This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf ta/apnic/apnic-rpki-root-iana-origin.cer
File:                     apnic-rpki-root-iana-origin.cer (raw, json)
Hash identifier:          zjS0W69YYc/d1U6/9QW5mlnuCXMnL2zvpa/++5bmIBw=
TAL:                      apnic
Subject key identifier:   0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
Certificate issuer:       /CN=apnic-rpki-root-iana-origin
Certificate serial:       2406CA3D12C85B81F9D5023A32E605CC9C7E8883
Manifest:                 rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
caRepository:             rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Tue 27 Jan 2026 23:11:29 +0000
Certificate not after:    Thu 27 Jan 2028 23:11:29 +0000
Subordinate resources:    AS: 1 -- 4294967295
                          IP: 0.0.0.0/0
                          IP: ::/0
Validation:               OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:06:ca:3d:12:c8:5b:81:f9:d5:02:3a:32:e6:05:cc:9c:7e:88:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=apnic-rpki-root-iana-origin
        Validity
            Not Before: Jan 27 23:11:29 2026 GMT
            Not After : Jan 27 23:11:29 2028 GMT
        Subject: CN=apnic-rpki-root-iana-origin
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:56:48:be:b5:60:00:18:ba:61:22:53:cc:
                    fc:a8:7d:84:4d:52:0b:d3:58:a5:c5:99:73:20:bf:
                    49:61:23:91:30:de:42:9a:d7:fc:57:62:5b:94:87:
                    9a:95:2a:a0:39:31:a3:bd:28:c4:b2:25:7b:de:ce:
                    bb:cd:84:08:ec:2f:e2:48:e6:fd:ea:e7:f7:fe:cf:
                    3a:36:a6:f1:0e:21:50:18:df:2a:1b:b4:4d:71:d8:
                    15:b9:49:40:89:d9:7c:5b:1b:cb:34:8f:15:86:a6:
                    c0:07:9b:92:83:f3:2b:2d:e4:8e:bd:74:63:6b:4e:
                    35:56:9b:40:c4:88:5c:1b:30:cc:be:50:09:47:09:
                    2b:60:af:cc:a3:c3:f8:13:6a:d2:42:0c:2a:0a:06:
                    9e:d1:e6:d8:d4:2b:09:dc:28:df:8b:ae:c2:d6:7c:
                    3b:a1:7a:89:26:8b:ef:5c:9e:1a:a4:69:84:bf:c6:
                    b3:db:73:8b:0b:a2:a2:e7:85:25:fc:4e:b1:93:6d:
                    bb:04:5b:6d:a8:55:77:60:cb:4a:c7:8d:87:70:27:
                    03:55:96:72:d3:59:fb:26:3c:ef:3b:c7:1c:69:79:
                    87:22:04:7b:ba:d9:ea:84:14:4d:36:ae:57:73:96:
                    61:6e:4a:d4:b0:db:62:26:6a:d9:cd:59:60:53:a3:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                0B:9C:CA:90:DD:0D:7A:8A:37:66:6B:19:21:7F:E0:D8:40:37:B7:A2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1-4294967295

            sbgp-ipAddrBlock: critical
                IPv4:
                  0.0.0.0/0
                IPv6:
                  ::/0

    Signature Algorithm: sha256WithRSAEncryption
         3b:52:96:46:13:32:63:cd:a5:40:79:2b:eb:f4:b5:67:58:04:
         aa:4d:08:88:ed:b1:fd:72:be:d0:4d:ea:e8:4b:2b:bb:38:30:
         c6:df:9b:f0:a7:ed:be:94:5a:b3:28:c9:e9:03:6b:1f:ee:ac:
         6c:00:9e:54:0f:4b:72:68:bc:e8:46:1a:22:c0:f2:ee:77:22:
         7e:b2:c8:b4:c2:09:ae:4c:cd:ac:15:6f:c8:65:ec:cc:a6:8a:
         19:31:d6:42:79:99:c5:49:a9:a4:1f:7d:69:10:e9:8b:ca:99:
         4d:af:16:f8:69:c2:7e:42:d6:db:8a:97:e8:03:8c:1a:0d:29:
         88:d4:92:f5:13:a4:03:8f:bf:c1:91:10:e1:19:88:44:a8:74:
         08:d5:d4:7b:16:2d:7d:aa:29:89:2a:6c:f3:43:1a:d0:84:84:
         94:f0:3f:8f:e8:af:f9:ef:13:c8:24:96:df:66:6d:51:c1:a9:
         7a:13:56:cc:6b:dc:11:98:d5:25:dd:ce:30:02:c7:76:a7:c9:
         a0:92:c7:61:a3:10:48:54:fa:9e:6e:70:09:57:df:fc:97:9b:
         dd:e8:1d:88:02:41:a6:b7:ca:72:51:29:80:64:f7:3a:04:c1:
         6f:ce:d4:e2:67:4a:93:b4:e1:6a:d7:d6:0f:ff:8f:57:4e:e3:
         cc:88:df:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----