This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
File:                     l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer (raw, json)
Hash identifier:          XBBwEXFw8J5MEUnuz3vbj4rCN233S252vkQBWvkcFms=
Subject key identifier:   97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7161
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 12:36:34 +0000
Certificate not after:    Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 161.248.62.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Feb 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29025 (0x7161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jan  2 12:36:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cf:52:4e:f1:ff:65:27:12:3c:b2:6f:4a:3b:
                    da:08:fe:b2:a9:5e:ed:ed:d5:8d:06:e4:11:93:08:
                    0b:89:e1:fe:d4:2f:ad:48:10:69:f4:fd:94:39:68:
                    15:3c:2d:e2:ae:85:21:61:9a:d4:ce:c5:44:65:f9:
                    da:30:bd:78:bc:34:cb:8a:bd:72:d2:a7:b8:db:34:
                    ea:02:94:dc:d0:a2:37:a1:f2:d6:25:64:b2:fa:ac:
                    29:a3:6f:e8:f0:24:2d:06:c3:4a:4a:90:ae:59:8d:
                    34:2c:05:87:ee:da:01:74:6b:7a:fd:25:34:b2:ad:
                    f7:82:0e:f6:1a:09:6e:cb:24:5d:11:3d:96:10:eb:
                    87:4d:e1:df:0a:5f:51:68:2e:c5:6c:b4:1b:26:72:
                    51:5d:87:53:2c:ce:43:60:c2:0c:d8:b6:c9:18:ff:
                    0f:cb:60:fd:e3:17:e5:2c:3c:5f:e4:87:5b:18:a0:
                    02:7a:e7:49:fc:c1:df:9d:3e:cb:6a:64:91:6d:51:
                    ce:3b:c8:3e:43:a7:e0:e7:c8:2a:b6:5c:50:1b:58:
                    08:09:d5:80:7d:e9:af:3c:c0:e3:cd:f9:ff:93:87:
                    82:06:10:39:10:8f:12:3d:ec:c8:88:08:8e:eb:94:
                    a3:d2:fb:d9:44:32:6c:e7:56:bc:0a:3a:87:68:b8:
                    09:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:be:ab:10:37:f3:67:53:f2:61:e8:f4:18:9e:85:cf:95:38:
         55:b4:66:0b:ac:e1:01:e5:50:6e:0f:90:79:47:0f:e4:89:a5:
         ca:05:8e:ae:00:63:84:06:c4:64:7d:0c:f2:4c:64:76:31:86:
         df:76:c1:0c:87:a6:51:f5:28:55:e3:76:e1:57:ea:b4:9c:b5:
         09:ed:9e:71:9b:7a:cc:09:0e:9e:05:a2:bc:69:5a:34:8a:9b:
         61:9b:17:4e:09:ce:85:b5:e1:2f:11:c5:db:e0:98:8c:86:4f:
         b0:09:1b:55:03:c4:6b:c2:ee:58:6b:af:a7:26:07:8c:12:c4:
         35:dc:21:f7:d7:e8:3c:99:ed:ca:ff:8a:09:d5:11:69:b0:78:
         5c:71:fb:f1:0c:9e:bd:d9:50:4d:07:79:9d:0e:ff:ec:d4:8c:
         0b:86:99:da:4f:67:9c:e1:e2:2d:4f:33:23:ee:20:51:44:9d:
         ab:bc:6c:37:dc:c7:29:8d:ba:53:bc:8e:14:2a:f8:fc:f6:ec:
         77:2d:d0:f0:39:05:e7:80:ff:54:1c:fa:82:be:45:5e:b0:f4:
         2d:24:29:89:95:57:5f:85:89:e5:4c:af:f3:b3:d0:26:fc:b1:
         ce:d7:90:9a:c9:f2:dd:c1:2e:c4:33:b4:cd:20:18:85:a7:42:
         54:0f:18:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:27:58 2026 by rpki-client