Certificate
$ rpki-client -vvvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
File: NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer (raw, json)
Hash identifier: Ka/hMnFpUfieIivYNR3mFu306S4sJ3rxuH94mxIxU+s=
Subject key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 80D9
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 18 Aug 2026 00:22:31 +0000
Certificate not after: Tue 31 Aug 2027 00:00:00 +0000
Subordinate resources: IP: 104.204.48.0/21
IP: 167.179.26.0/24
IP: 205.209.31.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32985 (0x80d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Aug 18 00:22:31 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:a5:40:ca:60:69:9b:a7:c8:ae:4d:30:8d:
6f:32:0a:2d:0f:33:a6:e3:56:50:4c:58:29:58:9d:
e7:c4:5b:ee:d9:a6:22:29:cf:f4:09:44:b8:5e:5c:
bb:8f:a2:a5:90:a3:c4:a7:3b:1b:f8:74:2d:44:3e:
af:d4:4b:7c:f6:ff:b5:8c:ad:72:f2:fc:3b:ec:d2:
af:c5:5a:31:76:ab:c6:3d:e3:3e:46:13:91:80:f7:
be:2b:76:e3:95:ed:60:e3:78:6f:5e:c8:eb:a1:bf:
cd:9e:d8:b4:6c:74:f5:2a:e6:da:cb:dc:71:0e:29:
ce:b7:37:3e:d6:97:9e:85:2a:62:5c:06:1b:d5:09:
fe:7b:0f:ba:f1:49:e3:58:11:b7:10:37:7e:4c:71:
b4:16:b3:8f:0c:d2:bc:e9:a9:30:91:15:cd:71:a7:
8c:c8:4a:ec:47:74:27:5f:9a:46:c0:10:69:53:da:
00:01:ce:49:00:a6:2f:40:9b:de:e6:08:7f:6c:e1:
f7:a8:22:f4:d1:c8:43:7e:37:3d:ff:f6:d0:29:8c:
28:b7:91:bd:7b:99:49:dc:b5:45:73:0f:92:79:ff:
c4:23:29:11:93:2b:31:8b:06:e6:59:ea:86:9c:c0:
3d:bb:a1:67:dd:97:43:30:a4:ce:4c:fb:f5:1e:99:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
104.204.48.0/21
167.179.26.0/24
205.209.31.0/24
Signature Algorithm: sha256WithRSAEncryption
23:56:f3:01:3e:1c:7e:b3:71:7c:e9:ad:0c:71:71:cf:42:e7:
ad:92:dc:d3:79:59:06:bd:38:26:e5:c4:8a:8e:56:1c:48:5c:
25:8e:2a:91:d5:75:b1:c9:5b:54:a9:bc:7d:0c:a6:52:3e:02:
e1:41:f4:04:ce:a4:bb:5f:a5:67:7c:07:35:94:70:a0:c7:14:
49:c8:14:62:2a:15:e3:e0:7d:32:0c:aa:af:d6:57:12:10:c0:
d0:d1:c8:f6:31:fa:2b:5f:98:08:69:ae:b1:05:c3:8c:d8:3d:
5d:5f:e4:36:0c:41:5a:6c:c0:a7:7e:d9:fb:9c:cf:9a:d6:20:
42:6a:28:8f:96:8e:30:3a:f7:97:19:d1:fc:5e:c9:e9:65:31:
7e:1d:1a:ea:7b:a5:97:51:2b:d8:9f:44:0b:1b:c3:04:14:95:
33:d8:d6:88:6c:0f:37:26:26:32:b4:21:0f:e9:e7:26:2d:f1:
60:8e:2c:53:a7:97:36:29:d7:61:9c:dd:2e:df:24:f5:e8:20:
a4:b2:c9:46:03:ee:46:ee:dd:2d:fc:48:07:a0:30:64:af:da:
c6:c0:fc:84:50:92:07:56:d8:3b:01:01:69:61:ba:81:53:28:
e4:26:8b:a0:80:2f:a2:04:28:ee:fc:fb:b0:24:f6:18:66:b3:
db:da:a8:c0
-----BEGIN CERTIFICATE-----
MIIGCjCCBPKgAwIBAgIDAIDZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEyg3NDAxNjVBODBEMTA3MTk3MEFCQzA5QzAyQjcxQzFB
QzdDMUQ2RTBFMB4XDTI2MDgxODAwMjIzMVoXDTI3MDgzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxNEM3MjUxMTAvBgNVBAUTKDM0ODE4QkNGMEQ4NEUxNTk5QkQ5OTgx
Nzk5NUU1RUMzOUIxQjAxNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2Q6VAymBpm6fIrk0wjW8yCi0PM6bjVlBMWClYnefEW+7ZpiIpz/QJRLheXLuP
oqWQo8SnOxv4dC1EPq/US3z2/7WMrXLy/Dvs0q/FWjF2q8Y94z5GE5GA974rduOV
7WDjeG9eyOuhv82e2LRsdPUq5trL3HEOKc63Nz7Wl56FKmJcBhvVCf57D7rxSeNY
EbcQN35McbQWs48M0rzpqTCRFc1xp4zISuxHdCdfmkbAEGlT2gABzkkApi9Am97m
CH9s4feoIvTRyEN+Nz3/9tApjCi3kb17mUnctUVzD5J5/8QjKRGTKzGLBuZZ6oac
wD27oWfdl0MwpM5M+/UembVXAgMBAAGjggL/MIIC+zAdBgNVHQ4EFgQUNIGLzw2E
4Vmb2ZgXmV5ew5sbAUswHwYDVR0jBBgwFoAUdAFlqA0QcZcKvAnAK3HBrHwdbg4w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2
NjExRTI4QUM4ODM3QzcyRkQxRkYyL2RBRmxxQTBRY1pjS3ZBbkFLM0hCckh3ZGJn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRDNzI1L0FDNkNEMTVDMTM5OTExRjE5QzI0NzBCMUIzRUU1MjhFLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE0QzcyNS9BQzZDRDE1QzEzOTkxMUYxOUMyNDcwQjFCM0VFNTI4RS9OSUdMency
RTRWbWIyWmdYbVY1ZXc1c2JBVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8EHDAa
MBgEAgABMBIDBANozDADBACnsxoDBADN0R8wDQYJKoZIhvcNAQELBQADggEBACNW
8wE+HH6zcXzprQxxcc9C562S3NN5WQa9OCblxIqOVhxIXCWOKpHVdbHJW1SpvH0M
plI+AuFB9ATOpLtfpWd8BzWUcKDHFEnIFGIqFePgfTIMqq/WVxIQwNDRyPYx+itf
mAhprrEFw4zYPV1f5DYMQVpswKd+2fucz5rWIEJqKI+WjjA695cZ0fxeyellMX4d
Gup7pZdRK9ifRAsbwwQUlTPY1ohsDzcmJjK0IQ/p5yYt8WCOLFOnlzYp12Gc3S7f
JPXoIKSyyUYD7kbu3S38SAegMGSv2sbA/IRQkgdW2DsBAWlhuoFTKOQmi6CAL6IE
KO78+7Ak9hhms9vaqMA=
-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:08 2026 by rpki-client