This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
File:                     Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (raw, json)
Hash identifier:          8nj9/XcODr2Ctn+EDqVgwmIFq75BSgQmoX+2Jbps6ns=
Subject key identifier:   12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer:       /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial:       4A18
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 10 Feb 2026 03:01:03 +0000
Certificate not after:    Tue 02 Mar 2027 00:00:00 +0000
Subordinate resources:    IP: 154.8.120.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Feb 2026 03:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18968 (0x4a18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
        Validity
            Not Before: Feb 10 03:01:03 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=A91289A2, serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:ea:78:61:ab:31:ff:46:af:a5:c6:03:d3:
                    f5:19:d8:0e:72:51:fa:3e:91:31:eb:cc:8a:93:e4:
                    19:e8:64:5b:68:2e:33:78:05:da:f4:d5:66:8b:f2:
                    ec:73:9d:52:53:6f:15:3e:e5:58:8c:e6:21:7e:f3:
                    72:49:3b:38:e6:fa:70:9a:c4:d8:79:f6:2e:42:a8:
                    eb:40:61:e3:63:d3:6b:93:95:e8:d8:1c:80:ad:9a:
                    e8:0a:0a:36:d5:e1:0a:a4:45:4f:d2:77:be:ea:44:
                    8c:44:65:f3:53:61:77:4e:bd:90:21:eb:3c:9b:56:
                    a9:64:c4:e1:5c:8b:fe:2d:f6:29:8f:92:94:22:d1:
                    ae:39:0a:78:c1:42:c4:9c:7e:00:58:ac:c3:51:77:
                    56:46:cb:17:99:69:76:af:f3:4e:ca:60:11:f7:c5:
                    7e:df:f1:46:a2:4d:5a:91:03:00:07:ea:e3:39:ad:
                    fd:ae:63:dc:ef:b4:d6:2c:72:1b:8a:e7:a1:bd:03:
                    41:f6:fe:03:2d:90:9f:1e:81:e6:ff:6e:12:95:ae:
                    74:eb:d7:82:5e:db:3b:c1:e7:9b:94:da:c6:50:71:
                    d6:df:33:54:e8:a6:39:5e:e0:19:85:cd:58:6e:c2:
                    f1:a7:e3:ec:79:ad:bc:60:82:b5:a1:ab:06:6a:a0:
                    87:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
            X509v3 Authority Key Identifier:
                keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.8.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:86:78:08:7d:07:92:47:7e:35:c1:eb:b6:a2:a7:14:ed:0c:
         e0:6e:58:91:92:d4:b0:9e:05:39:00:c8:cc:2d:c5:b4:6e:41:
         07:5f:0a:db:4d:a3:2d:ce:69:92:2c:f3:37:79:00:3a:f0:5c:
         cb:5f:5c:e1:62:e7:cb:e9:bf:1b:f1:5b:41:c3:5f:14:f9:2d:
         14:0e:f1:67:27:72:3a:3f:9e:03:74:86:2e:b4:1f:88:ed:a7:
         5f:fd:c2:cb:d4:24:5e:fa:d3:27:6e:6b:c5:6a:4b:c2:69:f5:
         b1:12:20:38:a5:37:fa:bd:9e:ee:48:44:4f:39:c6:78:62:fe:
         be:05:ef:88:b4:a2:2f:15:bb:e1:65:bc:b4:0c:d9:92:e6:98:
         0b:26:d4:56:6d:78:ae:c2:2d:3e:9a:e1:34:f5:a6:eb:fa:f5:
         3c:93:c0:03:08:f7:2d:28:db:f0:97:0e:a7:7a:6f:e7:1c:cb:
         cd:2e:f8:f0:c5:d1:c6:90:bc:85:20:1d:08:7c:8f:58:2f:41:
         c3:f0:31:d6:d8:d6:0b:2d:bc:10:3f:5e:e2:93:8c:01:6e:28:
         1b:2e:80:da:78:40:16:f0:a5:fd:5a:6a:26:0a:5b:b2:86:bc:
         3e:03:ee:f9:9d:97:4d:4b:bd:9f:05:cb:75:b7:01:34:02:c5:
         29:f6:e6:46
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICShgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYwMjEwMDMwMTAzWhcNMjcwMzAyMDAwMDAwWjBGMREwDwYD
VQQDDAhBOTEyODlBMjExMC8GA1UEBRMoMTJCNkU1RTE4RjdEQzEwMDFDRTA4QUYx
M0REMDRENzNDNjBFOUI5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL1d6nhhqzH/Rq+lxgPT9RnYDnJR+j6RMevMipPkGehkW2guM3gF2vTVZovy7HOd
UlNvFT7lWIzmIX7zckk7OOb6cJrE2Hn2LkKo60Bh42PTa5OV6NgcgK2a6AoKNtXh
CqRFT9J3vupEjERl81Nhd069kCHrPJtWqWTE4VyL/i32KY+SlCLRrjkKeMFCxJx+
AFisw1F3VkbLF5lpdq/zTspgEffFft/xRqJNWpEDAAfq4zmt/a5j3O+01ixyG4rn
ob0DQfb+Ay2Qnx6B5v9uEpWudOvXgl7bO8Hnm5TaxlBx1t8zVOimOV7gGYXNWG7C
8afj7HmtvGCCtaGrBmqgh98CAwEAAaOCAvMwggLvMB0GA1UdDgQWBBQStuXhj33B
ABzgivE90E1zxg6bnDAfBgNVHSMEGDAWgBQ0j5ubkqcsz9NvPHDzVnVzPMjqIjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2
MTFFMkE2MkY4NzdDNzJGRDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJ
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjg5QTIvQjlDQ0QzOUUwNjJDMTFGMUJBQzg5M0ZDMjYzRDhDNjcvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTI4OUEyL0I5Q0NEMzlFMDYyQzExRjFCQUM4OTNGQzI2M0Q4QzY3L0VyYmw0WTk5
d1FBYzRJcnhQZEJOYzhZT201dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEApoIeDANBgkqhkiG9w0BAQsFAAOCAQEAk4Z4CH0Hkkd+NcHrtqKn
FO0M4G5YkZLUsJ4FOQDIzC3FtG5BB18K202jLc5pkizzN3kAOvBcy19c4WLny+m/
G/FbQcNfFPktFA7xZydyOj+eA3SGLrQfiO2nX/3Cy9QkXvrTJ25rxWpLwmn1sRIg
OKU3+r2e7khETznGeGL+vgXviLSiLxW74WW8tAzZkuaYCybUVm14rsItPprhNPWm
6/r1PJPAAwj3LSjb8JcOp3pv5xzLzS748MXRxpC8hSAdCHyPWC9Bw/Ax1tjWCy28
ED9e4pOMAW4oGy6A2nhAFvCl/VpqJgpbsoa8PgPu+Z2XTUu9nwXLdbcBNALFKfbm
Rg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 15:42:29 2026 by rpki-client