This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
File:                     YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer (raw, json)
Hash identifier:          JOz0uKV2hs7I1mUxsXeNih1dENLWxf9yS9mnJE3ZeD4=
Subject key identifier:   61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       028D9F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
caRepository:             rsync://rpki.sub.apnic.net/repository/A912C2530000/0/
Notify URL:               https://rrdp.sub.apnic.net/notification.xml
Certificate not before:   Fri 06 Feb 2026 06:53:46 +0000
Certificate not after:    Thu 28 May 2026 00:00:00 +0000
Subordinate resources:    IP: 14.137.224.0/19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Feb 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167327 (0x28d9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Feb  6 06:53:46 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:65:81:3e:99:06:75:ca:1d:e0:b7:06:62:
                    50:f1:24:8b:76:37:3a:58:75:be:f2:2b:6d:0a:ff:
                    da:91:81:d2:72:78:ac:47:04:4a:a6:d5:89:0a:74:
                    26:d5:d4:09:f8:0e:5a:e1:3b:da:cb:f7:af:2e:a1:
                    95:12:25:b1:c0:93:91:bf:5c:91:89:e7:e7:54:1e:
                    c9:81:81:9e:2d:87:74:50:3a:f7:c7:c1:59:1e:7b:
                    b0:43:7f:5d:e8:aa:1f:7d:59:59:72:c4:08:17:50:
                    e5:d1:9b:2e:4e:c8:29:fd:f5:f2:83:1b:e6:dc:82:
                    dc:96:20:57:8d:8c:37:e6:03:c7:06:1a:20:9d:ca:
                    a9:02:2e:12:2a:2a:fb:a1:8c:e5:1b:4e:ad:d5:6a:
                    0f:50:b8:20:d0:35:e5:42:b2:0c:5e:32:89:3f:46:
                    b7:d9:25:80:53:32:c4:30:b5:ac:a5:66:19:d1:67:
                    57:e4:48:48:80:56:74:64:2d:ef:c4:2e:24:ad:e1:
                    c8:24:bd:2a:5a:49:c6:bb:8b:6f:98:7b:71:60:2c:
                    91:d5:14:7f:9b:97:d7:ff:22:a2:e7:f2:4b:cd:0d:
                    a5:7b:9c:24:2e:97:fd:a2:ec:b3:e0:88:b6:38:82:
                    6b:93:d2:ad:51:13:4f:07:39:fc:97:e8:6e:9d:ee:
                    aa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/
                RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:fe:42:0d:57:60:c1:04:19:34:ec:8b:1f:bc:8d:d7:3c:
         37:8a:ae:0b:ce:78:9e:7e:7d:f7:86:2b:77:b7:a9:2c:8f:66:
         53:47:5e:96:39:91:7d:e2:ce:6b:4a:29:d2:28:0c:a8:4e:35:
         b1:26:16:a4:22:28:82:1b:53:96:e3:ee:dd:0c:ca:ed:9f:75:
         26:8d:d3:aa:32:bc:bc:a8:c0:3f:87:b3:9d:e0:42:f0:99:0a:
         b7:37:e0:fd:79:3a:b7:db:e1:de:7c:02:21:6e:83:9f:da:a4:
         cc:38:50:43:b8:f1:e3:fb:f7:5c:65:c5:0e:99:d0:86:b5:2c:
         c4:3b:41:f6:d0:13:e9:64:4c:1f:90:40:96:89:34:33:36:3c:
         e0:9f:88:12:43:fd:a6:70:d0:8d:b2:c6:9b:c8:39:a4:53:cf:
         4e:17:0b:75:83:d0:6c:22:ee:2c:d4:dc:15:b1:42:aa:6f:3e:
         a4:50:dc:15:e4:b3:67:1f:92:71:47:34:69:37:54:6f:b3:59:
         61:aa:8f:a0:35:12:ab:3c:bb:6a:90:a0:44:d0:91:06:a0:0a:
         c6:c1:70:d0:bf:b2:5c:15:0d:2d:a2:cb:e2:ce:e4:00:61:79:
         30:51:7b:c0:7a:fa:ce:75:41:09:f4:1d:a7:cc:86:5e:6b:1a:
         30:b1:eb:78
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIDAo2fMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTI2MDIwNjA2NTM0NloXDTI2MDUyODAwMDAwMFowSjEVMBMG
A1UEAwwMQTkxMkMyNTMwMDAwMTEwLwYDVQQFEyg2MTU2QkVDQTAzMTBDNzAwQjhC
NEFGNDNDNDcyRDcyMkJGNkUxNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0BVlgT6ZBnXKHeC3BmJQ8SSLdjc6WHW+8ittCv/akYHScnisRwRKptWJ
CnQm1dQJ+A5a4Tvay/evLqGVEiWxwJORv1yRiefnVB7JgYGeLYd0UDr3x8FZHnuw
Q39d6KoffVlZcsQIF1Dl0ZsuTsgp/fXygxvm3ILcliBXjYw35gPHBhogncqpAi4S
Kir7oYzlG06t1WoPULgg0DXlQrIMXjKJP0a32SWAUzLEMLWspWYZ0WdX5EhIgFZ0
ZC3vxC4kreHIJL0qWknGu4tvmHtxYCyR1RR/m5fX/yKi5/JLzQ2le5wkLpf9ouyz
4Ii2OIJrk9KtURNPBzn8l+hune6qAQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFGFW
vsoDEMcAuLSvQ8Ry1yK/bhaUMB8GA1UdIwQYMBaAFA5lpPX9NrW9aOs8kjQIl4yQ
eqefMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MHMGA1UdHwRsMGow
aKBmoGSGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9EbVdrOWYwMnRiMW82enlTTkFpWGpK
QjZwNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5Lzk4MDY1MkUwQjc3RTExRTdBOTZBMzk1
MjFBNEY0RkI0L0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1OC5jZXIwSgYDVR0g
AQH/BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5h
cG5pYy5uZXQvUlBLSS9DUFMucGRmMIH7BggrBgEFBQcBCwSB7jCB6zBBBggrBgEF
BQcwBYY1cnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTEy
QzI1MzAwMDAvMC8wbQYIKwYBBQUHMAqGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMu
bmV0L3JlcG9zaXRvcnkvQTkxMkMyNTMwMDAwLzAvNjE1NkJFQ0EwMzEwQzcwMEI4
QjRBRjQzQzQ3MkQ3MjJCRjZFMTY5NC5tZnQwNwYIKwYBBQUHMA2GK2h0dHBzOi8v
cnJkcC5zdWIuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAUOieAwDQYJKoZIhvcNAQELBQADggEBABcK/kINV2DB
BBk07IsfvI3XPDeKrgvOeJ5+ffeGK3e3qSyPZlNHXpY5kX3izmtKKdIoDKhONbEm
FqQiKIIbU5bj7t0Myu2fdSaN06oyvLyowD+Hs53gQvCZCrc34P15Orfb4d58AiFu
g5/apMw4UEO48eP791xlxQ6Z0Ia1LMQ7QfbQE+lkTB+QQJaJNDM2POCfiBJD/aZw
0I2yxpvIOaRTz04XC3WD0Gwi7izU3BWxQqpvPqRQ3BXks2cfknFHNGk3VG+zWWGq
j6A1Eqs8u2qQoETQkQagCsbBcNC/slwVDS2iy+LO5ABheTBRe8B6+s51QQn0HafM
hl5rGjCx63g=
-----END CERTIFICATE-----
Generated at Sat Feb 14 18:34:09 2026 by rpki-client