b199us/uWD316m1cCSCR/SUfyUKUbaPniXUw=
Subject key identifier:   76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7066
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Wed 17 Dec 2025 14:18:46 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 165.69.0.0/16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Jan 2026 07:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28774 (0x7066)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Dec 17 14:18:46 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ba:a9:fa:b9:18:45:c4:98:78:80:eb:91:61:
                    7d:6c:ec:4a:1e:b7:08:b2:cd:a6:87:07:1d:a6:2e:
                    35:cc:cb:c3:ec:e5:dd:cd:c8:a6:15:4a:0c:98:65:
                    60:e3:3c:3c:a1:a8:49:2f:0e:33:da:37:91:da:65:
                    40:e0:6e:be:9a:72:dd:18:26:fb:71:13:26:b4:f5:
                    8b:b2:1e:4d:cd:00:37:55:6e:10:c6:d4:d2:fc:2b:
                    7b:4d:82:cd:49:c2:07:f4:4e:46:e3:2f:32:15:45:
                    54:9e:f6:78:0b:8e:6e:b2:cb:a7:f8:1f:b3:38:4f:
                    3a:8f:c1:f1:0d:64:f0:ac:68:52:42:84:51:c3:1f:
                    25:17:ba:81:e7:7a:28:7e:5a:b7:09:5e:ad:5b:c6:
                    bf:94:71:71:e8:b1:1a:e2:24:12:40:85:29:87:6a:
                    bc:af:4e:94:31:ce:cf:15:43:67:c8:0f:4d:89:c2:
                    b2:6c:74:60:6a:c3:71:c9:df:f1:ca:27:ab:da:93:
                    3a:a9:43:67:3c:2d:40:31:27:a1:da:ad:ff:7f:d3:
                    a7:78:16:99:15:eb:e6:69:27:00:fc:3c:48:9b:48:
                    86:48:d2:7c:2e:c1:fc:0c:a6:de:83:fb:1b:69:19:
                    d5:e3:ce:8a:28:7c:cc:3b:99:6d:95:12:81:1e:ac:
                    99:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.69.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c3:21:b7:d6:d1:76:d0:ff:de:f3:b4:d5:e4:cc:94:5f:a0:e1:
         d8:cc:a3:44:81:6b:11:2b:80:92:81:0e:98:07:0a:e2:85:db:
         22:f5:6f:1c:05:57:61:5f:83:b2:07:cc:f5:b1:04:4b:d4:d6:
         61:bb:8a:7a:d4:32:5f:f7:55:35:02:5a:6d:b4:40:57:1f:59:
         b7:c9:21:29:90:60:ac:4b:0d:fb:ad:43:d0:35:62:46:e2:cb:
         bf:16:14:53:73:57:c9:5b:13:06:c0:6e:b2:6f:a8:cf:18:c7:
         29:d6:8a:e6:3d:39:5b:d1:a8:aa:7a:39:e2:19:74:25:9a:8e:
         4c:a2:0e:1f:cc:7b:99:fa:ac:59:4a:3e:f4:f0:90:19:35:6a:
         0d:1a:c0:4e:d5:c0:25:2a:ce:e4:bc:72:3a:3e:41:a8:e9:21:
         7e:2f:50:dc:ef:60:32:43:59:ac:cc:57:e8:c9:e0:33:cc:a8:
         ef:54:53:6c:fb:cc:01:2c:e2:b0:ad:8d:8c:6d:ca:25:72:2a:
         94:53:e9:d3:47:dc:3a:ef:2f:59:f1:2f:83:cd:b3:39:47:ec:
         2a:17:5a:a8:fb:8a:94:2a:c8:ec:69:83:cf:8a:d4:db:c0:bf:
         cc:64:75:f9:07:60:e8:96:0a:08:bc:5d:4d:66:8c:77:bf:5b:
         c5:eb:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 14:05:11 2026 by rpki-client