This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer
File:                     lMZD4W0Ep3OLxytbEH4FsWFhQBM.cer (raw, json)
Hash identifier:          JVZ+NI0XMNE1HBbavHpqbQsWt0NY0mTTDNXK90M7z6g=
Subject key identifier:   94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       7260
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Fri 16 Jan 2026 11:50:48 +0000
Certificate not after:    Mon 31 Aug 2026 00:00:00 +0000
Subordinate resources:    IP: 165.99.181.0/24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29280 (0x7260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jan 16 11:50:48 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=A91CAA8A, serialNumber=94C643E16D04A7738BC72B5B107E05B161614013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:ac:12:18:dc:a9:a9:c0:6e:0d:bd:75:56:
                    97:0e:19:fd:f1:73:bd:10:56:ce:db:b5:27:2e:0c:
                    84:9c:e5:f0:4a:f8:c6:94:d8:fd:85:fc:67:8d:27:
                    75:9f:2a:93:ca:96:bf:fc:3a:dd:84:e0:b2:ab:40:
                    1c:0b:9c:8c:6e:65:b8:dd:1d:1f:47:be:c5:df:b7:
                    c7:69:b6:b8:82:25:77:67:e0:61:e5:66:cf:23:01:
                    d3:3b:c4:d6:f4:ec:6e:cc:a6:d2:e6:ff:dd:56:9d:
                    a7:33:75:47:5d:9b:0b:b4:fb:73:bc:3c:b8:7b:9c:
                    a0:aa:a9:75:6d:08:84:5f:3e:b6:7b:63:8e:e1:6f:
                    06:97:74:6c:2c:2a:1e:17:30:b8:20:30:f2:17:1c:
                    c7:af:a4:4c:7b:f7:d1:49:7b:51:47:e4:b8:29:39:
                    b3:14:28:09:85:09:6f:c2:ed:ac:4b:40:b5:be:37:
                    67:02:57:dc:08:e2:a1:11:f3:b9:5d:c9:82:61:49:
                    d5:8e:f2:be:88:88:98:89:9d:d1:1f:2f:eb:2b:e9:
                    43:a8:a1:2a:c8:08:04:cf:d0:98:8f:a4:71:08:19:
                    3e:c8:28:5b:a8:b1:3c:f7:ef:03:28:32:b9:c8:dd:
                    f2:ae:b0:66:d6:39:18:80:6d:01:ed:5a:d6:91:71:
                    b6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C6:43:E1:6D:04:A7:73:8B:C7:2B:5B:10:7E:05:B1:61:61:40:13
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91CAA8A/96C2FB08F2D111F0989AD8CE3C6F56BC/lMZD4W0Ep3OLxytbEH4FsWFhQBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:71:6e:99:74:e5:e2:70:35:d8:00:64:3f:12:c2:1c:3c:fc:
         3b:d6:d8:48:4f:2e:1f:69:2b:b0:38:53:ec:7d:bd:53:99:09:
         d5:07:ec:b6:2c:2e:7b:c8:38:b4:49:12:e2:16:d9:99:fb:6f:
         a8:f7:cf:5b:5f:ca:d4:8f:70:4e:c6:17:e4:8c:e5:a6:06:5c:
         dc:d9:1a:f4:52:53:36:f4:65:4f:21:6c:ac:da:f4:bc:ac:2b:
         9a:cf:97:7b:0d:2a:dc:34:e2:16:74:7f:95:ca:88:c1:9b:b8:
         30:73:76:1b:87:81:0d:18:1b:4c:02:cd:ee:ee:0b:8b:7d:3a:
         3a:05:86:fa:2d:73:70:d4:f6:36:6e:51:27:e4:cd:80:90:bd:
         29:a3:9d:e7:f2:e0:2e:d9:2c:9f:7f:6e:19:f9:73:62:aa:2a:
         80:c2:1a:b7:11:8e:86:7c:ac:5f:de:c5:b9:92:44:73:08:f2:
         37:88:e3:a9:0e:93:f0:1b:d0:5e:2c:50:f8:7e:dc:90:c1:6b:
         44:86:6c:6c:8b:bc:0c:cd:d0:21:ed:7c:63:c1:54:26:dc:74:
         39:66:d9:f4:14:44:d5:02:94:c3:64:bc:9f:b0:11:6d:ba:af:
         f6:f8:e8:09:94:0c:1a:a1:60:a1:00:61:8d:ce:84:be:d8:c6:
         d6:50:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:50:43 2026 by rpki-client