This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer
File:                     o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer (raw, json)
Hash identifier:          sx5azgRcgxt4x044HEXTrknurba2zv6WSQh1WByPIqU=
Subject key identifier:   A3:AD:82:B2:4C:7F:F8:EF:F5:4C:92:79:88:C7:CA:3A:5A:8C:44:5E
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       6EC4
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 25 Nov 2025 01:56:25 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 144.79.26.0/23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 07:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28356 (0x6ec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Nov 25 01:56:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=A914E3B7, serialNumber=A3AD82B24C7FF8EFF54C927988C7CA3A5A8C445E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:ac:28:37:47:56:ac:5a:a7:0c:c9:f0:f9:
                    55:f3:46:6d:50:b0:bc:01:e4:bb:fd:5f:bf:17:99:
                    86:62:bc:93:6c:c9:aa:0c:54:9b:e9:3c:63:c7:b3:
                    36:44:f4:b4:5f:9a:9f:bf:ea:90:2d:49:62:ad:cb:
                    96:95:0f:8d:35:46:36:2d:98:8d:18:46:07:5e:7c:
                    c2:9e:c3:69:67:15:ab:83:92:06:96:77:58:09:b7:
                    af:ef:1a:50:ca:fa:80:26:ba:a3:29:49:d1:47:ca:
                    8c:49:e6:cd:cd:e0:ea:96:75:61:95:93:08:d3:9f:
                    2f:9c:69:11:f4:31:1b:97:59:1c:9a:22:6d:1a:54:
                    b7:ee:3b:ec:61:49:61:58:bf:51:05:c2:28:78:86:
                    6a:72:4a:68:d0:17:f4:36:03:86:f8:73:7e:e9:c3:
                    f8:6a:75:52:36:07:06:51:39:95:3f:fa:1c:3b:62:
                    ed:ef:91:21:dd:c2:2d:38:5c:57:bb:09:71:6a:dc:
                    5e:4d:b0:26:40:a2:8b:b8:4e:6e:50:22:b7:97:68:
                    8a:52:16:a3:8a:e8:44:e8:67:86:5a:65:18:09:45:
                    81:72:1b:3d:67:78:c0:39:95:dd:23:e9:44:d7:01:
                    14:2e:4e:67:6c:96:ea:e4:27:18:f6:4b:17:9d:3a:
                    ca:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AD:82:B2:4C:7F:F8:EF:F5:4C:92:79:88:C7:CA:3A:5A:8C:44:5E
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:5a:b1:2d:9f:50:94:9a:05:40:9e:f9:b2:bc:54:22:59:48:
         20:67:52:c8:e2:d6:1e:81:f7:9f:cd:a9:0c:cd:36:1d:91:b6:
         07:0a:de:76:ce:1a:dc:77:98:54:10:8c:0d:15:92:75:b2:bb:
         cf:37:b0:4b:4b:a9:2e:d4:8a:1d:a2:33:88:1b:fc:59:8d:f1:
         3a:92:15:39:0c:98:5f:6d:9b:79:27:d7:28:2d:2d:c4:0b:0f:
         41:1b:ce:a8:fa:24:78:bf:44:9e:9d:a3:f0:c4:5f:36:b3:4a:
         2d:5a:e6:7f:91:e8:06:e5:37:83:90:2d:4f:1e:aa:b6:e4:d6:
         ff:a0:d3:4b:30:d8:6e:48:d2:17:82:cb:5e:35:ae:82:24:ca:
         0d:20:7b:54:be:64:d6:b7:8a:04:9e:a6:55:b0:f9:13:cb:c5:
         b8:e0:41:a7:89:e3:a6:dc:07:b3:1a:7b:68:e2:c6:ac:4c:d3:
         07:1f:a5:8c:5b:0e:c1:04:63:78:7a:60:f2:2a:0f:d4:0e:c6:
         c0:5c:ab:7e:16:0e:98:9d:3d:72:00:e3:8c:9b:00:65:b8:84:
         41:96:ea:dc:9d:c4:c8:bd:4b:73:52:03:4c:4e:e9:4d:3a:76:
         21:2f:9c:4a:fb:eb:cd:9d:5f:6d:81:11:f3:27:96:f0:c8:19:
         83:70:a2:d4
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICbsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjUxMTI1MDE1NjI1WhcNMjYwNzAxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0RTNCNzExMC8GA1UEBRMoQTNBRDgyQjI0QzdGRjhFRkY1NEM5Mjc5
ODhDN0NBM0E1QThDNDQ1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALCUrCg3R1asWqcMyfD5VfNGbVCwvAHku/1fvxeZhmK8k2zJqgxUm+k8Y8ezNkT0
tF+an7/qkC1JYq3LlpUPjTVGNi2YjRhGB158wp7DaWcVq4OSBpZ3WAm3r+8aUMr6
gCa6oylJ0UfKjEnmzc3g6pZ1YZWTCNOfL5xpEfQxG5dZHJoibRpUt+477GFJYVi/
UQXCKHiGanJKaNAX9DYDhvhzfunD+Gp1UjYHBlE5lT/6HDti7e+RId3CLThcV7sJ
cWrcXk2wJkCii7hOblAit5doilIWo4roROhnhlplGAlFgXIbPWd4wDmV3SPpRNcB
FC5OZ2yW6uQnGPZLF506yksCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBSjrYKyTH/4
7/VMknmIx8o6WoxEXjAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEUzQjcvRUY0NDIzMUVDOUExMTFGMEE3RTI3NjRCQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRFM0I3L0VGNDQyMzFFQzlBMTExRjBBN0UyNzY0QkM0RjlBRTAyL282MkNza3hf
LU9fMVRKSjVpTWZLT2xxTVJGNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAZBPGjANBgkqhkiG9w0BAQsFAAOCAQEAi1qxLZ9QlJoFQJ75srxU
IllIIGdSyOLWHoH3n82pDM02HZG2Bwreds4a3HeYVBCMDRWSdbK7zzewS0upLtSK
HaIziBv8WY3xOpIVOQyYX22beSfXKC0txAsPQRvOqPokeL9Enp2j8MRfNrNKLVrm
f5HoBuU3g5AtTx6qtuTW/6DTSzDYbkjSF4LLXjWugiTKDSB7VL5k1reKBJ6mVbD5
E8vFuOBBp4njptwHsxp7aOLGrEzTBx+ljFsOwQRjeHpg8ioP1A7GwFyrfhYOmJ09
cgDjjJsAZbiEQZbq3J3EyL1Lc1IDTE7pTTp2IS+cSvvrzZ1fbYER8yeW8MgZg3Ci
1A==
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:14:25 2025 by rpki-client